Welcome to mirror list, hosted at ThFree Co, Russian Federation.

github.com/CISOfy/lynis.git - Unnamed repository; edit this file 'description' to name the repository.
summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
Diffstat (limited to 'include/tests_filesystems')
-rw-r--r--include/tests_filesystems9
1 files changed, 8 insertions, 1 deletions
diff --git a/include/tests_filesystems b/include/tests_filesystems
index d15e8d6d..efeefa6b 100644
--- a/include/tests_filesystems
+++ b/include/tests_filesystems
@@ -391,7 +391,7 @@
Register --test-no FILE-6368 --os Linux --weight L --network NO --root-only YES --description "Checking ACL support on root file system"
if [ ${SKIPTEST} -eq 0 ]; then
FOUND=0
- LogText "Test: Checking acl option on root file system"
+ LogText "Test: Checking acl option on ext[2-4] root file system"
FIND=`mount | ${AWKBINARY} '{ if ($3=="/" && $5~/ext[2-4]/) { print $6 } }' | grep acl`
if [ ! "${FIND}" = "" ]; then
LogText "Result: found ACL option"
@@ -424,6 +424,13 @@
fi
fi
+ LogText "Test: Checking acl option on xfs root file system"
+ FIND=`mount | ${AWKBINARY} '{ if ($3=="/" && $5~/xfs/) { print $6 } }' | egrep 'no_acl|no_user_xattr'`
+ if [ "${FIND}" = "" ]; then
+ FOUND=1
+ # some other tests to do ?
+ fi
+
if [ ${FOUND} -eq 0 ]; then
LogText "Result: ACL option NOT enabled on root file system"
LogText "Additional information: if file access need to be more restricted, ACLs could be used. Install the acl utilities and remount the file system with the acl option"