Welcome to mirror list, hosted at ThFree Co, Russian Federation.

github.com/CISOfy/lynis.git - Unnamed repository; edit this file 'description' to name the repository.
summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorMichael Boelen <michael.boelen@cisofy.com>2020-04-09 12:01:39 +0300
committerGitHub <noreply@github.com>2020-04-09 12:01:39 +0300
commita16669119979927cda4317889d94bf744ec1cc4f (patch)
tree7ea9bdc91473b22fa3fe63ed9bcfa16733047c52 /include/tests_crypto
parent1163648d89481ada79df8fd823d42b95ec73268b (diff)
parent9642bcffc839f4713558f927f4202ce3dd3588fd (diff)
Merge pull request #882 from topimiettinen/check-package-certificates
[CRYP-7902] Check also certificates provided by packages
Diffstat (limited to 'include/tests_crypto')
-rw-r--r--include/tests_crypto4
1 files changed, 2 insertions, 2 deletions
diff --git a/include/tests_crypto b/include/tests_crypto
index 1726735a..e449f195 100644
--- a/include/tests_crypto
+++ b/include/tests_crypto
@@ -74,8 +74,8 @@
COUNT_DIR=$((COUNT_DIR + 1))
FileIsReadable "${FILE}"
if [ ${CANREAD} -eq 1 ]; then
- # Only check the files that are not installed by a package
- if ! FileInstalledByPackage "${FILE}"; then
+ # Only check the files that are not installed by a package, unless enabled by profile
+ if [ ${SSL_CERTIFICATE_INCLUDE_PACKAGES} -eq 1 ] || ! FileInstalledByPackage "${FILE}"; then
OUTPUT=$(${GREPBINARY} -q 'BEGIN CERT' "${FILE}")
if [ $? -eq 0 ]; then
LogText "Result: file is a certificate file"