Recent changes to bugs

#133 Couldn't determine Red Hat version! Setting to 9!

2018-06-04T08:46:48.348000Z

Here is updated string of uname -r

3.10.0-693.el7.x86_64

#133 Couldn't determine Red Hat version! Setting to 9!

2018-06-04T08:45:34.624000Z

RHEL 7.2. I have installed perl-Tk and perl-Curses also, but getting this error.

Remove dependency on perl 'lib' module

2013-09-19T15:00:15.886000Z

The attached patch is intended as a first step to cleaning up the include paths. This one simply removes the dependency on 'lib' while preserving the existing behaviour.

rpm package is made for 64-bit only

2012-03-15T18:14:19Z

The bastille rpm puts API.pm, etc, into /usr/lib64/Bastille. Trying to run bastille on a 32-bit OS results in a failure to locate API.pm.

OSMAP/OSX.system update for OSX 10.7.2

2011-11-09T20:23:45Z

9 bin,chown,'/usr/bin/chown'
>>bin,chown,'/usr/sbin/chown
___________________________________
Empty directories.
$ which apt-get
$ which dpkg
$ which dump
$ which profile
$ which rdist
$ which rdump
$ which restore
$ which recede
$ which rlogind
$ which rrestore
$ which rshd

$sudo ls -l /etc/xinet.d
ls: /etc/xinet.d: No such file or directory
$ sudo ls -l /var/cron
ls: /var/cron: No such file or directory

couple of doubles in /usr/share/Bastille/OSMap/OSX.system
_________________________________________________________
/etc/httpd.conf = wwwroot/conf/httpd.conf:
-f config
Uses the directives in the file config on startup. If config
does not begin with a /, then it is taken to be a path relative
to the ServerRoot. The default is conf/httpd.conf.

Unsupported + defined(%hash) is deprecated OS Mac OSX 10.5-7

2011-11-09T19:30:28Z

$ perl -version

This is perl 5, version 12, subversion 3 (v5.12.3) built for darwin-multi-2level

Perl may be copied only under the terms of either the Artistic License or the
GNU General Public License, which may be found in the Perl 5 source kit.

Complete documentation for Perl, including FAQ lists, should be found on
this system using "man perl" or "perldoc perl". If you have access to the
Internet, point your browser at http://www.perl.org/, the Perl Home Page.

defined(%hash) is deprecated at /usr/lib/Bastille/HP_API.pm line 100
100 if(! defined %GLOBAL_SWLIST) {
defined(%hash) is deprecated at /usr/lib/Bastille/API.pm line 1276
1276 if ( defined %GLOBAL_SUM ) {

A quick search of CPAN turned up Class::PseudoHash which explains:

Due to its impact on overall performance of ordinary hashes, pseudo-hashes are deprecated in perl v5.8, and will cease to exist in perl v5.10. By then, the fields pragma is supposed to change to use a different implementation.

Class::PseudoHash transparently supports PseudoHashes by simply adding two lines to your program.

$ sudo bastille --report
/usr/sbin/bastille: line 171: [: too many arguments
defined(%hash) is deprecated at /usr/lib/Bastille/HP_API.pm line 100.
(Maybe you should just omit the defined()?)
defined(%hash) is deprecated at /usr/lib/Bastille/API.pm line 1276.
(Maybe you should just omit the defined()?)
ERROR: 'unknown' is not a supported operating system.
Valid operating system versions are as follows:
OSX:
'OSX10.2' 'OSX10.3' 'OSX10.4'
>> 'OSX10.5' 'OSX10.6' 'OSX10.7'
HP-UX:
'HP-UX11.00' 'HP-UX11.11' 'HP-UX11.22' 'HP-UX11.23' 'HP-UX11.31'

LINUX:
'DB2.2' 'DB3.0' 'RH6.0' 'RH6.1' 'RH6.2'
'RH7.0' 'RH7.1' 'RH7.2' 'RH7.3' 'RH8.0'
'RH9' 'RHEL4AS' 'RHEL4ES' 'RHEL4WS' 'RHEL3AS'
'RHEL3ES' 'RHEL3WS' 'RHEL2AS' 'RHEL2ES' 'RHEL2WS'
'RHFC1' 'RHFC2' 'RHFC3' 'RHFC4' 'RHFC5'
'MN6.0' 'MN6.1 ' 'MN7.0' 'MN7.1' 'MN7.2'
'MN8.0' 'MN8.1' 'MN8.2' 'MN9.2' 'MN10.0'
'MN10.1' 'MN2006.0' 'SE7.2' 'SE7.3' 'SE8.0'
'SE8.1' 'SE9.0' 'SE9.1' 'SE9.2' 'SE9.3'
'SE10.0' 'SESLES8' 'SESLES9' 'TB7.0'

Invalid argument list:
Usage: bastille [ -b | -c | -r | -x [ --os version ] ]
-b : use a saved config file to apply changes
directly to system
-c : use the Curses (non-X11) TUI
-r : revert all Bastille changes to-date
-x : use the Perl/Tk (X11) GUI
--os version : ask all questions for the given operating system
version. e.g. --os RH6.0

