Subversion Repositories ALCASAR

Rev

Rev 2724 | Rev 2775 | Go to most recent revision | Blame | Compare with Previous | Last modification | View Log

<?php
/* written by steweb57 & Rexy */
# Choice of language
$Language = 'en';
if(isset($_SERVER['HTTP_ACCEPT_LANGUAGE'])){
        $Langue         = explode(",",$_SERVER['HTTP_ACCEPT_LANGUAGE']);
        $Language       = strtolower(substr(chop($Langue[0]),0,2)); }
if($Language == 'fr'){
        $l_services_title       = "Configuration des services";
        $l_main_services        = "Services principaux";
        $l_filter_services      = "Services de filtrage";
        $l_opt_services         = "Services optionnels";
        $l_service_title        = "Nom du service";
        $l_service_start        = "Démarrer";
        $l_service_stop         = "Arréter";
        $l_service_restart      = "Redémarrer";
        $l_service_status       = "Status";
        $l_service_status_img_ok= "Démarré";
        $l_service_status_img_ko= "Arrété";
        $l_service_action       = "Actions";
        $l_radiusd              = "Serveur d'authentification et d'autorisation";
        $l_chilli               = "Passerelle d'interception et serveur DHCP";
        $l_e2guardian           = "Filtre d'URL et de contenu WEB";
        $l_mysqld               = "Serveur de la base des usagers";
        $l_lighttpd             = "Serveur WEB (Alcasar Control Center)";
        $l_sshd                 = "Accès sécurisée distant";
        $l_freshclam            = "Mise à jour de l'antivirus (toutes les 4 heures)";
        $l_ntpd                 = "Service de mise à l'heure réseau";
        $l_fail2ban             = "Détecteur d'intrusion";
        $l_nfsen                = "Grapheur de flux NetFlow";
        $l_vnstat               = "Grapheur de flux réseau";
        $l_havp                 = "Proxy Antivirus";
        $l_tinyproxy            = "Proxy HTTP léger";
        $l_unbound              = "Serveur DNS principal";
        $l_unbound_blacklist    = "Serveur DNS pour la Blacklist";
        $l_unbound_whitelist    = "Serveur DNS pour la Whitelist";
        $l_dnsmasq_whitelist    = "Serveur DNS pour la Whitelist (IPSET)";
        $l_unbound_blackhole    = "Serveur DNS 'trou noir'";
        $l_ulogd_ssh            = "journalisation des accès par SSH";
        $l_ulogd_ext_access     = "journalisation des tentatives d'accès externes";
        $l_ulogd_traceability   = "journalisation des connexions WEB filtrés";
        $l_execute              = "Exécuter";
        $l_stop_restart         = "Arret et redémarrage du système";
        $l_halt                 = "Arréter le système";
        $l_reboot               = "Relancer le système";

} else {
        $l_services_title       = "Services configuration";
        $l_main_services        = "Main services";
        $l_filter_services      = "Filtering services";
        $l_opt_services         = "Optional services";
        $l_service_title        = "Service name";
        $l_service_start        = "Start";
        $l_service_stop         = "Stop";
        $l_service_restart      = "Restart";
        $l_service_status       = "Status";
        $l_service_status_img_ok= "Running";
        $l_service_status_img_ko= "Stopped";
        $l_service_action       = "Actions";
        $l_radiusd              = "Authentication and authorisation server";
        $l_chilli               = "Interception gateway and DHCP server";
        $l_e2guardian           = "URL and WEB content filter";
        $l_mysqld               = "User database server";
        $l_lighttpd             = "WEB server (ALCASAR Control Center)";
        $l_sshd                 = "Secure remote access";
        $l_freshclam            = "Antivirus update process (every 4 hours)";
        $l_ntpd                 = "Network time server";
        $l_fail2ban             = "Intrusion Dectection System";
        $l_nfsen                = "Netflow grapher";
        $l_vnstat               = "Network grapher";
        $l_havp                 = "Antivirus Proxy";
        $l_tinyproxy            = "Light HTTP Proxy";
        $l_unbound              = "Main DNS server";
        $l_unbound_blacklist    = "Blacklist DNS server";
        $l_unbound_whitelist    = "Whitelist DNS server";
        $l_dnsmasq_whitelist    = "Whitelist DNS server (IPSET)";
        $l_unbound_blackhole    = "Blackhole DNS server";
        $l_ulogd_ssh            = "SSH access logging process";
        $l_ulogd_ext_access     = "Extern access attempts logging process";
        $l_ulogd_traceability   = "Filtering WEB access logging process";
        $l_execute              = "Execute";
        $l_stop_restart         = "Halt and restart the system";
        $l_halt                 = "Halt le system";
        $l_reboot               = "Restart the system";
}

