Welcome to mirror list, hosted at ThFree Co, Russian Federation.

github.com/CISOfy/lynis.git - Unnamed repository; edit this file 'description' to name the repository.
summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorMichael Boelen <michael.boelen@cisofy.com>2017-11-25 18:11:04 +0300
committerMichael Boelen <michael.boelen@cisofy.com>2017-11-25 18:11:04 +0300
commite4cb1902374fc428f7294b4ee96d6980788f2efd (patch)
tree3a45e65ba21b35a59a5f8d19824928bb328c65e5
parentc45333126554a279fb446a519ef35937f6442a21 (diff)
Support for allow-auto-purge option in profiles
-rw-r--r--default.prf3
-rw-r--r--include/profiles10
2 files changed, 13 insertions, 0 deletions
diff --git a/default.prf b/default.prf
index 59338a8e..7ffb0679 100644
--- a/default.prf
+++ b/default.prf
@@ -460,6 +460,9 @@ permdir:/root/.ssh:rwx------:root:-:WARN:
#
#################################################################################
+# Allow this system to be purged when it is outdated (default: not defined).
+# This is useful for ephemeral systems which are short-lived.
+#allow-auto-purge=yes
# Proxy settings
# Protocol (http, https, socks5)
diff --git a/include/profiles b/include/profiles
index 4b7741fd..2a468b17 100644
--- a/include/profiles
+++ b/include/profiles
@@ -45,6 +45,16 @@
case ${OPTION} in
+ # Is Lynis Enterprise allowed to purge this system when it is becomes outdated?
+ allow-auto-purge)
+ FIND=$(echo "${VALUE}" | egrep "^(1|true|yes)$")
+ if [ ! -z "${FIND}" ]; then
+ Report "allow-auto-purge=1"
+ else
+ Report "allow-auto-purge=0"
+ fi
+ ;;
+
# Define which compliance standards are enabled
# For this to work, the Enterprise plugins are needed
compliance_standards | check-compliance)