Welcome to mirror list, hosted at ThFree Co, Russian Federation.

github.com/CISOfy/lynis.git - Unnamed repository; edit this file 'description' to name the repository.
summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorYann ILAS <yann.ilas@gmail.com>2016-05-11 16:16:28 +0300
committerMichael Boelen <michael@cisofy.com>2016-05-11 16:16:28 +0300
commit527955211be3d100d3a6c2943c8f1713d0e23bf5 (patch)
treeed12a39fd5e2b04970888e15d36341e89debf412 /include/tests_filesystems
parent668a1fd0e560dc740f9fa1003afff8418f88f961 (diff)
The XFS root FS is not checked (#190)
At line 431, you should maybe add some tests...
Diffstat (limited to 'include/tests_filesystems')
-rw-r--r--include/tests_filesystems9
1 files changed, 8 insertions, 1 deletions
diff --git a/include/tests_filesystems b/include/tests_filesystems
index d15e8d6d..efeefa6b 100644
--- a/include/tests_filesystems
+++ b/include/tests_filesystems
@@ -391,7 +391,7 @@
Register --test-no FILE-6368 --os Linux --weight L --network NO --root-only YES --description "Checking ACL support on root file system"
if [ ${SKIPTEST} -eq 0 ]; then
FOUND=0
- LogText "Test: Checking acl option on root file system"
+ LogText "Test: Checking acl option on ext[2-4] root file system"
FIND=`mount | ${AWKBINARY} '{ if ($3=="/" && $5~/ext[2-4]/) { print $6 } }' | grep acl`
if [ ! "${FIND}" = "" ]; then
LogText "Result: found ACL option"
@@ -424,6 +424,13 @@
fi
fi
+ LogText "Test: Checking acl option on xfs root file system"
+ FIND=`mount | ${AWKBINARY} '{ if ($3=="/" && $5~/xfs/) { print $6 } }' | egrep 'no_acl|no_user_xattr'`
+ if [ "${FIND}" = "" ]; then
+ FOUND=1
+ # some other tests to do ?
+ fi
+
if [ ${FOUND} -eq 0 ]; then
LogText "Result: ACL option NOT enabled on root file system"
LogText "Additional information: if file access need to be more restricted, ACLs could be used. Install the acl utilities and remount the file system with the acl option"