diff options
| author | Michael Boelen <michael.boelen@cisofy.com> | 2017-04-23 21:06:54 +0300 |
|---|---|---|
| committer | Michael Boelen <michael.boelen@cisofy.com> | 2017-04-23 21:06:54 +0300 |
| commit | 70ea29483a5fcb82ddc89d656227194560b502f2 (patch) | |
| tree | d90db794f0ae7419b81e2b466ec017565ca176eb /include/tests_system_integrity | |
| parent | 9e9b95e1daf9d64d7753d37b48e88697b297fa36 (diff) | |
Code enhancements
Diffstat (limited to 'include/tests_system_integrity')
| -rw-r--r-- | include/tests_system_integrity | 8 |
1 files changed, 3 insertions, 5 deletions
diff --git a/include/tests_system_integrity b/include/tests_system_integrity index 6040bb7c..637ab132 100644 --- a/include/tests_system_integrity +++ b/include/tests_system_integrity @@ -25,16 +25,15 @@ # ################################################################################# # - InsertSection "Software: file integrity" + InsertSection "Software: system integrity" Display --indent 2 --text "- Checking file integrity tools" # ################################################################################# # - if [ -x "/usr/bin/csrutil" ]; then PREQS_MET="YES"; else PREQS_MET="NO"; SKIPREASON="No CSrutil binary found"; fi + if [ -x ${ROOTDIR}/usr/bin/csrutil ]; then PREQS_MET="YES"; else PREQS_MET="NO"; SKIPREASON="No CSrutil binary found"; fi Register --test-no SINT-7010 --preqs-met ${PREQS_MET} --skip-reason "${SKIPREASON}" --weight H --network NO --category security --description "System Integrity Status" if [ ${SKIPTEST} -eq 0 ]; then - # Most tests use the "if-then-else". If something is true, take one step, otherwise the other. - if /usr/bin/csrutil status|grep -sq enabled ; then + if ${ROOTDIR}usr/bin/csrutil status | ${GREPBINARY} -sq enabled ; then Display --indent 2 --text "- System Integrity Protectioni (status)" --result "${STATUS_OK}" --color GREEN Report "system_integrity_tool[]=mac-sip" LogText "Result: SIP enabled, OK" @@ -43,7 +42,6 @@ Display --indent 2 --text "- System Integrity Protection (status)" --result "${STATUS_NO}" --color RED LogText "Result: SIP disabled, BAD" AddHP 0 3 - # TODO: add suggestion fi fi |