V8.00.000.2025.06.17

Signed-off-by: Marc S. Weidner <msw@coresecret.dev>

includes/target/root/.ciss/alias

@@ -43,6 +43,7 @@ alias aptac='apt autoclean'
 alias aptap='apt autopurge'
 alias aptar='apt autoremove'
 alias aptcheck='apt-get check'
+alias aptcp='apt-cache policy'
 alias aptdep='apt-cache depends'
 alias aptdl='apt-get install --download-only'
 alias aptfug='apt full-upgrade'

includes/target/root/.ciss/clean_logout.sh

@@ -9,6 +9,7 @@
 # SPDX-LicenseComment: This file is part of the CISS.debian.installer.secure framework.
 # SPDX-PackageName: CISS.debian.installer
 # SPDX-Security-Contact: security@coresecret.eu
+
 clear
 
 cat << 'EOF'

includes/target/root/.ciss/f2bchk.sh

@@ -48,7 +48,7 @@ f2bchk(){
       --log=*)    log="${arg#--log=}";;
       --output=*) output="${arg#--output=}";;
       *)
-        printf "%s[ERROR]%s Unknown argument: '%s' %s" "${CRED}" "${CRES}" "${arg}" "${CRED}"
+        printf "%b[ERROR]%b Unknown argument: '%s' %b" "${CRED}" "${CRES}" "${arg}" "${CRED}"
         return 1
         ;;
     esac
@@ -60,7 +60,7 @@ f2bchk(){
     matched) flag="--print-all-matched"; suffix="all.matched";;
     missed)  flag="--print-all-missed";  suffix="all.missed";;
     *)
-      printf "%s[ERROR]%s Invalid mode: '%s' %s" "${CRED}" "${CRES}" "${mode}" "${NL}"
+      printf "%b[ERROR]%b Invalid mode: '%s' %b" "${CRED}" "${CRES}" "${mode}" "${NL}"
       return 1
       ;;
   esac
@@ -72,24 +72,24 @@ f2bchk(){
   fi
 
   if [[ ! -r "${log}" ]]; then
-    printf "%s[ERROR]%s Log file '%s' not found or not readable. %s" "${CRED}" "${CRES}" "${log}" "${NL}"
+    printf "%b[ERROR]%b Log file '%s' not found or not readable. %b" "${CRED}" "${CRES}" "${log}" "${NL}"
     return 1
   fi
 
   if [[ ! -r "${filter}" ]]; then
-    printf "%s[ERROR]%s Filter file '%s' not found or not readable. %s" "${CRED}" "${CRES}" "${filter}" "${NL}"
+    printf "%b[ERROR]%b Filter file '%s' not found or not readable. %b" "${CRED}" "${CRES}" "${filter}" "${NL}"
     return 1
   fi
 
-  printf "%s[INFO]%s Running: fail2ban-regex '%s %s %s' %s" "${CGRE}" "${CRES}" "${log}" "${filter}" "${flag}" "${NL}"
+  printf "%b[INFO]%b Running: fail2ban-regex '%s %s %s' %b" "${CGRE}" "${CRES}" "${log}" "${filter}" "${flag}" "${NL}"
 
   if fail2ban-regex "${log}" "${filter}" "${flag}" >| "${output}"; then
 
-    printf "%s[SUCCESS]%s Saved log to: '%s' %s" "${CGRE}" "${CRES}" "${output}" "${NL}"
-    printf "You can view it with: cat %s%s" "${output}" "${NL}"
+    printf "%b[SUCCESS]%b Saved log to: '%s' %b" "${CGRE}" "${CRES}" "${output}" "${NL}"
+    printf "You can view it with: cat %s%b" "${output}" "${NL}"
   else
 
-    printf "%s[ERROR]%s fail2ban-regex execution failed. %s" "${CRED}" "${CRES}" "${NL}"
+    printf "%b[ERROR]%b fail2ban-regex execution failed. %b" "${CRED}" "${CRES}" "${NL}"
     return 1
 
   fi

includes/target/root/.ciss/scan_libwrap

@@ -20,7 +20,7 @@
 #   None
 #######################################
 scanlw() {
-  printf "%s🔍 Scanning all running processes for 'libwrap' usage ... %s%s" "${CGRE}" "${CRES}" "${NL}"
+  printf "%b🔍 Scanning all running processes for 'libwrap' usage ... %b%b" "${CGRE}" "${CRES}" "${NL}"
   printf "\n"
 
   ### Collect binaries from all running PIDs.
@@ -37,12 +37,12 @@ scanlw() {
     if ldd "${exe_path}" 2>/dev/null | grep -q "libwrap"; then
       comm=$(ps -p "${pid}" -o comm=)
       user=$(ps -p "${pid}" -o user=)
-      printf "%s✅ PID: %s (%s) [User: %s] is linked with 'libwrap.so'. %s%s" "${CGRE}" "${pid}" "${comm}" "${user}" "${CRES}" "${NL}"
+      printf "%b✅ PID: %s (%s) [User: %s] is linked with 'libwrap.so'. %b%b" "${CGRE}" "${pid}" "${comm}" "${user}" "${CRES}" "${NL}"
     fi
   done
 
   printf "\n"
-  printf "%s✅ Scan complete. %s%s" "${CGRE}" "${CRES}" "${NL}"
+  printf "%b✅ Scan complete. %b%b" "${CGRE}" "${CRES}" "${NL}"
 
   exit 0
 }

includes/target/root/.ciss/shortcuts

@@ -10,11 +10,12 @@
 # SPDX-PackageName: CISS.debian.installer
 # SPDX-Security-Contact: security@coresecret.eu
 
-declare -ga shortcuts=(
+declare -ag shortcuts=(
   "aptac: apt autoclean"
   "aptap: apt autopurge"
   "aptar: apt autoremove"
   "aptcheck: apt-get check"
+  "aptcp: apt-cache policy"
   "aptdep: apt-cache depends"
   "aptdl: apti --download-only"
   "aptfug: apt full-upgrade"
@@ -98,11 +99,10 @@ declare -ga shortcuts=(
 #  None
 #######################################
 celp() {
-  declare arr=("${shortcuts[@]}")
-  declare cols=3
-  declare col_width=42
-  declare i=0
-  declare entry
+  declare -a arr=( "${shortcuts[@]}" )
+  declare -i cols=3 col_width=42 i=0
+  declare    entry=""
+
   for entry in "${arr[@]}"; do
     ### Print entry left-aligned in fixed width, colored.
     printf "${CMAG}%-${col_width}s${CRES}" "${entry}"