Rudder plugins » CIS

2024-11-04T21:51:25+00:00 rudder     info: Executing 'no timeout' ... 'awk -F: '($2 == "" ) { print $1 " does not have a password "}' /etc/shadow'
2024-11-04T21:51:25+00:00 rudder     info: Command related to promiser 'awk -F: '($2 == "" ) { print $1 " does not have a password "}' /etc/shadow' returned code '0' not defined as promise kept, not kept or repaired; setting to failed
2024-11-04T21:51:25+00:00 rudder     info: Completed execution of 'awk -F: '($2 == "" ) { print $1 " does not have a password "}' /etc/shadow'
A| non-compliant cis_debian11_srv_1        Check that /etc/shadow p| awk -F: '($2 == "| Execute audit command awk -F: '($2 == "" ) { print $1 " does not have a password "}' /etc/shadow was not correct
E| n/a           cis_debian11_srv_1        Unsupported enforce mode  Unimplemented Enf| Skipping method 'Report if condition' with key parameter 'Unimplemented Enforce mode for this CIS item.' since condition 'cis_debian11_7_2_2_enforce' is not reached was not applicable
2024-11-04T21:51:25+00:00 rudder     info: Executing 'no timeout' ... '/usr/bin/env bash /var/rudder/cfengine-community/inputs/cis_debian11_srv_1/1.0/resources/7_2_3_groups_consistency.sh'
/var/rudder/cfengine-community/inputs/inventory/1.0/fusionAgent.cf:1:1: error: Broken variable syntax or bracket mismatch in string (awk -F: '($4 == '"$(getent group shadow | awk -F: '{print $3}' | xargs)"') {print " - user: "" $1 "" primary group is the shadow group"}' /etc/passwd)
/var/rudder/cfengine-community/inputs/inventory/1.0/fusionAgent.cf:1:1: error: Broken variable syntax or bracket mismatch in string (awk -F: '($4 == '"$(getent group shadow | awk -F: '{print $3}' | xargs)"') {print " - user: "" $1 "" primary group is the shadow group"}' /etc/passwd)
/var/rudder/cfengine-community/inputs/inventory/1.0/fusionAgent.cf:1:1: error: Broken variable syntax or bracket mismatch in string (awk -F: '($4 == '"$(getent group shadow | awk -F: '{print $3}' | xargs)"') {print " - user: "" $1 "" primary group is the shadow group"}' /etc/passwd)
/var/rudder/cfengine-community/inputs/inventory/1.0/fusionAgent.cf:1:1: error: Broken variable syntax or bracket mismatch in string (awk -F: '($4 == '"$(getent group shadow | awk -F: '{print $3}' | xargs)"') {print " - user: "" $1 "" primary group is the shadow group"}' /etc/passwd)
/var/rudder/cfengine-community/inputs/inventory/1.0/fusionAgent.cf:1:1: error: Broken variable syntax or bracket mismatch in string (awk -F: '($4 == '"$(getent group shadow | awk -F: '{print $3}' | xargs)"') {print " - user: "" $1 "" primary group is the shadow group"}' /etc/passwd)
/var/rudder/cfengine-community/inputs/inventory/1.0/fusionAgent.cf:1:1: error: Broken variable syntax or bracket mismatch in string (awk -F: '($4 == '"$(getent group shadow | awk -F: '{print $3}' | xargs)"') {print " - user: "" $1 "" primary group is the shadow group"}' /etc/passwd)
/var/rudder/cfengine-community/inputs/inventory/1.0/fusionAgent.cf:1:1: error: Broken variable syntax or bracket mismatch in string (awk -F: '($4 == '"$(getent group shadow | awk -F: '{print $3}' | xargs)"') {print " - user: "" $1 "" primary group is the shadow group"}' /etc/passwd)
/var/rudder/cfengine-community/inputs/inventory/1.0/fusionAgent.cf:1:1: error: Broken scalar variable syntax or bracket mismatch in 'audit_from_command_awk -F: '($4 == '"$(getent group shadow | awk -F: '{print $3}' | xargs)"') {print " - user: "" $1 "" primary group is the shadow group"}' /etc/passwd'
/var/rudder/cfengine-community/inputs/inventory/1.0/fusionAgent.cf:1:1: error: Broken scalar variable syntax or bracket mismatch in 'audit_from_command_awk -F: '($4 == '"$(getent group shadow | awk -F: '{print $3}' | xargs)"') {print " - user: "" $1 "" primary group is the shadow group"}' /etc/passwd'
