From b6a72961e46bbc080381ab6fa9ceb953f57fbb97 Mon Sep 17 00:00:00 2001 From: Robert Date: Fri, 23 May 2025 21:37:25 -0400 Subject: [PATCH] if checks1 --- install.sh | 59 ++++++++++++++++++++++++++++++++++-------------------- reBuild.sh | 6 ++++++ 2 files changed, 43 insertions(+), 22 deletions(-) diff --git a/install.sh b/install.sh index 6931193..bf1451b 100755 --- a/install.sh +++ b/install.sh @@ -23,6 +23,17 @@ -o banner_service \ banner_service.go +if [ $? -eq 0 ]; then + /usr/bin/echo "Built Banner Service..." +else + /usr/bin/echo "Failed to compile Banner Service!" + exit 1 +fi + +if [ -f /etc/systemd/system/banner.service ]; then + /usr/bin/sudo /usr/bin/systemctl disable --now banner.service +fi + /usr/bin/sudo /usr/bin/cp banner_service /usr/local/bin/ /usr/bin/sudo /usr/bin/chown root:bannersvc /usr/local/bin/banner_service /usr/bin/sudo /usr/bin/chmod 750 /usr/local/bin/banner_service @@ -30,40 +41,44 @@ /usr/bin/echo "Set capabilities (for binding to port 9999 without root)" /usr/bin/sudo /usr/sbin/setcap 'cap_net_bind_service=+ep' /usr/local/bin/banner_service -/usr/bin/echo "Copy over Service Files" -/usr/bin/sudo /usr/bin/cp banner.service /etc/systemd/system/banner.service -/usr/bin/sudo /usr/bin/chmod 644 /etc/systemd/system/banner.service -/usr/bin/sudo /usr/bin/mkdir -p /etc/systemd/system/banner.service.d -/usr/bin/sudo /usr/bin/cp seccomp.conf /etc/systemd/system/banner.service.d/seccomp.conf -/usr/bin/sudo /usr/bin/chmod 644 /etc/systemd/system/banner.service - -/usr/bin/echo "Enable the service for Banner" -/usr/bin/sudo /usr/bin/systemctl daemon-reload -/usr/bin/sudo /usr/bin/systemctl enable --now banner.service +if [ ! -f /etc/systemd/system/banner.service ]; then + /usr/bin/echo "Copy over Service Files" + /usr/bin/sudo /usr/bin/cp banner.service /etc/systemd/system/banner.service + /usr/bin/sudo /usr/bin/chmod 644 /etc/systemd/system/banner.service + /usr/bin/sudo /usr/bin/mkdir -p /etc/systemd/system/banner.service.d + /usr/bin/sudo /usr/bin/cp seccomp.conf /etc/systemd/system/banner.service.d/seccomp.conf + /usr/bin/sudo /usr/bin/chmod 644 /etc/systemd/system/banner.service + /usr/bin/echo "Enable the service for Banner" + /usr/bin/sudo /usr/bin/systemctl daemon-reload + /usr/bin/sudo /usr/bin/systemctl enable --now banner.service +fi /usr/bin/echo "Create the service account for synfirewall" sudo groupadd synfirewall sudo useradd -r -g synfirewall -s /usr/sbin/nologin \ -d /var/lib/syn-firewall -c "SYN Scan Firewall" synfirewall -/usr/bin/echo "Making config.yaml" -/usr/bin/sudo /usr/bin/mkdir -p /etc/SYN-Scan-Firewall -/usr/bin/sudo /usr/bin/chown synfirewall:synfirewall /etc/SYN-Scan-Firewall -/usr/bin/sudo /usr/bin/chmod 750 /etc/SYN-Scan-Firewall -/usr/bin/sudo /usr/bin/cp config-example.yaml /etc/SYN-Scan-Firewall/config.yaml -/usr/bin/sudo /usr/bin/chmod 640 /etc/SYN-Scan-Firewall/config.yaml -/usr/bin/sudo /usr/bin/nano /etc/SYN-Scan-Firewall/config.yaml - +if [ ! -f /etc/SYN-Scan-Firewall/config.yaml ]; then + /usr/bin/echo "Making config.yaml" + /usr/bin/sudo /usr/bin/mkdir -p /etc/SYN-Scan-Firewall + /usr/bin/sudo /usr/bin/chown synfirewall:synfirewall /etc/SYN-Scan-Firewall + /usr/bin/sudo /usr/bin/chmod 750 /etc/SYN-Scan-Firewall + /usr/bin/sudo /usr/bin/cp config-example.yaml /etc/SYN-Scan-Firewall/config.yaml + /usr/bin/sudo /usr/bin/chmod 640 /etc/SYN-Scan-Firewall/config.yaml + /usr/bin/sudo /usr/bin/nano /etc/SYN-Scan-Firewall/config.yaml +fi /usr/bin/echo "Making lib dir..." /usr/bin/sudo /usr/bin/mkdir -p /var/lib/syn-firewall /usr/bin/sudo /usr/bin/chown synfirewall:synfirewall /var/lib/syn-firewall /usr/bin/sudo /usr/bin/chmod 750 /var/lib/syn-firewall ./reBuild.sh -/usr/bin/echo "Copy over Service Files for SYN-Scan-Firewall" -/usr/bin/sudo /usr/bin/cp SYN-Scan-Firewall.service /etc/systemd/system/ -/usr/bin/sudo /usr/bin/chmod 644 /etc/systemd/system/SYN-Scan-Firewall.service - +if [ ! -f /etc/systemd/system/SYN-Scan-Firewall.service]; then + /usr/bin/echo "Copy over Service Files for SYN-Scan-Firewall" + /usr/bin/sudo /usr/bin/cp SYN-Scan-Firewall.service /etc/systemd/system/ + /usr/bin/sudo /usr/bin/chmod 644 /etc/systemd/system/SYN-Scan-Firewall.service +fi +if [ ! -f /etc/apparmor.d/usr.local.bin.SYN-Scan-Firewall /usr/bin/echo "Adding AppArmor policy file..." /usr/bin/sudo /usr/bin/cp AppArmor.policy /etc/apparmor.d/usr.local.bin.SYN-Scan-Firewall diff --git a/reBuild.sh b/reBuild.sh index 54d47ad..4da2155 100755 --- a/reBuild.sh +++ b/reBuild.sh @@ -9,6 +9,12 @@ go build \ -tags="netgo osusergo" \ -o SYN-Scan-Firewall \ SYN-Scan-Firewall.go +if [ $? -eq 0 ]; then + /usr/bin/echo "Built SYN-Scan-Firewall..." +else + /usr/bin/echo "Compile Failed for SYN-Scan-Firewall!" + exit 1 +fi /usr/bin/echo "Setting up local bin..." /usr/bin/sudo /usr/bin/cp SYN-Scan-Firewall /usr/local/bin/