/****************************************************************
*                          CONST                                *
*****************************************************************/
define ("CONF_FILE", "/usr/local/etc/alcasar.conf");

/********************************************************
*                       CONF FILE test                  *
*********************************************************/
if (!file_exists(CONF_FILE)){
        exit("Fichier de configuration ".CONF_FILE." non présent");
}
if (!is_readable(CONF_FILE)){
        exit("Vous n'avez pas les droits de lecture sur le fichier ".CONF_FILE);
}

// Doing an action on a service (start,stop or restart)
function serviceExec($service, $action){
        if (($action == "start")||($action == "stop")||($action == "restart")){
                exec("sudo /usr/bin/systemctl $action ".escapeshellarg($service), $retval, $retstatus);
                if ($service == "sshd"){ // in order to keep that conf for SSH at next reboot
                        if ($action == "start"){
                                exec("sudo /usr/bin/systemctl enable ".escapeshellarg($service));
                                file_put_contents(CONF_FILE, str_replace('SSH=off', 'SSH=on', file_get_contents(CONF_FILE)));
                                exec("sudo /usr/local/bin/alcasar-iptables.sh");
                                }
                        if ($action == "stop"){
                                exec("sudo /usr/bin/systemctl disable ".escapeshellarg($service));
                                file_put_contents(CONF_FILE, str_replace('SSH=on', 'SSH=off', file_get_contents(CONF_FILE)));
                                exec("sudo /usr/local/bin/alcasar-iptables.sh");
                                }
                        }
                return $retstatus;
        } else {
                return false;
        }
}

// Testing if a service is active
function checkServiceStatus($service){
        $response = false;
        exec("sudo /usr/bin/systemctl is-active ".escapeshellarg("$service.service"), $retval);
        foreach( $retval as $val ) {
                if ($val == "active"){
                        $response = true;
                        break;
                }
        }
        return $response;
}

//-------------------------------
// Actions on services
//-------------------------------
$autorizeService = array("radiusd","chilli","mysqld","lighttpd","unbound-forward","ulogd-ssh","ulogd-ext-access","ulogd-traceability","unbound-blacklist","unbound-whitelist","dnsmasq-whitelist","unbound-blackhole","e2guardian","havp","tinyproxy","clamav-freshclam","sshd","ntpd","fail2ban","nfsen","vnstat");
$autorizeAction = array("start","stop","restart");

if (isset($_GET['service'])&&(in_array($_GET['service'], $autorizeService))) {
    if (isset($_GET['action'])&&(in_array($_GET['action'], $autorizeAction))) {
        $execStatus = serviceExec($_GET['service'], $_GET['action']);
                // execStatus non exploité
        }
}
//-------------------------------
// Actions on system
//-------------------------------
if (isset($_POST['choix'])){
        switch ($_POST['choix']){
                case 'reboot' :
                        exec ("sudo /usr/local/bin/alcasar-logout.sh all");
                        exec ("sudo /usr/sbin/shutdown -r now");
                break;
                case 'halt' :
                        exec ("sudo /usr/local/bin/alcasar-logout.sh all");
                        exec ("sudo /usr/sbin/shutdown -h now");
                break;
        }
}

//-------------------------------
// Check services status
//-------------------------------
$MainServiceStatus = array();
$MainServiceStatus['chilli'] = checkServiceStatus("chilli");
$MainServiceStatus['radiusd'] = checkServiceStatus("radiusd");
$MainServiceStatus['mysqld'] = checkServiceStatus("mysqld");
$MainServiceStatus['lighttpd'] = checkServiceStatus("lighttpd");
$MainServiceStatus['unbound'] = checkServiceStatus("unbound");
$MainServiceStatus['ulogd_ssh'] = checkServiceStatus("ulogd-ssh");
$MainServiceStatus['ulogd_ext_access'] = checkServiceStatus("ulogd-ext-access");
$MainServiceStatus['ulogd_traceability'] = checkServiceStatus("ulogd-traceability");

