WebSVN – ALCASAR – Diff – /alcasar.sh

 #!/bin/bash
-#  $Id: alcasar.sh 2840 2020-06-27 22:35:40Z rexy $
+#  $Id: alcasar.sh 2841 2020-06-28 21:49:00Z rexy $
 # alcasar.sh
 # ALCASAR is a Free and open source NAC created by Franck BOUIJOUX (3abtux), Pascal LEVANT and Richard REY (Rexy)
 # This script is distributed under the Gnu General Public License (GPL)
 #  team@alcasar.net
 	$SED "s?^#authplugin = '/etc/e2guardian/authplugins/port.conf'?authplugin = '/etc/e2guardian/authplugins/port.conf'?g" $DIR_DG/e2guardian.conf
 	$SED "s?^#mapauthtoports =.*?mapauthtoports = off?g" $DIR_DG/e2guardian.conf
 # Enable clamd scanner
 	$SED "s?^#contentscanner = '/etc/e2guardian/contentscanners/clamdscan.conf'?contentscanner = '/etc/e2guardian/contentscanners/clamdscan.conf'?g" $DIR_DG/e2guardian.conf
+# Adapt the first group conf file
+	[ -e $DIR_DG/e2guardianf1.conf.default ] || cp $DIR_DG/e2guardianf1.conf $DIR_DG/e2guardianf1.conf.default
+# Reporting (deny page) in HTML
+	$SED "s/^reportinglevel =.*/reportinglevel = 3/g" $DIR_DG/e2guardianf1.conf
+	$SED "s/^groupname =.*/groupname = 'blacklisted users'/g" $DIR_DG/e2guardianf1.conf
+###### ALCASAR special filtering ####
 # RAZ bannedphraselist
 	cp $DIR_DG/lists/bannedphraselist $DIR_DG/lists/bannedphraselist.default
 	$SED "s?^[^#]?#&?g" $DIR_DG/lists/bannedphraselist # (comment what is not)
 # Disable URL control with regex
     cp $DIR_DG/lists/bannedregexpurllist $DIR_DG/lists/bannedregexpurllist.default
 	$SED "s?^[^#]?#&?g" $DIR_DG/lists/bannedregexpurllist # (comment what is not)
-# Adapt the first group conf file
-	[ -e $DIR_DG/e2guardianf1.conf.default ] || cp $DIR_DG/e2guardianf1.conf $DIR_DG/e2guardianf1.conf.default
-# Reporting (deny page) in HTML
-	$SED "s/^reportinglevel =.*/reportinglevel = 3/g" $DIR_DG/e2guardianf1.conf
-# Copy the fist group conf file to the second
-	cp $DIR_DG/e2guardianf1.conf $DIR_DG/e2guardianf2.conf
 # Replace the default deny HTML page (only fr & uk) --> !!! search why our pages make the server crash...
 #	[ -e /usr/share/e2guardian/languages/french/template.html.default ] || mv /usr/share/e2guardian/languages/french/template.html /usr/share/e2guardian/languages/french/template.html.default
 #	cp -f $DIR_CONF/template-fr.html /usr/share/e2guardian/languages/french/template.html
 #	[ -e /usr/share/e2guardian/languages/ukenglish/template.html.default ] || mv /usr/share/e2guardian/languages/ukenglish/template.html /usr/share/e2guardian/languages/ukenglish/template.html.default
 #	cp -f $DIR_CONF/template.html /usr/share/e2guardian/languages/ukenglish/template.html
 	touch $DIR_DG/lists/bannedmimetypelist
 # Empty LAN IP list that won't be WEB filtered
 	[ -e $DIR_DG/lists/exceptioniplist.default ] || mv $DIR_DG/lists/exceptioniplist $DIR_DG/lists/exceptioniplist.default
 	touch $DIR_DG/lists/exceptioniplist
 # Creation of ALCASAR banned site list
-	[ -e $DIR_DG/lists/bannedsitelist.default ] || mv $DIR_DG/lists/bannedsitelist $DIR_DG/lists/bannedsitelist.default
+	[ -e $DIR_DG/lists/greysitelist.default ] || mv $DIR_DG/lists/greysitelist $DIR_DG/lists/greysitelist.default
-	cat <<EOF > $DIR_DG/lists/bannedsitelist
+	cat <<EOF > $DIR_DG/lists/greysitelist
 # E2guardian filter config for ALCASAR
 # In ALCASAR E2guardian filters only URLs (domains are filtered with unbound)
-# block all sites except those in the exceptionsitelist --> liste blanche (désactivée)
-#**
 # block all SSL and CONNECT tunnels
 **s
 # block all SSL and CONNECT tunnels specified only as an IP
 *ips
 # block all sites specified only by an IP
 EOF
