Welcome to mirror list, hosted at ThFree Co, Russian Federation.

github.com/CISOfy/lynis.git - Unnamed repository; edit this file 'description' to name the repository.
summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorTopi Miettinen <toiwoton@gmail.com>2020-03-19 16:42:16 +0300
committerTopi Miettinen <toiwoton@gmail.com>2020-03-19 16:44:30 +0300
commit3aaeeea856f6e939c5b8d50d995e9e3eaa80fb35 (patch)
treef9afb02d2a740726c4528e005dd6f1989dc2cbc7
parente5c1f2f303b1dbf56486369d09f24707ced25acb (diff)
Check for rEFInd boot loader
Detect rEFInd boot loader (https://www.rodsbooks.com/refind/). Signed-off-by: Topi Miettinen <toiwoton@gmail.com>
-rw-r--r--db/tests.db1
-rw-r--r--include/tests_boot_services15
2 files changed, 16 insertions, 0 deletions
diff --git a/db/tests.db b/db/tests.db
index e057c06e..359760b9 100644
--- a/db/tests.db
+++ b/db/tests.db
@@ -57,6 +57,7 @@ BOOT-5102:test:security:boot_services:AIX:Check for AIX boot device:
BOOT-5104:test:security:boot_services::Determine service manager:
BOOT-5106:test:security:boot_services:MacOS:Check EFI boot file on macOS:
BOOT-5108:test:security:boot_services:Linux:Test Syslinux boot loader:
+BOOT-5109:test:security:boot_services:Linux:Test rEFInd boot loader:
BOOT-5116:test:security:boot_services::Check if system is booted in UEFI mode:
BOOT-5117:test:security:boot_services:Linux:Check for systemd-boot boot loader:
BOOT-5121:test:security:boot_services::Check for GRUB boot loader presence:
diff --git a/include/tests_boot_services b/include/tests_boot_services
index 2c239b64..bc8ae321 100644
--- a/include/tests_boot_services
+++ b/include/tests_boot_services
@@ -183,6 +183,21 @@
#
#################################################################################
#
+ # Test : BOOT-5109
+ # Description : Check for rEFInd
+ Register --test-no BOOT-5109 --os "Linux" --weight L --network NO --root-only YES --category security --description "Check rEFInd as bootloader"
+ if [ ${SKIPTEST} -eq 0 ]; then
+ BOOT_LOADER_SEARCHED=1
+ FileExists ${ROOTDIR}boot/refind_linux.conf
+ if [ ${FILE_FOUND} -eq 1 ]; then
+ LogText "Result: found rEFInd"
+ BOOT_LOADER="rEFInd"
+ BOOT_LOADER_FOUND=1
+ fi
+ fi
+#
+#################################################################################
+#
# Test : BOOT-5116
# Description : Check if system is booted in UEFI mode
Register --test-no BOOT-5116 --weight L --network NO --root-only YES --category security --description "Check if system is booted in UEFI mode"