CasperSecurity
#!/bin/sh
#
# check_pollen - verify the pollen server on localhost is operating correctly
#
# Copyright (C) 2013-2025 Dustin Kirkland <dustin.kirkland@gmail.com>
#
# This program is free software: you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation, version 3 of the License.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program. If not, see <http://www.gnu.org/licenses/>.
TMPDIR=$(mktemp -d -t "pollen.XXXXXXXXXXXX")
trap "rm -rf ${TMPDIR} 2>/dev/null || true" EXIT HUP INT QUIT TERM
md5sum1=$(grep pollen /var/log/syslog /var/log/pollen/pollen.log 2>/dev/null || true | md5sum)
pollinate -t -i -s localhost -b -d - >"$TMPDIR/out" 2>"$TMPDIR/err" && RC=0 || RC=$?
md5sum2=$(grep pollen /var/log/syslog /var/log/pollen/pollen.log 2>/dev/null || true | md5sum)
bytes=$(wc -c "$TMPDIR/out" | awk '{print $1}')
bpb=$(ent -t "$TMPDIR/out" | tail -n1 | awk -F, '{print $3}' | awk -F. '{print $1}')
mean=$(ent -t "$TMPDIR/out" | tail -n1 | awk -F, '{print $5}' | awk -F. '{print $1}')
if [ "$RC" != "0" ]; then
echo "CRITICAL - pollen server did not properly respond to the test request [$RC]"
cat "$TMPDIR/err" 1>&2
exit 2
fi
if [ "$md5sum1" = "$md5sum2" ]; then
echo "CRITICAL - pollen server did not properly log the test request [$RC]"
grep pollen /var/log/syslog /var/log/pollen/pollen.log 2>/dev/null || true
exit 2
fi
if [ -z "$bytes" ] || [ "$bytes" -lt 64 ]; then
echo "WARNING - pollen server did not respond with at least 64 bytes [$bytes]"
exit 1
fi
if [ -z "$bpb" ] || [ "$bpb" -lt 5 ]; then
echo "WARNING - pollen server did not respond with sufficient entropy bits per byte [$bpb]"
exit 1
fi
if [ -z "$mean" ] || [ "$mean" -lt 95 ] || [ "$mean" -gt 160 ]; then
echo "WARNING - pollen server responded with poor entropy (bad arithmetic mean [$mean])"
exit 1
fi
echo "OK - pollen server is online and responded correctly to the test request"
exit 0