Everbrent/cis
8
0
Fork 0
mirror of https://github.com/m8tin/cis.git synced 2026-06-02 14:56:58 +02:00
Code Issues Packages Projects Releases Wiki Activity

fixed check unattended upgrades disabled

Browse Source
This commit is contained in:
m8in
2026-04-22 21:21:39 +02:00
parent 65efb9481b
commit e2e1845ce9
1 changed files with 11 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
script/check/host/all/system_unattended_upgrades_are_disabled.check.sh
+11 -2
View File
@@ -1,5 +1,14 @@
#!/bin/bash #!/bin/bash
#
! systemctl is-enabled unattended-upgrades.service > /dev/null 2>&1 \ # There are three components working together:
# - systemctl status unattended-upgrades.service (One-Shot-Service, loaded means system knows the service, it DOES NOT run in background)
# - systemctl status apt-daily.timer (apt update)
# - systemctl status apt-daily-upgrade.timer (apt upgrade)
#
# So disable/enaable the Upgrade with:
# - systemctl disable --now apt-daily-upgrade.timer (--now means disable and stop)
# - systemctl enable --now apt-daily-upgrade.timer (--now means enable and start)
#
! systemctl is-enabled apt-daily-upgrade.timer > /dev/null 2>&1 \
&& exit 0 && exit 0
exit 1 exit 1