475 # Figure out what kind of system we're on.
476 if ($release ne "") {
477 if ($release =~ /^Darwin\s+(\d+)\.(\d+)/) {
478 if ($1 == 6 ) {
479 $distro = "OSX10.2";
480 }
481 elsif ($1 == 7) {
482 $distro = "OSX10.3";
483 }
484 elsif ($1 == 8) {
485 $distro = "OSX10.4";
486 }
487 else {
488 $distro = "unknown";
489 }
490 }
491 elsif ( $release =~ /(^HP-UX)\s*B\.(\d+\.\d+)/ ) {
492 $distro="$1$2";
493 }
494 else {
495 print STDERR "$err Could not determine operating system version!\n";
496 $distro="unknown";
497 }

elsif ($1 == 9) {
$distro = "OSX10.5";
}
elsif ($1 == 10) {
$distro = "OSX10.6";
}
elsif ($1 == 11) {
$distro = "OSX10.7";
}

892 if (! &is_OS_supported($distro)) {
893 print STDERR "$err '$distro' is not a supported operating system.\n";
894 }

Proposed update:
465 # We're either on Mac OS X, HP-UX or an unsupported O/S.
466 if ( -x '/usr/bin/uname') {
467 # uname is in /usr/bin on Mac OS X and HP-UX
468 $release=`/usr/bin/uname -sr`;
>> $release=`sw_vers -productVersion` #10.7.2
469 }

476 if ($release ne "") {
477 if ($release =~ /^Darwin\s+(\d+)\.(\d+)/) {
>> if ($release =~ /^(\d+)\.(\d+)/) {

Unsupported CentOS: RHEL5AS & RHEL6AS

2011-11-09T16:45:13Z

Proposed fix:

405 if ($version =~ /^4\./) {
406 $distro='RHEL4AS';
407 }
> 408 elsif ($version =~ /^5\./) {
> 409 $distro='RHEL5AS';
> 410 }
> elsif ($version =~ /^6\./) {
> $distro='RHEL6AS';
> }
411 elsif ($version =~ /^3\./) {
412 $distro='RHEL3AS';
413 }
414 else { 415 print STDERR "$err Could not determine CentOS version ! Setting to Red Hat Enterprise 4 AS.\n";
416 $distro='RHEL4AS';
417 }
418 }

557 my %osHash = ("LINUX" => [
558 "DB2.2", "DB3.0",
559 "RH6.0","RH6.1","RH6.2","RH7.0",
560 "RH7.1","RH7.2","RH7.3","RH8.0",
561 "RH9",
562 "RHEL4AS","RHEL4ES","RHEL4WS",
>>563 "RHEL5AS","RHEL6AS","RHEL7AS",
564 "RHEL3AS","RHEL3ES","RHEL3WS",
565 "RHEL2AS","RHEL2ES","RHEL2WS",
566 "RHFC1","RHFC2","RHFC3","RHFC4","RHFC5",
567 "MN6.0","MN6.1 ","MN7.0","MN7.1",
568 "MN7.2","MN8.0","MN8.1","MN8.2",
569 "MN9.2",
570 "MN10.0","MN10.1","MN2006.0",
571 "SE7.2","SE7.3", "SE8.0","SE8.1","SE9.0","S E9.1",
572 "SE9.2","SE9.3","SE10.0",
573 "SESLES8","SESLES9",
574 "TB7.0"
575 ],

OSMap:
>> 27 bin,grub,'/sbin/grub'
>>bin,logger,'/bin/logger',RHEL5AS
>>bin,ping6,'/bin/ping6',DB,RHEL3,RHEL5AWS,RHEL6AWS,RHFC1,RHFC2,RHFC3,RHFC4,RHFC5,SE9.1,SE9.2,SE9.3,SE10.0,SESLES9
!/usr/kerberos/bin/rcp
!/usr/kerberos/bin/rsh

Doesn't work with Linux Kernel >= 3.0

2011-10-19T11:25:12Z

You check if you should use ipchains or netfilter by looking up at the kernel version. Here's your code:

if [ -n "$(uname -r | awk -F. ' $1 == 2 && $2 > 2 {print}')" ]; then
# We are using Linux 2.3 or newer; use the netfilter script if available

The idea would be "if version >= 2.3", but you're actually doing "if verstion >= 2.3 && version is 2.x", so bastille doesn't work with kernel >= 3.0...