/var/rudder/cfengine-community/inputs/inventory/1.0/fusionAgent.cf:1:1: error: Broken scalar variable syntax or bracket mismatch in 'audit_from_command_awk -F: '($4 == '"$(getent group shadow | awk -F: '{print $3}' | xargs)"') {print " - user: "" $1 "" primary group is the shadow group"}' /etc/passwd'
/var/rudder/cfengine-community/inputs/inventory/1.0/fusionAgent.cf:1:1: error: Broken scalar variable syntax or bracket mismatch in 'audit_from_command_awk -F: '($4 == '"$(getent group shadow | awk -F: '{print $3}' | xargs)"') {print " - user: "" $1 "" primary group is the shadow group"}' /etc/passwd'
/var/rudder/cfengine-community/inputs/inventory/1.0/fusionAgent.cf:1:1: error: Broken scalar variable syntax or bracket mismatch in 'audit_from_command_awk -F: '($4 == '"$(getent group shadow | awk -F: '{print $3}' | xargs)"') {print " - user: "" $1 "" primary group is the shadow group"}' /etc/passwd'
/var/rudder/cfengine-community/inputs/inventory/1.0/fusionAgent.cf:1:1: error: Broken scalar variable syntax or bracket mismatch in 'audit_from_command_awk -F: '($4 == '"$(getent group shadow | awk -F: '{print $3}' | xargs)"') {print " - user: "" $1 "" primary group is the shadow group"}' /etc/passwd'
Too many errors
2024-11-04T21:51:25+00:00 rudder     info: Command related to promiser '/usr/bin/env bash /var/rudder/cfengine-community/inputs/cis_debian11_srv_1/1.0/resources/7_2_3_groups_consistency.sh' returned code '0' defined as promise kept
2024-11-04T21:51:25+00:00 rudder     info: Completed execution of '/usr/bin/env bash /var/rudder/cfengine-community/inputs/cis_debian11_srv_1/1.0/resources/7_2_3_groups_consistency.sh'
A| compliant     cis_debian11_srv_1        Ensure all groups in /et| /usr/bin/env bash| Execute audit command /usr/bin/env bash /var/rudder/cfengine-community/inputs/cis_debian11_srv_1/1.0/resources/7_2_3_groups_consistency.sh was correct
E| n/a           cis_debian11_srv_1        Unsupported enforce mode  Unimplemented Enf| Skipping method 'Report if condition' with key parameter 'Unimplemented Enforce mode for this CIS item.' since condition 'cis_debian11_7_2_3_enforce' is not reached was not applicable
2024-11-04T21:51:25+00:00 rudder     info: Executing 'no timeout' ... 'awk -F: '($1=="shadow") {print $NF}' /etc/group'
2024-11-04T21:51:25+00:00 rudder     info: Command related to promiser 'awk -F: '($1=="shadow") {print $NF}' /etc/group' returned code '0' not defined as promise kept, not kept or repaired; setting to failed
2024-11-04T21:51:25+00:00 rudder     info: Completed execution of 'awk -F: '($1=="shadow") {print $NF}' /etc/group'
A| non-compliant cis_debian11_srv_1        Ensure shadow group is e| awk -F: '($1=="sh| Execute audit command awk -F: '($1=="shadow") {print $NF}' /etc/group was not correct
2024-11-04T21:51:25+00:00 rudder     info: Executing 'no timeout' ... 'awk -F: '($4 == '"$(getent group shadow | awk -F: '{print $3}' | xargs)"') {print " - user: "" $1 "" primary group is the shadow group"}' /etc/passwd'
2024-11-04T21:51:25+00:00 rudder     info: Command related to promiser 'awk -F: '($4 == '"$(getent group shadow | awk -F: '{print $3}' | xargs)"') {print " - user: "" $1 "" primary group is the shadow group"}' /etc/passwd' returned code '0' not defined as promise kept, not kept or repaired; setting to failed
2024-11-04T21:51:25+00:00 rudder     info: Completed execution of 'awk -F: '($4 == '"$(getent group shadow | awk -F: '{print $3}' | xargs)"') {print " - user: "" $1 "" primary group is the shadow group"}' /etc/passwd'
error    Rudder agent was interrupted during execution by a fatal error