#!/bin/env bash
#os_filewall.sh
#检查防火墙是否为关闭状态
#0为关闭,1为未关闭

#输出检查对象
echo "kv:防火墙关闭状态"
fw1=$(systemctl status firewalld.service  2>/dev/null | awk '{if($1~"Active"){printf "%s%s", $2,$3}}')
fw2=$(awk -F= '{if($1=="SELINUX"){printf "%s", $2}}' /etc/selinux/config)
fw3=$(systemctl list-unit-files | grep firewalld | awk '{print $2}')
if [ "${fw1}" = "inactive(dead)" -a "${fw2:-disabled}" = "disabled" -a "${fw3:-disabled}" = "disabled" ]
then
    echo "kv:0"
else
    echo "kv:1"
fi