main
Robert 7 months ago
parent bfb6e4e504
commit b6a72961e4
  1. 59
      install.sh
  2. 6
      reBuild.sh

@ -23,6 +23,17 @@
-o banner_service \
banner_service.go
if [ $? -eq 0 ]; then
/usr/bin/echo "Built Banner Service..."
else
/usr/bin/echo "Failed to compile Banner Service!"
exit 1
fi
if [ -f /etc/systemd/system/banner.service ]; then
/usr/bin/sudo /usr/bin/systemctl disable --now banner.service
fi
/usr/bin/sudo /usr/bin/cp banner_service /usr/local/bin/
/usr/bin/sudo /usr/bin/chown root:bannersvc /usr/local/bin/banner_service
/usr/bin/sudo /usr/bin/chmod 750 /usr/local/bin/banner_service
@ -30,40 +41,44 @@
/usr/bin/echo "Set capabilities (for binding to port 9999 without root)"
/usr/bin/sudo /usr/sbin/setcap 'cap_net_bind_service=+ep' /usr/local/bin/banner_service
/usr/bin/echo "Copy over Service Files"
/usr/bin/sudo /usr/bin/cp banner.service /etc/systemd/system/banner.service
/usr/bin/sudo /usr/bin/chmod 644 /etc/systemd/system/banner.service
/usr/bin/sudo /usr/bin/mkdir -p /etc/systemd/system/banner.service.d
/usr/bin/sudo /usr/bin/cp seccomp.conf /etc/systemd/system/banner.service.d/seccomp.conf
/usr/bin/sudo /usr/bin/chmod 644 /etc/systemd/system/banner.service
/usr/bin/echo "Enable the service for Banner"
/usr/bin/sudo /usr/bin/systemctl daemon-reload
/usr/bin/sudo /usr/bin/systemctl enable --now banner.service
if [ ! -f /etc/systemd/system/banner.service ]; then
/usr/bin/echo "Copy over Service Files"
/usr/bin/sudo /usr/bin/cp banner.service /etc/systemd/system/banner.service
/usr/bin/sudo /usr/bin/chmod 644 /etc/systemd/system/banner.service
/usr/bin/sudo /usr/bin/mkdir -p /etc/systemd/system/banner.service.d
/usr/bin/sudo /usr/bin/cp seccomp.conf /etc/systemd/system/banner.service.d/seccomp.conf
/usr/bin/sudo /usr/bin/chmod 644 /etc/systemd/system/banner.service
/usr/bin/echo "Enable the service for Banner"
/usr/bin/sudo /usr/bin/systemctl daemon-reload
/usr/bin/sudo /usr/bin/systemctl enable --now banner.service
fi
/usr/bin/echo "Create the service account for synfirewall"
sudo groupadd synfirewall
sudo useradd -r -g synfirewall -s /usr/sbin/nologin \
-d /var/lib/syn-firewall -c "SYN Scan Firewall" synfirewall
/usr/bin/echo "Making config.yaml"
/usr/bin/sudo /usr/bin/mkdir -p /etc/SYN-Scan-Firewall
/usr/bin/sudo /usr/bin/chown synfirewall:synfirewall /etc/SYN-Scan-Firewall
/usr/bin/sudo /usr/bin/chmod 750 /etc/SYN-Scan-Firewall
/usr/bin/sudo /usr/bin/cp config-example.yaml /etc/SYN-Scan-Firewall/config.yaml
/usr/bin/sudo /usr/bin/chmod 640 /etc/SYN-Scan-Firewall/config.yaml
/usr/bin/sudo /usr/bin/nano /etc/SYN-Scan-Firewall/config.yaml
if [ ! -f /etc/SYN-Scan-Firewall/config.yaml ]; then
/usr/bin/echo "Making config.yaml"
/usr/bin/sudo /usr/bin/mkdir -p /etc/SYN-Scan-Firewall
/usr/bin/sudo /usr/bin/chown synfirewall:synfirewall /etc/SYN-Scan-Firewall
/usr/bin/sudo /usr/bin/chmod 750 /etc/SYN-Scan-Firewall
/usr/bin/sudo /usr/bin/cp config-example.yaml /etc/SYN-Scan-Firewall/config.yaml
/usr/bin/sudo /usr/bin/chmod 640 /etc/SYN-Scan-Firewall/config.yaml
/usr/bin/sudo /usr/bin/nano /etc/SYN-Scan-Firewall/config.yaml
fi
/usr/bin/echo "Making lib dir..."
/usr/bin/sudo /usr/bin/mkdir -p /var/lib/syn-firewall
/usr/bin/sudo /usr/bin/chown synfirewall:synfirewall /var/lib/syn-firewall
/usr/bin/sudo /usr/bin/chmod 750 /var/lib/syn-firewall
./reBuild.sh
/usr/bin/echo "Copy over Service Files for SYN-Scan-Firewall"
/usr/bin/sudo /usr/bin/cp SYN-Scan-Firewall.service /etc/systemd/system/
/usr/bin/sudo /usr/bin/chmod 644 /etc/systemd/system/SYN-Scan-Firewall.service
if [ ! -f /etc/systemd/system/SYN-Scan-Firewall.service]; then
/usr/bin/echo "Copy over Service Files for SYN-Scan-Firewall"
/usr/bin/sudo /usr/bin/cp SYN-Scan-Firewall.service /etc/systemd/system/
/usr/bin/sudo /usr/bin/chmod 644 /etc/systemd/system/SYN-Scan-Firewall.service
fi
if [ ! -f /etc/apparmor.d/usr.local.bin.SYN-Scan-Firewall
/usr/bin/echo "Adding AppArmor policy file..."
/usr/bin/sudo /usr/bin/cp AppArmor.policy /etc/apparmor.d/usr.local.bin.SYN-Scan-Firewall

@ -9,6 +9,12 @@ go build \
-tags="netgo osusergo" \
-o SYN-Scan-Firewall \
SYN-Scan-Firewall.go
if [ $? -eq 0 ]; then
/usr/bin/echo "Built SYN-Scan-Firewall..."
else
/usr/bin/echo "Compile Failed for SYN-Scan-Firewall!"
exit 1
fi
/usr/bin/echo "Setting up local bin..."
/usr/bin/sudo /usr/bin/cp SYN-Scan-Firewall /usr/local/bin/

Loading…
Cancel
Save