Adding Checks

Adding Vulnerability Checks or Scripts

Vulnerability Checks

If vulnerability checking involves running a command in OMVS or a UNIX command:

• Copy checks/ssh/ssh_template.py into the checks/ssh/ directory, rename it to name of vulnerability.
• Replace components in curly braces with proper information, including command to run and parsing the output.
• In checks/run_ssh_checks.py add a line from .ssh.new_file import * and in the ssh_checks function, add your new function name.

If vulnerability checking involves running a TSO command or a command from ISPF:

• Copy checks/tso/tso_template.py into the checks/tso/ directory, rename it to name of vulnerability.
• Replace components in curly braces with proper information, including command to run and parsing the output.
• In checks/run_tso_checks.py add a line from .tso.new_file import * and in the tso_checks function, add your new function name.

Scripts

• Add a REXX or SH script to the ext/scripts/ directory
• Ensure first line of a REXX script is /* rexx */ in lower case (/* REXX */ may not work)
• Modify ext/run_external_scripts.py to add a name and description of the script and allow the user to choose if they wish to run it