0bf12412d6
* fix(rocky): fix OVAL scan in Rocky Linux * chore: add FreeBSD13 EOL, fix #1245 * chore(rocky): add Rocky Linux EOL tests * feat(rocky): implement with reference to CentOS * feat(raspbian): add Raspbian to Server mode * feat(rocky): support gost scan * fix(rocky): rocky support lessThan * chore: update doc and comment
119 lines
2.5 KiB
Go
119 lines
2.5 KiB
Go
package scanner
|
|
|
|
import (
|
|
"github.com/future-architect/vuls/config"
|
|
"github.com/future-architect/vuls/logging"
|
|
"github.com/future-architect/vuls/models"
|
|
)
|
|
|
|
// inherit OsTypeInterface
|
|
type rocky struct {
|
|
redhatBase
|
|
}
|
|
|
|
// NewRocky is constructor
|
|
func newRocky(c config.ServerInfo) *rocky {
|
|
r := &rocky{
|
|
redhatBase{
|
|
base: base{
|
|
osPackages: osPackages{
|
|
Packages: models.Packages{},
|
|
VulnInfos: models.VulnInfos{},
|
|
},
|
|
},
|
|
sudo: rootPrivRocky{},
|
|
},
|
|
}
|
|
r.log = logging.NewNormalLogger()
|
|
r.setServerInfo(c)
|
|
return r
|
|
}
|
|
|
|
func (o *rocky) checkScanMode() error {
|
|
return nil
|
|
}
|
|
|
|
func (o *rocky) checkDeps() error {
|
|
if o.getServerInfo().Mode.IsFast() {
|
|
return o.execCheckDeps(o.depsFast())
|
|
} else if o.getServerInfo().Mode.IsFastRoot() {
|
|
return o.execCheckDeps(o.depsFastRoot())
|
|
} else {
|
|
return o.execCheckDeps(o.depsDeep())
|
|
}
|
|
}
|
|
|
|
func (o *rocky) depsFast() []string {
|
|
if o.getServerInfo().Mode.IsOffline() {
|
|
return []string{}
|
|
}
|
|
|
|
// repoquery
|
|
// `rpm -qa` shows dnf-utils as yum-utils on RHEL8, CentOS8, Rocky8
|
|
return []string{"yum-utils"}
|
|
}
|
|
|
|
func (o *rocky) depsFastRoot() []string {
|
|
if o.getServerInfo().Mode.IsOffline() {
|
|
return []string{}
|
|
}
|
|
|
|
// repoquery
|
|
// `rpm -qa` shows dnf-utils as yum-utils on RHEL8, CentOS8, Rocky8
|
|
return []string{"yum-utils"}
|
|
}
|
|
|
|
func (o *rocky) depsDeep() []string {
|
|
return o.depsFastRoot()
|
|
}
|
|
|
|
func (o *rocky) checkIfSudoNoPasswd() error {
|
|
if o.getServerInfo().Mode.IsFast() {
|
|
return o.execCheckIfSudoNoPasswd(o.sudoNoPasswdCmdsFast())
|
|
} else if o.getServerInfo().Mode.IsFastRoot() {
|
|
return o.execCheckIfSudoNoPasswd(o.sudoNoPasswdCmdsFastRoot())
|
|
} else {
|
|
return o.execCheckIfSudoNoPasswd(o.sudoNoPasswdCmdsDeep())
|
|
}
|
|
}
|
|
|
|
func (o *rocky) sudoNoPasswdCmdsFast() []cmd {
|
|
return []cmd{}
|
|
}
|
|
|
|
func (o *rocky) sudoNoPasswdCmdsFastRoot() []cmd {
|
|
if !o.ServerInfo.IsContainer() {
|
|
return []cmd{
|
|
{"repoquery -h", exitStatusZero},
|
|
{"needs-restarting", exitStatusZero},
|
|
{"which which", exitStatusZero},
|
|
{"stat /proc/1/exe", exitStatusZero},
|
|
{"ls -l /proc/1/exe", exitStatusZero},
|
|
{"cat /proc/1/maps", exitStatusZero},
|
|
{"lsof -i -P", exitStatusZero},
|
|
}
|
|
}
|
|
return []cmd{
|
|
{"repoquery -h", exitStatusZero},
|
|
{"needs-restarting", exitStatusZero},
|
|
}
|
|
}
|
|
|
|
func (o *rocky) sudoNoPasswdCmdsDeep() []cmd {
|
|
return o.sudoNoPasswdCmdsFastRoot()
|
|
}
|
|
|
|
type rootPrivRocky struct{}
|
|
|
|
func (o rootPrivRocky) repoquery() bool {
|
|
return false
|
|
}
|
|
|
|
func (o rootPrivRocky) yumMakeCache() bool {
|
|
return false
|
|
}
|
|
|
|
func (o rootPrivRocky) yumPS() bool {
|
|
return false
|
|
}
|