$FilterServiceStatus = array();
$FilterServiceStatus['unbound_blacklist'] = checkServiceStatus("unbound-blacklist");
$FilterServiceStatus['unbound_whitelist'] = checkServiceStatus("unbound-whitelist");
$FilterServiceStatus['dnsmasq_whitelist'] = checkServiceStatus("dnsmasq-whitelist");
$FilterServiceStatus['unbound_blackhole'] = checkServiceStatus("unbound-blackhole");
$FilterServiceStatus['e2guardian'] = checkServiceStatus("e2guardian");
$FilterServiceStatus['havp'] = checkServiceStatus("havp");
$FilterServiceStatus['tinyproxy'] = checkServiceStatus("tinyproxy");
$FilterServiceStatus['clamav-freshclam'] = checkServiceStatus("clamav-freshclam");

$OptServiceStatus = array();
$OptServiceStatus['sshd'] = checkServiceStatus("sshd");
$OptServiceStatus['ntpd'] = checkServiceStatus("ntpd");
$OptServiceStatus['fail2ban'] = checkServiceStatus("fail2ban");
$OptServiceStatus['nfsen'] = checkServiceStatus("nfsen");
$OptServiceStatus['vnstat'] = checkServiceStatus("vnstat");
/****************
*       MAIN    *
*****************/

