Welcome to mirror list, hosted at ThFree Co, Russian Federation.

github.com/CISOfy/lynis.git - Unnamed repository; edit this file 'description' to name the repository.
summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorMichael Boelen <michael.boelen@cisofy.com>2022-08-24 14:42:22 +0300
committerMichael Boelen <michael.boelen@cisofy.com>2022-08-24 14:42:22 +0300
commit622f53247da81d64e8b5170baf0f6cb4e785353f (patch)
treea9203dd1b63015ec744b559d806fe22e929dfa79
parent8d9cdb22f413f2b2c941ae4750ca40411ce8a194 (diff)
[DBS-1820] added newer style format for Mongo authorization setting
-rw-r--r--include/tests_databases25
1 files changed, 19 insertions, 6 deletions
diff --git a/include/tests_databases b/include/tests_databases
index f5bc22ae..e973d23f 100644
--- a/include/tests_databases
+++ b/include/tests_databases
@@ -127,12 +127,25 @@
for FILE in ${MONGO_CONF_FILES}; do
if [ -f ${FILE} ]; then
LogText "Result: found MongoDB configuration file (${FILE})"
- LogText "Test: determine authorization setting in new style YAML format"
- AUTH_IN_CONFIG=$(${GREPBINARY} "authorization: enabled" ${FILE} | ${GREPBINARY} -E -v "(^#|#auth)")
- if HasData "${AUTH_IN_CONFIG}"; then
- LogText "Result: GOOD, found authorization option enabled in configuration file (YAML format)"
- MONGODB_AUTHORIZATION_ENABLED=1
- else
+ # YAML with quotes
+ if [ ${MONGODB_AUTHORIZATION_ENABLED} -eq 0 ]; then
+ LogText "Test: determine authorization setting in new style YAML format"
+ AUTH_IN_CONFIG=$(${GREPBINARY} "authorization: \"enabled\"" ${FILE} | ${GREPBINARY} -E -v "(^#|#auth)")
+ if HasData "${AUTH_IN_CONFIG}"; then
+ LogText "Result: GOOD, found authorization option enabled in configuration file (YAML format with quotes)"
+ MONGODB_AUTHORIZATION_ENABLED=1
+ fi
+ fi
+ # YAML without quotes
+ if [ ${MONGODB_AUTHORIZATION_ENABLED} -eq 0 ]; then
+ AUTH_IN_CONFIG=$(${GREPBINARY} "authorization: enabled" ${FILE} | ${GREPBINARY} -E -v "(^#|#auth)")
+ if HasData "${AUTH_IN_CONFIG}"; then
+ LogText "Result: GOOD, found authorization option enabled in configuration file (YAML format without quotes)"
+ MONGODB_AUTHORIZATION_ENABLED=1
+ fi
+ fi
+ # Old style
+ if [ ${MONGODB_AUTHORIZATION_ENABLED} -eq 0 ]; then
LogText "Result: did NOT find authorization option enabled in configuration file (with YAML format)"
LogText "Test: now searching for old style configuration (auth = true) in configuration file"
AUTH_IN_CONFIG=$(${GREPBINARY} "auth = true" ${FILE} | ${GREPBINARY} -v "noauth" | ${GREPBINARY} -E -v "(^#|#auth)")