API folder missing in 3.2.1 release

2010-01-28T14:15:51Z

I am trying to run bastille in RHEl 5.0 (Red Hat Enterprise Linux Server release 5 (Tikanga)).
i am getting the below error message when i try to run the Install.sh script

cp: cannot stat `Bastille/API/AccountPermission.pm': No such file or directory
cp: cannot stat `Bastille/API/FileContent.pm': No such file or directory
cp: cannot stat `Bastille/API/HPSpecific.pm': No such file or directory
cp: cannot stat `Bastille/API/ServiceAdmin.pm': No such file or directory
cp: cannot stat `Bastille/API/Miscellaneous.pm': No such file or directory

As i dont find the API folder thus the folder should be included with the tar. Second if in case i run the noarch rpm then try running bastille -c then i get the below error message:

ERROR: Couldn't determine Red Hat version! Setting to 9!
ERROR: Couldn't determine Red Hat version! Setting to 9!
NOTE: Using Curses user interface module.
NOTE: Only displaying questions relevant to the current configuration.
Can't locate Bastille/API/HPSpecific.pm in @INC (@INC contains: /usr/lib /usr/lib/perl5/site_perl//5.8.8/i386-linux-thread-multi /usr/lib/perl5/site_perl//5.8.8 /usr/lib/perl5/site_perl//5.8.7 /usr/lib/perl5/site_perl//5.8.6 /usr/lib/perl5/site_perl//5.8.5 /usr/lib/perl5/site_perl/ /usr/lib/Bastille /opt/sec_mgmt/bastille/lib /opt/sec_mgmt/bastille/lib/API /usr/lib/perl5/site_perl/5.8.8/i386-linux-thread-multi /usr/lib/perl5/site_perl/5.8.8 /usr/lib/perl5/site_perl/5.8.7 /usr/lib/perl5/site_perl/5.8.6 /usr/lib/perl5/site_perl/5.8.5 /usr/lib/perl5/site_perl /usr/lib/perl5/site_perl/5.6.0/i386-linux /usr/lib/perl5/site_perl/5.8.7/i386-linux-thread-multi /usr/lib/perl5/site_perl/5.8.6/i386-linux-thread-multi /usr/lib/perl5/site_perl/5.8.5/i386-linux-thread-multi /usr/lib/perl5/vendor_perl/5.8.8/i386-linux-thread-multi /usr/lib/perl5/vendor_perl/5.8.7/i386-linux-thread-multi /usr/lib/perl5/vendor_perl/5.8.6/i386-linux-thread-multi /usr/lib/perl5/vendor_perl/5.8.5/i386-linux-thread-multi /usr/lib/perl5/vendor_perl/5.8.8 /usr/lib/perl5/vendor_perl/5.8.7 /usr/lib/perl5/vendor_perl/5.8.6 /usr/lib/perl5/vendor_perl/5.8.5 /usr/lib/perl5/vendor_perl /usr/lib/perl5/5.8.8/i386-linux-thread-multi /usr/lib/perl5/5.8.8) at /usr/lib/Bastille/IOLoader.pm line 8.
BEGIN failed--compilation aborted at /usr/lib/Bastille/IOLoader.pm line 8.
Compilation failed in require at /usr/sbin/InteractiveBastille line 414.

Regards
Prakash

Project stalled? Current version is broken

2009-04-16T03:07:14Z

Did a lot of Googling and testing; my conclusion is that the current version (3.2.1 - September 25, 2008 - Bastille-3.2.1-0.1.noarch.rpm) is not working except perhaps for one ore more specific distros (64-bit, HP only?). The project's news page (http://bastille-linux.sourceforge.net/news_updates.htm) last item is "September 12, 2007: There's a release coming tomorrow - stay tuned." I'm guessing Jay isn't around anymore and the HP sponsored team has been focused on their platform rather than maintaining the package as an open solution. The fact that the (apparently working) older version (Bastille-3.0.9-1.0.noarch.rpm) isn't (easily?) available here doesn't help. Here are the steps I've followed on CentOS 5:

downloaded from here and installed 3.2.1-0.1 via rpm -ivh
yum install perl-Curses

bastille -c

Error message: Can't locate Bastille/API.pm in @INC . . .

grep'd /usr/sbin/InteractiveBastille for "use lib" line
found Bastille directory (containing API.pm) in /usr/lib64 rather than /usr/lib, so moved it to /usr/lib (also could have symlinked or edited the IB script)

Then got: Can't locate Bastille/API/HPSpecific.pm

Turns out (as noted below) both the rpm and the source package lack an 'API' folder.

Created the folder and used wget to retrieve the files from the SCM repository:
http://bastille-linux.cvs.sourceforge.net/viewvc/bastille-linux/dev/working_tree/Bastille/Bastille/API/

Then got "Could not determine CentOS version". Someone had claimed the below would work, but it didn't:

Changed /etc/redhat-release from
CentOS release 5 (Final)
to:
Red Hat Enterprise Linux Server release 5 (Tikanga)

Further errors coming from the new scripts in the API directory, so gave up. Will now try the older version, available via direct download here:

http://iweb.dl.sourceforge.net/sourceforge/bastille-linux/Bastille-3.0.9-1.0.noarch.rpm

IMO this is no way to run a railroad, but since I'm just an end-user and not a contributor I guess I've got no right to B&M about it. While I'm at it thanks to all the developers who've put in so much of their time and energy on this tool, just looking at the code is a good learning experience so far. Here's hoping it gets some love in the future to bring it in sync with current distro versions. . .

And I hope this post saves others from wasting some of their time - feedback welcome: hans@pobox.com