?><!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<html><!-- written by steweb57 / rexy -->
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<title><?php echo $l_services_title; ?></title>
<link rel="stylesheet" href="/css/style.css" type="text/css">
</head>
<body>
<table width="100%" border="0" cellspacing="0" cellpadding="0">
        <tr><th><?php echo $l_main_services; ?></th></tr>
        <tr bgcolor="#FFCC66"><td><img src="/images/pix.gif" width="1" height="2"></td></tr>
</table>
<TABLE width="100%" border=1 cellspacing=0 cellpadding=0>
        <tr align="center"><td><?php echo $l_service_status;?></td><td colspan="2"><?php echo $l_service_title;?></td><td colspan="3"><?php echo $l_service_action;?></td></tr>
<?php foreach( $MainServiceStatus as $serviceName => $statusOK ) { ?>
<tr>
        <?php if ($statusOK) { ?>
        <td align="center"><img src="/images/state_ok.gif" width="15" height="15" alt="<?php echo $l_service_status_img_ok; ?>"></td>
        <td align="center"><?php $comment="l_$serviceName"; echo "<b>$serviceName</b></td><td>${$comment}" ;?> </td>
        <td width="80" align="center">---</td>
        <td width="80" align="center"><?php if (($serviceName != "chilli") && ($serviceName != "lighttpd")) { echo "<a href=\"".$_SERVER['PHP_SELF']."?action=stop&service=".str_replace('_','-',$serviceName)."\"> $l_service_stop</a>"; } else echo "---";?></td>
        <td width="80" align="center"><a href="<?php echo $_SERVER['PHP_SELF']."?action=restart&service=".str_replace('_','-',$serviceName)."\"> $l_service_restart";?></a></td>
        <?php } else { ?>
        <td align="center"><img src="/images/state_error.gif" width="15" height="15" alt="<?php echo $l_service_status_img_ko ?>"></td>
        <td align="center"><?php $comment="l_$serviceName"; echo "<b>$serviceName</b></td><td>${$comment}" ;?> </td>
        <td width="80" align="center"><a href="<?php echo $_SERVER['PHP_SELF']."?action=start&service=".str_replace('_','-',$serviceName)."\"> $l_service_start";?></a></td>
        <td width="80" align="center">---</td>
        <td width="80" align="center">---</td>
    <?php } ?>
</tr>
<?php } ?>
</table>
<table width="100%" border="0" cellspacing="0" cellpadding="0">
        <tr><th><?php echo $l_filter_services; ?></th></tr>
        <tr bgcolor="#FFCC66"><td><img src="/images/pix.gif" width="1" height="2"></td></tr>
</table>
<TABLE width="100%" border=1 cellspacing=0 cellpadding=0>
        <tr align="center"><td><?php echo $l_service_status;?></td><td colspan="2"><?php echo $l_service_title;?></td><td colspan="3"><?php echo $l_service_action;?></td></tr>
<!--    <TR align="center"> -->
<?php foreach( $FilterServiceStatus as $serviceName => $statusOK ) { ?>
<tr>
        <?php if ($statusOK) { ?>
    <td align="center"><img src="/images/state_ok.gif" width="15" height="15" alt="<?php echo $l_service_status_img_ok; ?>"></td>
        <td align="center"><?php $comment="l_$serviceName"; echo "<b>$serviceName</b></td><td>${$comment}" ;?> </td>
    <td width="80" align="center">---</td>
    <td width="80" align="center"><a href="<?php echo $_SERVER['PHP_SELF']."?action=stop&service=".str_replace('_','-',$serviceName)."\"> $l_service_stop";?></a></td>
    <td width="80" align="center"><a href="<?php echo $_SERVER['PHP_SELF']."?action=restart&service=".str_replace('_','-',$serviceName)."\"> $l_service_restart";?></a></td>
        <?php } else { ?>
    <td align="center"><img src="/images/state_error.gif" width="15" height="15" alt="<?php echo $l_service_status_img_ko ?>"></td>
    <td align="center"><?php $comment="l_$serviceName"; echo "<b>$serviceName</b></td><td>${$comment}" ;?> </td>
    <td width="80" align="center"><a href="<?php echo $_SERVER['PHP_SELF']."?action=start&service=".str_replace('_','-',$serviceName)."\"> $l_service_start";?></a></td>
    <td width="80" align="center">---</td>
    <td width="80" align="center">---</td>
    <?php } ?>
</tr>
<?php } ?>
</table>
<table width="100%" border="0" cellspacing="0" cellpadding="0">
        <tr><th><?php echo $l_opt_services; ?></th></tr>
        <tr bgcolor="#FFCC66"><td><img src="/images/pix.gif" width="1" height="2"></td></tr>
</table>
<TABLE width="100%" border=1 cellspacing=0 cellpadding=0>
        <tr align="center"><td><?php echo $l_service_status;?></td><td colspan="2"><?php echo $l_service_title;?></td><td colspan="3"><?php echo $l_service_action;?></td></tr>
<?php foreach( $OptServiceStatus as $serviceName => $statusOK ) { ?>
<tr>
        <?php if ($statusOK) { ?>
    <td align="center"><img src="/images/state_ok.gif" width="15" height="15" alt="<?php echo $l_service_status_img_ok; ?>"></td>
        <td align="center"><?php $comment="l_$serviceName"; echo "<b>$serviceName</b></td><td>${$comment}" ;?> </td>
    <td width="80" align="center">---</td>
    <td width="80" align="center"><a href="<?php echo $_SERVER['PHP_SELF']."?action=stop&service=$serviceName\"> $l_service_stop";?></a></td>
    <td width="80" align="center"><a href="<?php echo $_SERVER['PHP_SELF']."?action=restart&service=$serviceName\"> $l_service_restart";?></a></td>
        <?php } else { ?>
    <td align="center"><img src="/images/state_error.gif" width="15" height="15" alt="<?php echo $l_service_status_img_ko ?>"></td>
    <td align="center"><?php $comment="l_$serviceName"; echo "<b>$serviceName</b></td><td>${$comment}" ;?> </td>
    <td width="80" align="center"><a href="<?php echo $_SERVER['PHP_SELF']."?action=start&service=$serviceName\"> $l_service_start";?></a></td>
    <td width="80" align="center">---</td>
    <td width="80" align="center">---</td>
    <?php } ?>
</tr>
<?php } ?>
</table>
<table width="100%" border="0" cellspacing="0" cellpadding="0">
        <tr><th><? echo $l_stop_restart;?></th></tr>
        <tr bgcolor="#FFCC66"><td><img src="/images/pix.gif" width="1" height="2"></td></tr>
</table>
<table width="100%" border=1 cellspacing=0 cellpadding=1>
        <tr><td valign="middle" align="left">
        <FORM action="services.php" method=POST>
                <select name='choix'>
                        <option selected value="reboot"><?echo "$l_reboot";?>
                        <option value="halt"><?echo "$l_halt";?>
                </select>
                <input type=submit value="<?echo "$l_execute";?>">
        </FORM>
        </td></tr>
</table>
</body>
</html>