def __init__(self, options):
MasterRule.__init__(self, options)
self.short_name = "php"
self.long_name = "Checks security problems on php config file"
self.type = "config"
self.required_files = [
'/etc/php5/apache2/php.ini', '/etc/php5/cli/php.ini',
'/etc/php.ini'
]
def __init__(self, options):
MasterRule.__init__(self, options)
self.short_name = "postgresql"
self.long_name = "Check security problems on PostgreSQL configuration files"
self.type = "config"
self.required_files = [
'/var/lib/pgsql/data/pg_hba.conf',
'/var/lib/pgsql/data/postgresql.conf'
]
def __init__(self, options):
MasterRule.__init__(self, options)
self.short_name="apache"
self.long_name="Checks security problems on Apache config file"
self.type="config"
self.required_files = ['/etc/httpd/conf/httpd.conf',
'/etc/apache2/conf.d/security',
'/etc/apache2/apache2.conf']
options.add_option(
'--apache_conf',
action='append',
dest='apache_conf',
help='adds a apache configuration file to the list of files to' +
' analize'
)
def __init__(self, options):
MasterRule.__init__(self, options)
self.short_name = "postgresql"
self.long_name = "Check security problems on PostgreSQL configuration files"
self.type = "config"
self.required_files = [
'/var/lib/pgsql/data/pg_hba.conf',
'/var/lib/pgsql/data/postgresql.conf'
]
# Find config files in /etc:
pgconf = HnTool.modules.util.find_file('/etc/postgresql',
'postgresql.conf')
if pgconf: self.required_files.append(pgconf)
del (pgconf)
hbaconf = HnTool.modules.util.find_file('/etc/postgresql',
'pg_hba.conf')
if hbaconf: self.required_files.append(hbaconf)
del (hbaconf)
def __init__(self, options):
MasterRule.__init__(self, options)
self.short_name = "vsftpd"
self.long_name = "Checks security problems on VsFTPd servers"
self.type = "config"
self.required_files = ['/etc/vsftpd.conf', '/etc/vsftpd/vsftpd.conf']
def __init__(self, options):
MasterRule.__init__(self, options)
self.short_name="vsftpd"
self.long_name="Checks security problems on VsFTPd servers"
self.type="config"
self.required_files = ['/etc/vsftpd.conf', '/etc/vsftpd/vsftpd.conf']
def __init__(self, options):
MasterRule.__init__(self, options)
self.short_name = "ssh"
self.long_name = "Checks security problems on sshd config file"
self.type = "config"
self.required_files = ['/etc/ssh/sshd_config']
def __init__(self, options):
MasterRule.__init__(self, options)
self.short_name = "proftpd"
self.long_name = "Checks security problems on ProFTPd servers"
self.type = "config"
def __init__(self, options):
MasterRule.__init__(self, options)
self.short_name = "ports"
self.long_name = "Checks for open ports"
self.type = "config"
def __init__(self, options):
MasterRule.__init__(self, options)
self.short_name="system-wide"
self.long_name="Checks security problems on system-wide configuration"
self.type="config"
def __init__(self, options):
MasterRule.__init__(self, options)
self.short_name="remote_access"
self.long_name="Checks for services with remote access allowed"
self.type="config"
def __init__(self, options):
MasterRule.__init__(self, options)
self.short_name="ports"
self.long_name="Checks for open ports"
self.type="config"
def __init__(self, options):
MasterRule.__init__(self, options)
self.short_name="postgresql"
self.long_name="Check security problems on PostgreSQL configuration files"
self.type="config"
self.required_files = ['/var/lib/pgsql/data/pg_hba.conf','/var/lib/pgsql/data/postgresql.conf']
def __init__(self, options):
MasterRule.__init__(self, options)
self.short_name = "selinux"
self.long_name = "Checks SELinux configuration"
self.type = "config"
self.required_files = ['/etc/selinux/config']
def __init__(self, options):
MasterRule.__init__(self, options)
self.short_name="ssh"
self.long_name="Checks security problems on sshd config file"
self.type="config"
self.required_files = ['/etc/ssh/sshd_config', '/etc/sshd_config']
def __init__(self, options):
MasterRule.__init__(self, options)
self.short_name = "authentication"
self.long_name = "Checks users, groups and authentications"
self.type = "config"
def __init__(self, options):
MasterRule.__init__(self, options)
self.short_name="authentication"
self.long_name="Checks users, groups and authentications"
self.type="config"
def __init__(self, options):
MasterRule.__init__(self, options)
self.short_name="selinux"
self.long_name="Checks SELinux configuration"
self.type="config"
self.required_files = ['/etc/selinux/config']
def __init__(self, options): MasterRule.__init__(self, options) self.short_name="filesystems" self.long_name="Checks filesystems for security problems" self.type="config"
def __init__(self, options):
MasterRule.__init__(self, options)
self.short_name="php"
self.long_name="Checks security problems on php config file"
self.type="config"
self.required_files = ['/etc/php5/apache2/php.ini', '/etc/php5/cli/php.ini', '/etc/php.ini']
def __init__(self, options): MasterRule.__init__(self, options) self.short_name="proftpd" self.long_name="Checks security problems on ProFTPd servers" self.type="config"
def __init__(self, options):
MasterRule.__init__(self, options)
self.short_name="system-wide"
self.long_name="Checks security problems on system-wide configuration"
self.type="config"
