Welcome to mirror list, hosted at ThFree Co, Russian Federation.

github.com/CISOfy/lynis.git - Unnamed repository; edit this file 'description' to name the repository.
summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorNico Berlee <nico.berlee@on2it.net>2021-03-31 18:05:12 +0300
committerNico Berlee <nico.berlee@on2it.net>2021-03-31 18:05:12 +0300
commit7849965d980fb630890a6ff25e5cadcbfd1aa0ef (patch)
tree52b30b0ffd2f89dd3541ce9136eec2872679fd63 /include/tests_firewalls
parent4de41543e66b42babe03c230e1ec0fa381c85ba4 (diff)
nftables empy ruleset test fix by reorder --stateless
Diffstat (limited to 'include/tests_firewalls')
-rw-r--r--include/tests_firewalls2
1 files changed, 1 insertions, 1 deletions
diff --git a/include/tests_firewalls b/include/tests_firewalls
index 06798ea7..44d6c441 100644
--- a/include/tests_firewalls
+++ b/include/tests_firewalls
@@ -506,7 +506,7 @@
Register --test-no FIRE-4540 --os Linux --preqs-met ${PREQS_MET} --weight L --network NO --root-only YES --category security --description "Check for empty nftables configuration"
if [ ${SKIPTEST} -eq 0 ]; then
# Check for empty ruleset
- NFT_RULES_LENGTH=$(${NFTBINARY} list ruleset --stateless 2> /dev/null | ${EGREPBINARY} -v "table|chain|;$|}$|^$" | ${WCBINARY} -l)
+ NFT_RULES_LENGTH=$(${NFTBINARY} --stateless list ruleset 2> /dev/null | ${EGREPBINARY} -v "table|chain|;$|}$|^$" | ${WCBINARY} -l)
if [ ${NFT_RULES_LENGTH} -le 3 ]; then
FIREWALL_EMPTY_RULESET=1
LogText "Result: this firewall set has 3 rules or less and is considered to be empty"