ExternalVendorCode/HIRS
1
0
Fork 0
mirror of https://github.com/nsacyber/HIRS.git synced 2024-12-19 04:58:00 +00:00
Code Issues Actions 3 Packages Projects Releases Wiki Activity

added environment variables to db_create [no ci]

Browse Source
This commit is contained in:
iadgovuser26 iadgovuser26@empire.eclipse.ncsc.mil 2023-01-27 20:50:16 +00:00
parent 11044f92a5
commit dd4d64badd
3 changed files with 42 additions and 18 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

53
package/scripts/common/db_create.sh
View File

@ -1,20 +1,28 @@
#!/bin/bash
#
###############################################
###############################################################################
# HIRS DB creation
# Conditions to address
# a. Install is called mutiple times
# b. Another app sets the root password
# c. ACA is updated
# d. ACA is updated after a DB password change
################################################
# Environment variables used:
# a. HIRS_MYSQL_ROOT_EXSITING_PWD: set this variable if mysql root password is already set
# b. HIRS_MYSQL_ROOT_NEW_PWD: set this variable if install needs to set new pwd
# c. HIRS_DB_PWD: Set the pwd if default password to hirs_db user needs to be changed
# HIRS_MYSQL_ROOT_NEW_PWD wil be ignored if HIRS_MYSQL_ROOT_EXSITING_PWD is set.
################################################################################
if [ -z ${HIRS_DB_PWD+x} ]; then
DB_DEFAULT_PWD="hirs_db";
else
DB_DEFAULT_PWD=$HIRS_DB_PWD;
# Set Mysql root password
if [ ! -z $HIRS_MYSQL_ROOT_EXSITING_PWD ]; then
HIRS_MYSQL_ROOT_PWD=$HIRS_MYSQL_ROOT_EXSITING_PWD;
elif [ ! -z $HIRS_MYSQL_ROOT_NEW_PWD ]; then
HIRS_MYSQL_ROOT_PWD=$HIRS_MYSQL_ROOT_NEW_PWD;
else
HIRS_MYSQL_ROOT_PWD="root";
fi
echo "HIRS_DB_PWD is $HIRS_DB_PWD"
echo "HIRS_MYSQL_ROOT_EXSITING_PWD is $HIRS_MYSQL_ROOT_EXSITING_PWD"
echo "HIRS_MYSQL_ROOT_NEW_PWD is $HIRS_MYSQL_ROOT_NEW_PWD"
echo "HIRS_MYSQL_ROOT_PWD is $HIRS_MYSQL_ROOT_PWD"
# Check if we're in a Docker container
if [ -f /.dockerenv ]; then
DOCKER_CONTAINER=true
@ -51,11 +59,22 @@ while ! mysqladmin ping -h "$localhost" --silent; do
sleep 1;
done
# Set intial password, ingore result in case its already been set
echo "Setting Mysql password"
mysqladmin -u root --silent password $DB_DEFAULT_PWD || true > /dev/null 2>&1
# Create the hirs_db database
echo "Creating HIRS Database..."
DB_CREATE_SCRIPT=/opt/hirs/scripts/common/db_create.sql.el7
mysql -u root --password="$DB_DEFAULT_PWD" < $DB_CREATE_SCRIPT
if [ ! -z $HIRS_MYSQL_ROOT_EXSITING_PWD ]; then
echo "processing with hirs root set"
mysql -u root --password=$HIRS_MYSQL_ROOT_PWD < /opt/hirs/scripts/common/db_create.sql
mysql -u root --password=$HIRS_MYSQL_ROOT_PWD < /opt/hirs/scripts/common/secure_mysql.sql
else
echo "processing with hirs root NOT set"
mysql -u root < /opt/hirs/scripts/common/db_create.sql
mysql -u root < /opt/hirs/scripts/common/secure_mysql.sql
mysqladmin -u root --silent password $HIRS_MYSQL_ROOT_PWD || true > /dev/null 2>&1
fi
if [ ! -z $HIRS_DB_PWD ]; then
echo "Setting hirs_db password"
mysql -u root --password=$HIRS_MYSQL_ROOT_PWD -e "ALTER USER 'hirs_db'@'localhost' IDENTIFIED BY '"$HIRS_DB_PWD"'; FLUSH PRIVILEGES;";
fi

0
package/scripts/common/db_create.sql.el7 → package/scripts/common/db_create.sql
View File

5
package/scripts/common/secure_mysql.sql Normal file
View File

@ -0,0 +1,5 @@
DELETE FROM mysql.user WHERE User='';
DELETE FROM mysql.user WHERE User='root' AND Host NOT IN ('localhost', '127.0.0.1', '::1');
DROP DATABASE IF EXISTS test;
DELETE FROM mysql.db WHERE Db='test' OR Db='test\\_%';
FLUSH PRIVILEGES