Welcome to mirror list, hosted at ThFree Co, Russian Federation.

github.com/CISOfy/lynis.git - Unnamed repository; edit this file 'description' to name the repository.
summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorMichael Boelen <michael.boelen@cisofy.com>2019-07-08 16:08:56 +0300
committerMichael Boelen <michael.boelen@cisofy.com>2019-07-08 16:08:56 +0300
commit2c17c14c3b8235c906e3435369b278e95f09b1ad (patch)
tree6132af484ac9ee810c39545cc3885eb5b5ac5eaa /include/profiles
parent1854e51e7e116c2fe3322ed53bf38e6ce27787e0 (diff)
New profile option to ignore specified certificate directories
Diffstat (limited to 'include/profiles')
-rw-r--r--include/profiles18
1 files changed, 11 insertions, 7 deletions
diff --git a/include/profiles b/include/profiles
index 42562c80..71e05b1a 100644
--- a/include/profiles
+++ b/include/profiles
@@ -63,7 +63,7 @@
# Now parse the profile and filter out unwanted characters
DATA=$(egrep "^config:|^[a-z-].*=" ${PROFILE} | tr -dc '[:alnum:]/\[\]\(\)\-_\|,\.:;= \n\r' | sed 's/ /!space!/g')
for CONFIGOPTION in ${DATA}; do
- if ContainsString "config:" "${CONFIGOPTION}"; then
+ if ContainsString "^config:" "${CONFIGOPTION}"; then
# Old style configuration
OPTION=$(echo ${CONFIGOPTION} | cut -d ':' -f2)
VALUE=$(echo ${CONFIGOPTION} | cut -d ':' -f3 | sed 's/!space!/ /g')
@@ -119,7 +119,7 @@
;;
# Ignore configuration data
- config-data)
+ config-data | permdir | permfile)
Debug "Ignoring configuration option, as it will be used by a specific test"
;;
@@ -364,7 +364,7 @@
ssl-certificate-paths-to-ignore)
# Retrieve paths to ignore when searching for certificates. Strip special characters, replace possible spaces
- SSL_CERTIFICATE_PATHS_TO_IGNORE=$(echo ${VALUE} | tr -d '[:cntrl:]' | sed 's/ /:space:/g')
+ SSL_CERTIFICATE_PATHS_TO_IGNORE=$(echo ${VALUE} | tr -d '[:cntrl:]' | sed 's/ /__space__/g')
Debug "SSL paths to ignore: ${SSL_CERTIFICATE_PATHS_TO_IGNORE}"
AddSetting "ssl-certificate-paths-to-ignore" "${SSL_CERTIFICATE_PATHS_TO_IGNORE}" "Paths that should be ignored for SSL certificates"
;;
@@ -482,10 +482,14 @@
# Catch all bad options and bail out
*)
LogText "Unknown option ${OPTION} (with value: ${VALUE})"
- ${ECHOCMD} ""
- ${ECHOCMD} "${RED}Error${NORMAL}: found one or more errors in profile ${PROFILE}"
- ${ECHOCMD} "${WHITE}Details${NORMAL}: Unknown option '${YELLOW}${OPTION}${NORMAL}' found (with value: ${VALUE})"
- ${ECHOCMD} ""
+
+ ${ECHOCMD:-echo} ""
+ ${ECHOCMD:-echo} "${RED}Error${NORMAL}: found one or more errors in profile ${PROFILE}"
+ ${ECHOCMD:-echo} ""
+ ${ECHOCMD:-echo} ""
+ ${ECHOCMD:-echo} "Full line: ${CONFIGOPTION}"
+ ${ECHOCMD:-echo} "${WHITE}Details${NORMAL}: Unknown option '${YELLOW}${OPTION}${NORMAL}' found (with value: ${VALUE})"
+ ${ECHOCMD:-echo} ""
ExitFatal
;;