WebSVN – ALCASAR – Diff – /alcasar.sh

 #!/bin/bash
-#  $Id: alcasar.sh 1353 2014-05-19 16:59:51Z richard $
+#  $Id: alcasar.sh 1355 2014-05-20 15:03:10Z richard $
 # alcasar.sh
 # ALCASAR Install script -  CopyLeft ALCASAR Team [Rexy + 3abtux + Steweb + Crox + ...]
 # Ce programme est un logiciel libre ; This software is free and open source
 ## - Import des tables de comptabilité (mtotacct, totacct) et info_usagers (userinfo)	##
 ##       ces table proviennent de 'dialupadmin' (paquetage freeradius-web)		##
 ##########################################################################################
 init_db ()
+{
-	mkdir -p /var/lib/mysql/.tmp
-	chown -R mysql:mysql /var/lib/mysql/
-	[ -e /etc/my.cnf.rpmnew ] && mv /etc/my.cnf.rpmnew /etc/my.cnf		# prend en compte les migrations de MySQL
+	rm -rf /var/lib/mysql # to be sure that there is no former installation
 	[ -e /etc/my.cnf.default ] || cp /etc/my.cnf /etc/my.cnf.default
 	$SED "s?^#bind-address.*?bind-address=127.0.0.1?g" /etc/my.cnf
+	$SED "s?^tmpdir.*?tmpdir=/tmp?g" /etc/my.cnf
 	systemctl start mysqld.service
 	sleep 4
 	mysqladmin -u root password $mysqlpwd
 	MYSQL="/usr/bin/mysql -uroot -p$mysqlpwd --exec"
-# Delete exemple databases if exist
+# Secure the server
-	$MYSQL="DROP DATABASE IF EXISTS test;DROP DATABASE IF EXISTS tmp;CONNECT mysql;DELETE from user where user='';FLUSH PRIVILEGES;"
+	$MYSQL="DROP DATABASE IF EXISTS test;DROP DATABASE IF EXISTS tmp;"
+	$MYSQL="CONNECT mysql;DELETE from user where User='';DELETE FROM user WHERE User='root' AND Host NOT IN ('localhost','127.0.0.1','::1');FLUSH PRIVILEGES;"
 # Create 'radius' database
 	$MYSQL="CREATE DATABASE IF NOT EXISTS $DB_RADIUS;GRANT ALL ON $DB_RADIUS.* TO $DB_USER@localhost IDENTIFIED BY '$radiuspwd';FLUSH PRIVILEGES;"
 # Add an empty radius database structure
 	mysql -u$DB_USER -p$radiuspwd $DB_RADIUS < $DIR_CONF/radiusd-db-vierge.sql
 # modify the start script in order to close accounting connexion when the system is comming down or up
-	[ -e /etc/init.d/mysqld.default ] || cp /etc/init.d/mysqld /etc/init.d/mysqld.default
+	[ -e /usr/lib/systemd/system/mysqld.service.default ] || cp /usr/lib/systemd/system/mysqld.service /usr/lib/systemd/system/mysqld.service.default
-	$SED "/wait_for_pid created/a echo \"Flush ALCASAR open accounting sessions\"; /usr/local/sbin/alcasar-mysql.sh -acct_stop" /etc/init.d/mysqld
+	$SED "/ExecStartPost=/a ExecStartPost=[ -e /usr/local/sbin/alcasar-mysql.sh ] && /usr/local/sbin/alcasar-mysql.sh -acct_stop" /usr/lib/systemd/system/mysqld.service
-	$SED "/'stop')/a echo \"Flush ALCASAR open accounting sessions\"; /usr/local/sbin/alcasar-mysql.sh -acct_stop" /etc/init.d/mysqld
+	$SED "/ExecStartPost=/a ExecStop=[ -e /usr/local/sbin/alcasar-mysql.sh ] && /usr/local/sbin/alcasar-mysql.sh -acct_stop" /usr/lib/systemd/system/mysqld.service
+	systemctl daemon-reload
 } # End init_db ()
 ##########################################################################
 ##			Fonction "param_radius"				##
 ## - Paramètrage des fichiers de configuration FreeRadius		##
 # counter.conf modification (change the Max-All-Session-Time counter)
 	[ -e /etc/raddb/sql/mysql/counter.conf.default ] || cp /etc/raddb/sql/mysql/counter.conf /etc/raddb/sql/mysql/counter.conf.default
 	cp -f $DIR_CONF/radius/counter.conf /etc/raddb/sql/mysql/counter.conf
 	chown -R radius:radius /etc/raddb/sql/mysql/*
 # insures that mysql is up before radius start
-	$SED "s?^After=.*?After=syslog.target network.target mysqld.service?g" /lib/systemd/system/radiusd.service
+	$SED "s?^After=.*?After=syslog.target network.target mysqld.service?g" /usr/lib/systemd/system/radiusd.service
 } # End param_radius ()
 ##########################################################################
 ##			Function "param_web_radius"			##
 	cp -f $DIR_CONF/virus-fr.html /etc/havp/templates/fr/virus.html
 	cp -f $DIR_CONF/virus-en.html /etc/havp/templates/en/virus.html
 # automatisation de la mise à jour de la base antivirale (toutes les 2 heures)
 	$SED "s?^Checks.*?Checks 12?g" /etc/freshclam.conf
 	$SED "s?^NotifyClamd.*?# NotifyClamd /etc/clamd.conf?g" /etc/freshclam.conf
-# Virus database update
+# Copy of the main virus database
 	rm -f /var/lib/clamav/*.cld # in case of old database scheme
 	cp -f $DIR_CONF/clamav-main.cvd /var/lib/clamav/main.cvd
-	/usr/bin/freshclam
+}
 ##################################################################################
 ##			function "param_ulogd"					##
 ## - Ulog config for multi-log files 						##
 	cp /tmp/nfsen-1.3.6p1/contrib/PortTracker/PortTracker.php /var/www/nfsen/plugins/
 	sudo -u apache nftrack -I -d /var/log/netflow/porttracker
 	chown -R apache:www-data /var/log/netflow/porttracker/
 	chmod -R 775 /var/log/netflow/porttracker
 #Configuration du fichier de conf d'apache
-	if [ -f /etc/httpd/conf.d/nfsen.conf ];then
+	if [ -f /etc/httpd/conf/conf.d/nfsen.conf ];then
-		rm -f /etc/httpd/conf.d/nfsen.conf
+		rm -f /etc/httpd/conf/conf.d/nfsen.conf
 	fi
-	cat <<EOF >> /etc/httpd/conf.d/nfsen.conf
+	cat <<EOF >> /etc/httpd/conf/conf.d/nfsen.conf
 Alias /nfsen /var/www/nfsen
 <Directory /var/www/nfsen/>
 DirectoryIndex nfsen.php
 Options -Indexes
 AllowOverride all
 [Install]
 WantedBy=multi-user.target
 EOF
 # processes launched at boot time (SYSV)
-	for i in ntpd iptables ulogd dnsmasq chilli httpd radiusd netfs dansguardian havp freshclam
+	for i in chilli netfs havp
 	do
 		/sbin/chkconfig --add $i
 	done
 # processes launched at boot time (Systemctl)
-	for i in alcasar-load_balancing.service nfsen.service mysqld.service
+	for i in alcasar-load_balancing nfsen mysqld httpd ntpd iptables ulogd dnsmasq radiusd dansguardian freshclam
 	do
 		systemctl enable $i
 	done
 # Apply French Security Agency (ANSSI) rules

Subversion Repositories ALCASAR

(root)/alcasar.sh – Rev 1353 → 1355