From 74278a199b9a19ede7f87fa89ea98a2ba4c103b8 Mon Sep 17 00:00:00 2001 From: gbaconni Date: Mon, 8 Nov 2021 23:21:10 +0100 Subject: [PATCH] 2021-11-08 23:21:10 --- test.sh | 29 +++++++++-------------------- 1 file changed, 9 insertions(+), 20 deletions(-) diff --git a/test.sh b/test.sh index a396ac1..1ddb052 100755 --- a/test.sh +++ b/test.sh @@ -50,26 +50,6 @@ main () ssh_clean - if ssh_exec ${port} ${login} ${pass} chage -l root | grep -q -i -E '^Maximum number of days between password change.*\: 30' \ - && ssh_exec ${port} ${login} ${pass} chage -l root | grep -q -i -E '^Minimum number of days between password change.*\: 2' \ - && ssh_exec ${port} ${login} ${pass} chage -l root | grep -q -i -E '^Number of days of warning before password expires.*\: 7' - then - echo "OK: Password expiration for root is correct" - else - echo "KO: Password expiration for root is wrong" - fi - - return 0 - - if ssh_exec ${port} ${login} ${pass} cat /etc/security/pwquality.conf | grep -q -i -E '^PASS_MAX_DAYS.*\t30' \ - && ssh_exec ${port} ${login} ${pass} cat /etc/security/pwquality.conf | grep -q -i -E '^PASS_MIN_DAYS.*\t2' \ - && ssh_exec ${port} ${login} ${pass} cat /etc/security/pwquality.conf | grep -q -i -E '^PASS_WARN_AGE.*\t7' - then - echo "OK: Expiration policy via pwquality is correct" - else - echo "KO: Expiration policy via pwquality is wrong" - fi - if ssh_exec ${port} ${login} ${pass} hostname -s | grep -q "^${login}42" then echo "OK: Hostname is ${login}42" @@ -152,6 +132,15 @@ main () echo "KO: Password expiration for ${login} is wrong" fi + if ssh_sudo ${port} ${login} ${pass} chage -l root | grep -q -i -E '^Maximum number of days between password change.*\: 31' \ + && ssh_sudo ${port} ${login} ${pass} chage -l root | grep -q -i -E '^Minimum number of days between password change.*\: 2' \ + && ssh_sudo ${port} ${login} ${pass} chage -l root | grep -q -i -E '^Number of days of warning before password expires.*\: 7' + then + echo "OK: Password expiration for root is correct" + else + echo "KO: Password expiration for root is wrong" + fi + if ssh_exec ${port} ${login} ${pass} cat /etc/login.defs | grep -q -i -E '^PASS_MAX_DAYS.*\t30' \ && ssh_exec ${port} ${login} ${pass} cat /etc/login.defs | grep -q -i -E '^PASS_MIN_DAYS.*\t2' \ && ssh_exec ${port} ${login} ${pass} cat /etc/login.defs | grep -q -i -E '^PASS_WARN_AGE.*\t7'