Welcome to mirror list, hosted at ThFree Co, Russian Federation.

github.com/CISOfy/lynis.git - Unnamed repository; edit this file 'description' to name the repository.
summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
Diffstat (limited to 'include/tests_boot_services')
-rw-r--r--include/tests_boot_services58
1 files changed, 1 insertions, 57 deletions
diff --git a/include/tests_boot_services b/include/tests_boot_services
index 972855e8..5ce609f8 100644
--- a/include/tests_boot_services
+++ b/include/tests_boot_services
@@ -144,9 +144,6 @@
GRUBCONFFILE="/boot/grub2/grub.cfg"
fi
logtext "Result: found GRUB2 configuration file (${GRUBCONFFILE})"
- # YYY password check, when documentation of GRUB2 project is improved
- # YYY Add check permission check (600)
-
fi
# Some OSes like Gentoo do not have /boot mounted by default
@@ -263,7 +260,6 @@
logtext "Result: LILO password option set"
AddHP 4 4
fi
- #YYY (making /etc/lilo.conf immutable is a good idea, chattr +i /etc/lilo.conf)
else
logtext "Result: can not read ${LILOCONFFILE} (no permission)"
fi
@@ -318,7 +314,6 @@
if [ -f /etc/yaboot.conf ]; then
logtext "Result: Found YABOOT configuration file (/etc/yaboot.conf)"
Display --indent 4 --text "- Checking boot loader YABOOT" --result FOUND --color GREEN
- #YYY add permission check
BOOT_LOADER="YABOOT"
BOOT_LOADER_FOUND=1
else
@@ -398,11 +393,6 @@
#
#################################################################################
#
- # Test : BOOT-5166
- # Description : Check for /etc/rc.local file (and contents)
-#
-#################################################################################
-#
# Test : BOOT-5177
# Description : Check for Linux boot services (systemd and chkconfig)
# Notes : We skip using chkconfig if systemd is being used.
@@ -468,47 +458,12 @@
#
#################################################################################
#
- # Test : BOOT-5178
- # Description : Check for Linux boot services (Red Hat style)
- # if [ ! "${CHKCONFIGBINARY}" = "" ]; then PREQS_MET="YES"; else PREQS_MET="NO"; fi
- # Register --test-no BOOT-5178 --os Linux --preqs-met ${PREQS_MET} --weight L --network NO --description "Check for unneeded Linux boot services (Red Hat style)"
- # if [ ${SKIPTEST} -eq 0 ]; then
- # N=0
- # N=`expr ${N} + 1`
-
- #* mctrans (if selinux is NOT enabled)
- #* restorecond (if selinux is NOT enabled) --> and is it really needed?
- #
- # if profile is server, warn if found:
- #* pcscd (if profile=server)
- #* avahi-daemon
- # Redhat: /etc/sysconfig/network
- # check if NOZEROCONF=yes is available
- #
- #* xfs (if /usr/bin/startx is not found)
- #
- #if [ ! -f /etc/mdadm.conf -a ! -f /etc/mdadm/mdadm.conf ]; then
- #* mdmonitor
- #
- #
- #* firstboot
- # Display warning if [ ! -f /etc/reconfigSys ]
- # AND "RUN_FIRSTBOOT=YES" is NOT in /etc/sysconfig/firstboot
- #
- #* acpid
- # Display warning if no modules are loaded (lsmod | grep -i acpi)
- #
- #
- # fi
-#
-#################################################################################
-#
# Test : BOOT-5180
# Description : Check for Linux boot services (Debian style)
if [ "${LINUX_VERSION}" = "Debian" -o "${LINUX_VERSION}" = "Ubuntu" ]; then PREQS_MET="YES"; else PREQS_MET="NO"; fi
Register --test-no BOOT-5180 --os Linux --preqs-met ${PREQS_MET} --weight L --network NO --description "Check for Linux boot services (Debian style)"
if [ ${SKIPTEST} -eq 0 ]; then
- # YYY runlevel check
+ # Runlevel check
sRUNLEVEL=`${RUNLEVELBINARY} | grep "N 2"`
if [ ! "${sRUNLEVEL}" = "" ]; then
FIND=`find /etc/rc2.d -type l -print | cut -d '/' -f4 | sed "s/S[0-9][0-9]//g" | sort`
@@ -610,16 +565,6 @@
#
#################################################################################
#
- # Add autostart services, like from KDE/Gnome
- # Test : BOOT-5102
- # Description : Check for tasks which are autostarted via /etc/inittab
- #Register --test-no BOOT-5102 --weight L --network NO --description "Check inittab for services"
- #if [ ${SKIPTEST} -eq 0 ]; then
- #fi
- #YYY check against static list?
-#
-#################################################################################
-#
# Test : BOOT-5202
# Description : Check uptime of system
Register --test-no BOOT-5202 --weight L --network NO --description "Check uptime of system"
@@ -721,7 +666,6 @@
#################################################################################
#
-
report "boot_loader=${BOOT_LOADER}"
report "service_manager=${SERVICE_MANAGER}"