1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
|
# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation; either version 2 of the License, or
# (at your option) any later version.
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU General Public License for more details.
# You should have received a copy of the GNU General Public License
# along with this program; if not, write to the Free Software
# Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
from sos.plugins import Plugin, RedHatPlugin, DebianPlugin, UbuntuPlugin
from os.path import exists, join, normpath
class Named(Plugin):
"""BIND named server
"""
plugin_name = "named"
profiles = ('system', 'services', 'network')
named_conf = "/etc/named.conf"
config_files = named_conf
def setup(self):
for cfg in self.config_files:
if exists(cfg):
self.add_copy_spec([
cfg,
self.get_dns_dir(cfg)
])
self.add_forbidden_path(join(self.get_dns_dir(cfg),
"chroot/dev"))
self.add_forbidden_path(join(self.get_dns_dir(cfg),
"chroot/proc"))
def get_dns_dir(self, config_file):
""" grab directory path from named{conf,boot}
"""
directory_list = self.do_regex_find_all("directory\s+\"(.*)\"",
config_file)
if directory_list:
return normpath(directory_list[0])
else:
return ""
def postproc(self):
match = r"(\s*arg \"password )[^\"]*"
subst = r"\1******"
self.do_file_sub(self.named_conf, match, subst)
class RedHatNamed(Named, RedHatPlugin):
named_conf = "/etc/named.conf"
config_files = ("/etc/named.conf",
"/etc/named.boot")
files = (named_conf, '/etc/sysconfig/named')
packages = ('bind',)
def setup(self):
super(RedHatNamed, self).setup()
self.add_copy_spec("/etc/named/")
self.add_copy_spec("/etc/sysconfig/named")
self.add_cmd_output("klist -ket /etc/named.keytab")
self.add_forbidden_path("/etc/named.keytab")
return
class DebianNamed(Named, DebianPlugin, UbuntuPlugin):
files = ('/etc/bind/named.conf')
packages = ('bind9',)
named_conf = "/etc/bind/named.conf"
config_files = (named_conf,
"/etc/bind/named.conf.options",
"/etc/bind/named.conf.local")
def setup(self):
super(DebianNamed, self).setup()
self.add_copy_spec("/etc/bind/")
return
# vim: et ts=4 sw=4
|
