#!bin/bash

yum -y install wget unzip

wget https://gitee.com/zzhlinux911218/software/raw/master/lynis-master.zip

unzip lynis-master.zip  > /dev/null

mv lynis-master  /etc/lynis

cd /etc/lynis

echo -e "\033[33m 检测系统安全中，请等待检测结果……\033[0m"

./lynis audit system |sed '1,/Results/d'  > /var/log/lynis-log

curl qq.com &> /dev/null

if [ $? !=  ];then

  echo -e "\033[31m 本机curl不通外网站点，请联系机房处理！！\033[0m"

fi

ping -c3 8.8.4.4 &> /dev/null

if [ $? !=  ];then

  echo -e "\033[31m 本机DNS不通，请联系机房处理！！\033[0m"

fi

AWS=`cat /var/log/lynis-log | grep  Warnings | wc -l`

if [ $AWS !=  ];then

    echo ""

    echo -e "\033[31m 本机系统漏洞数量如下：\033[0m"

    cat /var/log/lynis-log | grep  Warnings

   AWWS=`cat /var/log/lynis-log  | grep Found | awk   '{print $NF}'  | awk -F"["  '{print $2}'  | awk -F"]"  '{print $1}'`

   for i in "$AWWS"

   do

     cd /etc/lynis

     echo ""

     echo -e "\033[33m 警告解决方案如下……\033[0m"

     ./lynis show details  "$i"

   done

   echo ""

   echo "扫描结果 /var/log/lynis-log"

   echo "结果详情 /var/log/lynis.log"

else

   echo -e "\033[33m 本机系统检测完毕，安全！\033[0m"

fi