openscap/oscap-scan.sh

27 lines
523 B
Bash

#!/bin/bash
PATH=/sbin:/bin:/usr/sbin:/usr/bin
prog="oscap"
# Check config
test -f /etc/sysconfig/oscap-scan && . /etc/sysconfig/oscap-scan
RETVAL=0
test -f /etc/sysconfig/oscap-scan || exit 6
test x"$OPTIONS" != "x" || exit 6
$prog $OPTIONS
ERR=$?
if [ $ERR -eq 0 ] ; then
logger "OpenSCAP security scan: PASS"
elif [ $ERR -eq 1 ] ; then
logger "OpenSCAP security scan: ERROR. Run oscap scan from command line."
else
logger "OpenSCAP security scan: FAILED. See results in /var/log/oscap-scan.xml.log"
fi
exit 0