cPanelSSP/SSP — pull request #31 by cPanelChrisD (2014-09-23 18:57:49+00:00)
Title: Many additions and bug-fixes...

===

ADDED - SSP used with the "--bugreport" option now prints a bug report template pre-populated with required version and environment information.

One possible way of calling the script with this option is:

curl -s https://ssp.cpanel.net/ssp | /usr/local/cpanel/3rdparty/bin/perl - --bugreport

Requested By:
Chris Borsheim

===

ADDED - Generic RPM verification checks can now be done, starting with 'cpp' and 'gcc' RPMs, which if are broken can break EasyApache in less than obvious ways.

[WARN] * RPM check: Verify Failed - [ cpp ] (Missing one or more files, may cause EasyApache to fail, verify with "rpm -V cpp")

Requested By:
Jesse Asklund

===

FIXED - Existing PHP/libmysqlclient mismatch check updated for MySQL 5.6, and also update for the RPM name change (MySQL-shared-#.# to MySQL##-shared) that happened at some point which caused this check to stop working entirely. The old RPM names still work, too.

[WARN] * PHP/libmysqlclient mismatch: /usr/bin/php linked against libmysqlclient.so.16, but MySQL-shared rpm is MySQL55-shared-5.5.37-2.cp1136

Requested By:
Jesse Asklund

===

FIXED - Removed /root/aa from the BG Botnet check, there has been a case of a legitimate file with this name that has caused a false-positive. There's plenty of other oddly-named files to check for.

===

FIXED - Only check for a missing /usr/local/cpanel/cpsrvd-ssl on systems older than 11.45, this file has been intentionally removed in 11.45+.

===

FIXED - VPS.NET and SoftLayer DNS cluster members should now be listed in the DNS cluster info. It's generic enough that custom DNS cluster plugin types may get listed in the output as well, but I've never seen one in the wild.

===

FIXED - Convert the existing CloudLinux LVE warning into critical-level style output, and provide more information about what this means:

[CRIT] * You are inside a CloudLinux LVE - DO *NOT* RESTART ANY SERVICES!
\_ The pam_lve configuration may not be excluding the wheel group, or your ssh login user was not in the wheel group.
\_ http://docs.cloudlinux.com/index.html?lve_pam_module.html

Requested By:
Peter Elsner

===

FIXED - Grammar in OpenSSL RPM check warnings.

Requested By:
Peter Elsner

===

ADDED - More "Did you know" trivia

Requested By:
Peter Elsner

===

ADDED - Check /var/cpanel/cpanel.config immutable bit.

Requested By:
Chris Borsheim

===

ADDED - Permissions and owner check for /usr/local/apache/domlogs directory (not contents).

[WARN] * Non-default Permissions: /usr/local/apache/domlogs (mode: 0710 | default: 0711) - If users can't access logs, stats won't process. See ticket 5413079.

Requested By:
Jared Ryan

===

ADDED - Add 'killall' to the root crontab check.

Requested By:
Mary Wior

===