bash-syslog/install-bash-syslog.sh at master · xisafe/bash-syslog · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
#Installer for patch bash 4.3.30 with syslog

#!/bin/bash

#detect bash version
MAJVER=${BASH_VERSINFO[0]}
MINVER=${BASH_VERSINFO[1]}
platform='unknown'
download='wget --no-check-certificate'
unamestr=`uname`
version="4.4"
nodotversion="44"
firstpatch="1"
lastpatch="5"


#CHANGE FOR YOURS INFORMATIONS
IPSYSLOG='192.168.162.119'
BASHPRINT='MIKA' #GNU bash (MIKA), version 4.3.42(1)-release (i686-pc-linux-gnu)
#####################
echo "###########正在初始化环境#########"
yum  -y install patch make gcc curl
if [[ "$unamestr" == 'Linux' ]]; then
   platform='linux'
   download='wget --no-check-certificate'
   syslogconf='/etc/rsyslog.d'
   printrestart='systemctl restart rsyslog'
   logrotateconf="/etc/logrotate.d"
   bashpath="/bin"
   echo "PS1='\[\033[0;31m\]\u\[\033[0m\]@\[\033[0;32m\]\h\[\033[0m\] :\w\$ '" >> "/root/.bashrc"
elif [[ "$unamestr" == 'FreeBSD' ]]; then
   platform='freebsd'
   download='fetch'
   syslogconf='/usr/local/etc/rsyslog.d'
   printrestart='systemctl restart rsyslog'
   logrotateconf="/usr/local/etc/logrotate.d"
   bashpath="/usr/local/bin"
fi

printf "System: $platform / Your bash version: ${BASH_VERSINFO[0]}.${BASH_VERSINFO[1]}\n"

if [[ "$unamestr" == 'Linux' ]]
then
  printf "Do you execute update and install 'patch make gcc' ? Y/N\n"
  read answer1

  if [[ "$answer1" == "Y" ]]
    then
		echo "###########正在初始化环境#########"
  fi
fi

printf "Do you want upgrade and patch bash in your $platform ? Y/N\n"
read answer
if [[ "$answer" == "N" ]]
then
	printf "Bye\n"
	exit 1
else
	printf "解压bash${version}\n"
	TARFILE=bash-${version}.tar.gz
	tar -xzvf $TARFILE

  cd bash-4.4/
  printf "从ftp.gnu.org下载bash补丁 ${version}\n"
  #source: http://www.stevejenkins.com/blog/2014/09/how-to-manually-update-bash-to-patch-shellshock-bug-on-older-fedora-based-systems/
  for i in `seq $firstpatch $lastpatch`;
  do
    number=$(printf %02d $i)
    file="https://ftp.gnu.org/pub/gnu/bash/bash-${version}-patches/bash${nodotversion}-0$number"
    echo $file
    curl -k $file | patch -N -p0
  done

  cd ..
	printf "Patch new bash version\n"
	patch bash-${version}/config-top.h config-top_syslog.patch
	patch bash-${version}/bashhist.c bashhist_syslog.patch

	printf "Compile new bash version\n"
	cd "bash-${version}"
	sed -i -e "s/GNU bash,/GNU bash ($BASHPRINT),/" version.c
	sed -i -e "s/GNU bash,/GNU bash ($BASHPRINT),/" shell.c
	./configure
	make
	#make install

	NEWVERNAME="bash-${version}"
	OLDVERNAME="bash-$MAJVER.$MINVER"

	mv bash $NEWVERNAME-NEW
	mv $NEWVERNAME-NEW $bashpath/
	cd $bashpath
	cp bash $OLDVERNAME-OLD

  echo "user.*  -/var/log/tracecommands.log
	user.*   @$IPSYSLOG:514;GRAYLOGRFC5424" > "$syslogconf/tracecommands.conf"

  echo "/var/log/tracecommands.log {
        daily
        rotate 7
        copytruncate
        compress
        delaycompress
        missingok
        notifempty
}
" > "$logrotateconf/tracecommands"

	printf "###################################\n"
	printf "请执行以下命令\n"
	printf "cd $bashpath\n"
	printf "$NEWVERNAME-NEW\n"
	printf "mv $NEWVERNAME-NEW bash\n"
	printf "bash\n"
  	printf "$printrestart\n"
	printf "###################################\n"
fi