Sophos Protection for Linux : Script to find or verify the installation of components

Question

Hello everyone. 
 Sophos protection for Linux installs multiple components, I see each and every location in /opt has binaries, However, I am not sure what components are installed. I understand that the components are installed as per our license, however, if there is a script to verify the installation of all the components, that would be a great help for us. 
 Thank You.

IsmailJaweed · Accepted Answer

Hello Wanderer, 
 I can feel the pain in navigating to each location and verifying the files. I have created a custom bash script that should help you verify the files in each location. Also, the script checks the current condition of sophos-spl service. NOTE: Please note that break-fix or any kind of support for this script falls out of sophos support scope. Sophos support or any support services from Sophos do not apply to the script provided here. 
 Review the script before using.

Fullscreen 
 checksplversion.txt 
 Download 
 
 #!/bin/bash
SC="\e[31m"
TC="\e[91m"
EC="\e[0m"
GRC="\e[32m"
DIR1="/opt/sophos-spl/base/bin/versionedcopy"
DIR2="/opt/sophos-spl/plugins/av/bin/avscanner"
DIR3="/opt/sophos-spl/plugins/eventjournaler/bin/eventjournaler"
DIR4="/opt/sophos-spl/plugins/runtimedetections/bin/runtimedetections"
DIR5="/opt/sophos-spl/plugins/edr/bin/edr"
DIR6="/opt/sophos-spl/plugins/liveresponse/bin/liveresponse"
if [ -f "$DIR1" ];
then
	echo
	echo -----------------------
	echo Checking base component
	echo -----------------------
	echo
	cat /opt/sophos-spl/base/VERSION.ini
	echo
	sleep 1
else
	echo -----------------------
 echo Checking base component
 echo -----------------------
	echo 
	echo -e $SC XXXXXXXXXXXXXXXXXXXX $EC
	echo -e $TC " $DIR1 not present"
	echo -e $SC XXXXXXXXXXXXXXXXXXX $EC
fi
if [ -f "$DIR2" ];
then
 echo
 echo --------------------------
 echo Checking avscanner plugin
 echo --------------------------
 echo
 cat /opt/sophos-spl/plugins/av/VERSION.ini
 echo
 sleep 1
else

echo --------------------------
 echo Checking avscanner plugin
 echo --------------------------
 echo
	echo -e $SC XXXXXXXXXXXXXXXXXXXX $EC
 echo -e $TC " $DIR2 not present"
	echo -e $SC XXXXXXXXXXXXXXXXXXXX $EC
fi
if [ -f "$DIR3" ];
then
 echo
 echo ------------------------------
 echo Checking eventjournaler plugin
 echo ------------------------------
 echo
 cat /opt/sophos-spl/plugins/eventjournaler/VERSION.ini
 echo
 sleep 1
else

echo ------------------------------
 echo Checking eventjournaler plugin
 echo ------------------------------
 echo
	echo -e $SC XXXXXXXXXXXXXXXXXXXX $EC
 echo -e $TC " $DIR3 not present"
	echo -e $SC XXXXXXXXXXXXXXXXXXXX $EC
fi
if [ -f "$DIR4" ];
then
 echo
 echo --------------------------------
 echo Checking runtimedetections plugin
 echo --------------------------------
 echo
 cat /opt/sophos-spl/plugins/runtimedetections/VERSION.ini
 echo
 sleep 1
else

echo --------------------------------
 echo Checking runtimedetections plugin
 echo --------------------------------
 echo
	echo -e $SC XXXXXXXXXXXXXXXXXXXX $EC1
 echo -e $TC " $DIR4 not present"
	echo -e $SC XXXXXXXXXXXXXXXXXXXX $EC
fi
if [ -f "$DIR5" ];
then
 echo
 echo -------------------
 echo Checking edr plugin
 echo -------------------
 echo
 cat /opt/sophos-spl/plugins/edr/VERSION.ini
 echo
 sleep 1
else

echo -------------------
 echo Checking edr plugin
 echo -------------------
 echo
	echo -e $SC XXXXXXXXXXXXXXXXXXXX $EC
 echo -e $TC " $DIR5 not present"
	echo -e $SC XXXXXXXXXXXXXXXXXXXX $EC
fi
if [ -f "$DIR6" ];
then
 echo
 echo ----------------------------
 echo Checking liveresponse plugin
 echo ----------------------------
 echo
 cat /opt/sophos-spl/plugins/liveresponse/VERSION.ini
 echo
 sleep 1
else

echo ----------------------------
 echo Checking liveresponse plugin
 echo ----------------------------
 echo
	echo -e $SC XXXXXXXXXXXXXXXXXXXX $EC
 echo -e $TC " $DIR6 not present"
	echo -e $SC XXXXXXXXXXXXXXXXXXXX $EC
fi
sleep 2
echo ---------------------------------
echo Checking sopho-spl service status
echo ---------------------------------
systemctl list-unit-files > /tmp/splpresent
if grep -q 'sophos-spl.service' /tmp/splpresent;
then
 echo -e $GRC 'sophos-spl service present' $EC
 sleep 1
 echo Checking active status
 echo .
 sleep 1
 echo .
 sleep 1
 echo .
 systemctl status sophos-spl > /tmp/splsvcstatus
 sleep 1
 if grep -q 'Active: active' /tmp/splsvcstatus; then
 echo -e $GRC 'sophos-spl service is active' $EC
 elif grep -q 'Active: inactive' /tmp/splsvcstatus; then
 echo -e $SC 'sophos-spl service is not active' $EC
 fi
else
 systemctl status sophos-spl 2> /tmp/splnotfound

if grep -q 'Unit sophos-spl.service could not be found' /tmp/splnotfound; then
 echo -e $SC 'sophos-spl service could not be found' $EC
 fi
fi

Sophos Protection for Linux : Script to find or verify the installation of components

Top Replies