Subversion Repositories ALCASAR

#!/bin/sh

# $Id: alcasar-daemon.sh 2572 2018-07-20 16:55:00Z rexy $

# alcasar-daemon.sh

# by Franck BOUIJOUX & Rexy

# This script is distributed under the Gnu General Public License (GPL)

# Watchdog of Services

# See /etc/cron.d/alcasar-daemon-watchdog for config the time

conf_file="/usr/local/etc/alcasar.conf"

SSH=`grep ^SSH= $conf_file|cut -d"=" -f2`                               # sshd active (on/off)

SSH=${SSH:=off}

LDAP=`grep ^LDAP= $conf_file|cut -d"=" -f2`                             # ldap active (on/off)

LDAP=${SSH:=off}

SERVICES="mysqld lighttpd php-fpm ntpd havp dnsmasq dnsmasq-blacklist dnsmasq-whitelist dnsmasq-blackhole radiusd tinyproxy nfsen e2guardian freshclam ulogd-ssh ulogd-traceability ulogd-ext-access chilli fail2ban sshd vnstat"

nb_available_srv=`echo $SERVICES|wc -w`

function ServiceTest () {

        CMD=`/usr/bin/systemctl is-active $s`

        if [ $CMD != "active" ]

        then

                logger -t alcasar-daemon -i "$s is inactive. Activation attempt"

                echo "the $s service is disabled! trying to start it..."

                /usr/bin/systemctl start $s.service

        else

                nb_srv=$((nb_srv+1))

        fi

}

nb_srv=0

for s in $SERVICES

do

        if [ $s != "sshd" ]

        then

                ServiceTest

        else

                {

                if [ $SSH == "ON" ] || [ $SSH == "on" ] || [ $SSH == "On" ]

                then

                        ServiceTest

                else

                        nb_available_srv=$((nb_available_srv-1))

                fi

                }

        fi

done

if [ $nb_available_srv -ne $nb_srv ]

then

        echo "Restart this script to know if all is ok"

else

        echo "$nb_srv services needed by ALCASAR are started."

fi

if [ `lsmod|grep ipt_NETFLOW|wc -l` == 0 ]

then

        logger -t alcasar-daemon -i "ipt_netflow is inactive."

        echo "The Log system is disabled! try to know why (modprobe ipt_NETFLOW)"

else

        echo "The Log system is active"

fi

if [ ! -e /etc/raddb/mods-enabled/ldap ]

then

        if [ $LDAP == "ON" ] || [ $LDAP == "on" ] || [ $LDAP == "On" ]

        then

        echo "Enable LDAP..."

        /usr/local/bin/alcasar-ldap.sh -on

        fi

fi