Welcome to mirror list, hosted at ThFree Co, Russian Federation.

github.com/CISOfy/lynis.git - Unnamed repository; edit this file 'description' to name the repository.
summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authormboelen <michael@cisofy.com>2015-12-29 18:28:18 +0300
committermboelen <michael@cisofy.com>2015-12-29 18:28:18 +0300
commit31b5c0bb422ef1ffcc5ec568dac5a00fd51d042e (patch)
tree6afc40008a20a3dfae4df191384a2c367a463d52 /include/tests_networking
parent142fc100c4147a7a7d987e91b1d222f43c357961 (diff)
Merged changes for ARPwatch
Diffstat (limited to 'include/tests_networking')
-rw-r--r--include/tests_networking21
1 files changed, 20 insertions, 1 deletions
diff --git a/include/tests_networking b/include/tests_networking
index fc5535c7..b4b640af 100644
--- a/include/tests_networking
+++ b/include/tests_networking
@@ -22,6 +22,7 @@
LOCAL_DNSRESOLVER_FOUND=0 # Local DNS resolver
NUMBERACTIVENS=0 # Number of active nameservers
DHCP_CLIENT_RUNNING=0 # DHCP client availability
+ ARPWATCH_RUNNING=0 # ARP-cache based attack monitoring software
#
#################################################################################
#
@@ -492,6 +493,22 @@
#
#################################################################################
#
+ # Test : NETW-3032
+ # Description : Checking for ARP-Spoofing monitoring software
+ Register --test-no NETW-3032 --os Linux --weight L --network NO --description "Checking for ARP-Spoofing monitoring software"
+ if [ ${SKIPTEST} -eq 0 ]; then
+ IsRunning arpwatch
+ if [ ${RUNNING} -eq 1 ]; then
+ ARPWATCH_RUNNING=1
+ Display --indent 2 --text "Checking for ARP-Spoofing monitoring software" --result RUNNING --color GREEN
+ else
+ Display --indent 2 --text "Checking for ARP-Spoofing monitoring software" --result "NOT FOUND" --color RED
+ ReportSuggestion ${TEST_NO} "Install ARP-Spoofing attack monitoring software like 'arpwatch'"
+ fi
+ fi
+#
+#################################################################################
+#
# Test : NETW-3030
# Description : Checking for DHCP client
Register --test-no NETW-3030 --weight L --network NO --description "Checking DHCP client status"
@@ -508,7 +525,9 @@
#################################################################################
#
-Report "dhcp_client_running=${DHCP_CLIENT_RUNNING}"
+report "dhcp_client_running=${DHCP_CLIENT_RUNNING}"
+report "arpwatch_running=${ARPWATCH_RUNNING}"
+
wait_for_keypress
#