29 lines
654 B
Bash
29 lines
654 B
Bash
#!/usr/bin/env bash
|
|
|
|
parameter_sshd_t=maxauthtries
|
|
parameter_sshd_config=MaxAuthTries
|
|
desired_value=4
|
|
|
|
if ! command -v sshd &>/dev/null; then
|
|
echo "sshd command could not be found"
|
|
exit 0
|
|
fi
|
|
|
|
# Check using sshd -T output
|
|
actual_value=$(sshd -T | grep -i "$parameter_sshd_t" | awk '{print $2}')
|
|
|
|
if [ -z "$actual_value" ]; then
|
|
if grep -iq '^$parameter_sshd_config' /etc/ssh/sshd_config; then
|
|
actual_value=$(grep -i '^$parameter_sshd_config' /etc/ssh/sshd_config | awk '{print $2}')
|
|
else
|
|
echo "$parameter_sshd_config not set in sshd_config, using default"
|
|
exit 1
|
|
fi
|
|
fi
|
|
|
|
if [ "$actual_value" -le "$desired_value" ]; then
|
|
exit 0
|
|
else
|
|
exit 1
|
|
fi
|