Welcome to mirror list, hosted at ThFree Co, Russian Federation.

github.com/CISOfy/lynis.git - Unnamed repository; edit this file 'description' to name the repository.
summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorMichael Boelen <michael@cisofy.com>2016-03-01 18:29:04 +0300
committerMichael Boelen <michael@cisofy.com>2016-03-01 18:29:04 +0300
commit597a80cac0654c44654dced072f7529e1f84279b (patch)
tree63a4a783b4f5c269edf14b651776751537514a5e /include/tests_file_integrity
parent13cfbd3019793281a0e2457a9c4a5a269692e29f (diff)
parent617ede868655e919581f629c2279b8328b1e1dd7 (diff)
Merge pull request #125 from toniblyx/master
Added osqueryd as FIM
Diffstat (limited to 'include/tests_file_integrity')
-rw-r--r--include/tests_file_integrity21
1 files changed, 19 insertions, 2 deletions
diff --git a/include/tests_file_integrity b/include/tests_file_integrity
index 278f2d07..8315fc20 100644
--- a/include/tests_file_integrity
+++ b/include/tests_file_integrity
@@ -246,6 +246,24 @@
Display --indent 6 --text "- Directory/File watches" --result DISABLED --color YELLOW
fi
fi
+
+#################################################################################
+#
+ # Test : FINT-4351
+ # Description : Check if osquery system integrity tool is running
+ Register --test-no FINT-4351 --weight L --network NO --description "osqueryd syscheck daemon running"
+ if [ ${SKIPTEST} -eq 0 ]; then
+ LogText "Test: Checking if osqueryd syscheck daemon is running"
+ IsRunning osqueryd
+ if [ ${RUNNING} -eq 1 ]; then
+ LogText "Result: syscheck (osquery) installed"
+ FILE_INT_TOOL="osquery"
+ FILE_INT_TOOL_FOUND=1
+ Display --indent 4 --text "- osquery (syscheck)" --result FOUND --color GREEN
+ else
+ LogText "Result: syscheck (osquery) not installed"
+ fi
+ fi
#
#################################################################################
#
@@ -266,8 +284,7 @@
fi
fi
#
-#################################################################################
-#
+
Report "file_integrity_tool=${FILE_INT_TOOL}"
Report "file_integrity_tool_installed=${FILE_INT_TOOL_FOUND}"