diff options
| author | mboelen <michael@cisofy.com> | 2015-09-16 18:01:17 +0300 |
|---|---|---|
| committer | mboelen <michael@cisofy.com> | 2015-09-16 18:01:17 +0300 |
| commit | 91c9760598435a628307480565a05c9dd9e91150 (patch) | |
| tree | 6bd3d6713710d7e541f556b326868f9676b014de | |
| parent | d786c687a1249d83771861b18094c2a1696a3942 (diff) | |
Add hardening points properly to umask tests
| -rw-r--r-- | include/tests_authentication | 5 |
1 files changed, 4 insertions, 1 deletions
diff --git a/include/tests_authentication b/include/tests_authentication index ad24a432..e230e9b2 100644 --- a/include/tests_authentication +++ b/include/tests_authentication @@ -822,8 +822,10 @@ if [ ! "${FIND}" = "077" -a ! "${FIND}" = "027" ]; then logtext "Result: found umask ${FIND}, which could be more strict" WEAK_UMASK=1 + AddHP 1 2 else logtext "Result: found umask ${FIND}, which is fine" + AddHP 2 2 fi # Found more than 1 umask value in profile else @@ -833,11 +835,12 @@ if [ ! "${I}" = "077" -a ! "${I}" = "027" ]; then logtext "Result: umask ${I} could be more strict" WEAK_UMASK=1 + AddHP 1 2 else logtext "Result: Found umask ${I}, which is fine" + AddHP 2 2 fi done - AddHP 1 2 fi if [ ${FOUND_UMASK} -eq 1 ]; then |