| #!/bin/bash |
| # Copyright 2021 Google LLC |
| # |
| # Licensed under the Apache License, Version 2.0 (the "License"); |
| # you may not use this file except in compliance with the License. |
| # You may obtain a copy of the License at |
| # |
| # https://www.apache.org/licenses/LICENSE-2.0 |
| # |
| # Unless required by applicable law or agreed to in writing, software |
| # distributed under the License is distributed on an "AS IS" BASIS, |
| # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
| # See the License for the specific language governing permissions and |
| # limitations under the License. |
| # |
| # Runs all of the alphabet compliance scripts in {SCRIPTS_DIR}. |
| |
| SCRIPTS_DIR=/usr/share/google/security/cis-compliance/scripts |
| ENV_VARS_FILE=/etc/cis-scanner/env_vars |
| # Gets benchmarks after the = as a space separated list to be used below |
| OPTED_OUT_BENCHMARKS=$(grep -o -- --benchmark-opt-out-ids=.* "${ENV_VARS_FILE}" | awk '{print $1}' | cut -f2- -d= | cut -f1 -d\" | tr ',' ' ') |
| exit_code=0 |
| |
| # Loops through both list of scripts and opted out benchmarks to make sure benchmarks that are |
| # opted out of don't run. Done this way to work with potential benchmarks that are substrings of others |
| for script in "${SCRIPTS_DIR}"/[0-9][0-9][0-9][0-9]-*.sh ; do |
| num_with_id="$(basename "${script%.*}")" |
| benchmark_id="${num_with_id:5}" |
| script_opted_out=0 |
| for opted_out_benchmark in ${OPTED_OUT_BENCHMARKS}; do |
| if [[ "${opted_out_benchmark}" == "${benchmark_id}" ]]; then |
| script_opted_out=1 |
| fi |
| done |
| if [[ ${script_opted_out} == 0 ]]; then |
| . "${script}" |
| fi |
| ret_code=$? |
| if [ "${ret_code}" -ne 0 ]; then |
| exit_code="${ret_code}" |
| echo "Error code: ${ret_code} returned while executing ${script}" |
| fi |
| done |
| |
| exit "${exit_code}" |
