Welcome to mirror list, hosted at ThFree Co, Russian Federation.

github.com/CISOfy/lynis.git - Unnamed repository; edit this file 'description' to name the repository.
summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorafa- <aitorfraile@mykolab.com>2016-08-29 20:31:17 +0300
committerMichael Boelen <michael.boelen@cisofy.com>2016-08-29 20:31:17 +0300
commit4e139f4d71e6ea562914de13f5dd8f599b5b811a (patch)
treeb10fd6ad531ca59452f7bd2badd6224ec0c78d56 /include/tests_networking
parent639c5adc72900012d1804c745c17f329b305012c (diff)
Check for arpon as ARP monitoring software (#267)
Diffstat (limited to 'include/tests_networking')
-rw-r--r--include/tests_networking18
1 files changed, 16 insertions, 2 deletions
diff --git a/include/tests_networking b/include/tests_networking
index 34a3d842..a70d7d9b 100644
--- a/include/tests_networking
+++ b/include/tests_networking
@@ -27,6 +27,7 @@
NUMBERACTIVENS=0 # Number of active nameservers
DHCP_CLIENT_RUNNING=0 # DHCP client availability
ARPWATCH_RUNNING=0 # ARP-cache based attack monitoring software
+ ARPON_RUNNING=0 # ARP-cache based attack monitoring software
#
#################################################################################
#
@@ -605,13 +606,26 @@
# Description : Checking for ARP spoofing and related monitoring software
Register --test-no NETW-3032 --os Linux --weight L --network NO --category security --description "Checking for ARP monitoring software"
if [ ${SKIPTEST} -eq 0 ]; then
+ FOUND=0
+
+ # arpwatch
IsRunning arpwatch
if [ ${RUNNING} -eq 1 ]; then
+ FOUND=1
ARPWATCH_RUNNING=1
Display --indent 2 --text "- Checking for ARP monitoring software" --result "${STATUS_RUNNING}" --color GREEN
- else
+ fi
+
+ # arpon
+ IsRunning arpon
+ if [ ${RUNNING} -eq 1 ]; then
+ FOUND=1
+ ARPON_RUNNING=1
+ Display --indent 2 --text "- Checking for ARP monitoring software" --result "${STATUS_RUNNING}" --color GREEN
+ fi
+ if [ ${FOUND} -eq 0 ]; then
Display --indent 2 --text "- Checking for ARP monitoring software" --result "${STATUS_NOT_FOUND}" --color YELLOW
- ReportSuggestion ${TEST_NO} "Consider running ARP monitoring software (arpwatch)"
+ ReportSuggestion ${TEST_NO} "Consider running ARP monitoring software (arpwatch,arpon)"
fi
fi
#