diff options
| author | Michael Boelen <michael.boelen@cisofy.com> | 2016-09-10 17:12:44 +0300 |
|---|---|---|
| committer | Michael Boelen <michael.boelen@cisofy.com> | 2016-09-10 17:12:44 +0300 |
| commit | 903016df362e39444d314a81dd4a0ebc61b67da0 (patch) | |
| tree | e922e2e0039428dec461bfea52ff8e503720370a /include/tests_hardening | |
| parent | 2534fb99a9dbc869fd90f0967c6917191b306b69 (diff) | |
Code cleanups and generic enhancements
Diffstat (limited to 'include/tests_hardening')
| -rw-r--r-- | include/tests_hardening | 10 |
1 files changed, 5 insertions, 5 deletions
diff --git a/include/tests_hardening b/include/tests_hardening index 91838818..93c01ff5 100644 --- a/include/tests_hardening +++ b/include/tests_hardening @@ -35,7 +35,7 @@ LogText "Result: no compilers found" Display --indent 4 --text "- Installed compiler(s)" --result "${STATUS_NOT_FOUND}" --color GREEN AddHP 3 3 - else + else LogText "Result: found installed compiler. See top of logfile which compilers have been found or use ${GREPBINARY} to filter on 'compiler'" Display --indent 4 --text "- Installed compiler(s)" --result "${STATUS_FOUND}" --color RED AddHP 1 3 @@ -54,7 +54,7 @@ LogText "Result: no compilers found" else # as - if [ ! "${ASBINARY}" = "" ]; then + if [ ! -z "${ASBINARY}" ]; then LogText "Test: Check file permissions for as (Assembler)" if IsWorldExecutable ${ASBINARY}; then LogText "Binary: found ${ASBINARY} (world executable)" @@ -66,7 +66,7 @@ fi fi # gcc - if [ ! "${GCCBINARY}" = "" ]; then + if [ ! -z "${GCCBINARY}" ]; then LogText "Test: Check file permissions for GCC compiler" if IsWorldExecutable ${GCCBINARY}; then LogText "Binary: found ${GCCBINARY} (world executable)" @@ -83,8 +83,8 @@ ReportSuggestion ${TEST_NO} "Harden compilers like restricting access to root user only" fi - #YYY check if compilers have a specific group (like compiler, or NOT root/wheel) -# Display --indent 4 --text "- Installed compiler(s)" --result "${STATUS_FOUND}" --color RED + # TODO check if compilers have a specific group (like compiler, or NOT root/wheel) + # Display --indent 4 --text "- Installed compiler(s)" --result "${STATUS_FOUND}" --color RED # /usr/bin/*cc* # /usr/bin/*++* # /usr/bin/ld |