 # 'Safesearch' regex actualisation
 	$SED "s?images?search?g" $DIR_DG/lists/urlregexplist
 # change the google safesearch ("safe=strict" instead of "safe=vss")
 	$SED "s?safe=vss?safe=strict?g" $DIR_DG/lists/urlregexplist
+# Create & adapt the second group conf file (av + av_wl)
+	cp $DIR_DG/e2guardianf1.conf.default $DIR_DG/e2guardianf2.conf
+	$SED "s?^reportinglevel =.*?reportinglevel = 3?g" $DIR_DG/e2guardianf2.conf
+	$SED "s/^groupname =.*/groupname = 'antimalware & whitelested users'/g" $DIR_DG/e2guardianf2.conf
+	$SED "s/\/lists\/bannedurllist'/urllist = 'name=banned,messageno=501,path=\/etc\/e2guardian\/lists\/bannedurllist.default'/g" $DIR_DG/e2guardianf2.conf # no banned urls
 # create log folder
     mkdir -p /var/log/e2guardian
 	chown -R e2guardian /etc/e2guardian /var/log/e2guardian
 } # End of e2guardian()
 ## - Set the parameters of clamav and freshclam                 ##
 ##################################################################
 antivirus()
+{
 # Clamd adaptation to e2guardian
+[ -e /lib/systemd/system/clamav-daemon.service.default ] || cp /lib/systemd/system/clamav-daemon.service /lib/systemd/system/clamav-daemon.service.default
+	$SED "/^[Service]/a ExecStartPre=\/bin\/chown e2guardian:e2guardian \/run\/clamav" /lib/systemd/system/clamav-daemon.service
+	$SED "/^[Service]/a ExecStartPre=\/bin\/mkdir -p \/run\/clamav" /lib/systemd/system/clamav-daemon.service
 [ -e /etc/clamd.conf.default ] || cp /etc/clamd.conf /etc/clamd.conf.default
 	$SED "s?^User.*?User e2guardian?g" /etc/clamd.conf
+	$SED "s?^MaxThreads.*?MaxThreads 32?g" /etc/clamd.conf
+	$SED "s?^#LogTime.*?LogTime yes?g" /etc/clamd.conf # enable logtime for each message
+	$SED "s?^LogVerbose.*?LogVerbose no?g" /etc/clamd.conf
+	$SED "s?^#LogRotate.*?LogRotate yes?g" /etc/clamd.conf
 	chown -R e2guardian:e2guardian /var/log/clamav /var/lib/clamav
 	chmod 775 /var/log/clamav /var/lib/clamav
 	chmod 664 /var/log/clamav/*
 # update virus database every 4 hours (24h/6)
 	[ -e /etc/freshclam.conf.default ] || cp /etc/freshclam.conf /etc/freshclam.conf.default
 	$SED "s?^Checks.*?Checks 6?g" /etc/freshclam.conf
 	$SED "s?^NotifyClamd.*?# NotifyClamd /etc/clamd.conf?g" /etc/freshclam.conf
 	$SED "/^DatabaseMirror/a DatabaseMirror db.fr.clamav.net" /etc/freshclam.conf
-	$SED "s?MaxAttempts.*?MaxAttempts 3?g" /etc/freshclam.conf
+	$SED "s?^MaxAttempts.*?MaxAttempts 3?g" /etc/freshclam.conf
-	$SED "s?^DatabaseOwner.*?DatabaseOwner e2guardian?g" /etc/freshclam
+	$SED "s?^DatabaseOwner.*?DatabaseOwner e2guardian?g" /etc/freshclam.conf
 # update now
 	/usr/bin/freshclam --no-warnings --quiet
 } # End of antivirus()
 ##############################################################
 # GRUB2 modifications (Wait time : 3s - ALCASAR entry - VGA=791 - Change the default banner
 	[ -e /etc/default/grub.default ]  || cp /etc/default/grub /etc/default/grub.default
 	$SED "s?^GRUB_TIMEOUT=.*?GRUB_TIMEOUT=3?g" /etc/default/grub
 	$SED "s?^GRUB_DISTRIBUTOR=.*?GRUB_DISTRIBUTOR=ALCASAR?g" /etc/default/grub
 	[ -e /etc/mageia-release.default ]  || cp /etc/mageia-release /etc/mageia-release.default
-	vm_vga=`lsmod | egrep -c "virtio|vmwgfx|vbox"` # test if in VM
+	vm_vga=`lsmod | egrep -c "virtio|vmwgfx"` # test if in VM
 	if [ $vm_vga == 0 ] # is not a VM
 	then
 		cp -f $DIR_CONF/banner /etc/mageia-release # ALCASAR ASCII-Art
 		echo >> /etc/mageia-release
 		$SED "s?^GRUB_CMDLINE_LINUX_DEFAULT=\"?&vga=791 ?" /etc/default/grub

Subversion Repositories ALCASAR

(root)/alcasar.sh – Rev 2840 → 2841