diff options
Diffstat (limited to 'include/tests_system_integrity')
| -rw-r--r-- | include/tests_system_integrity | 8 |
1 files changed, 3 insertions, 5 deletions
diff --git a/include/tests_system_integrity b/include/tests_system_integrity index 6040bb7c..637ab132 100644 --- a/include/tests_system_integrity +++ b/include/tests_system_integrity @@ -25,16 +25,15 @@ # ################################################################################# # - InsertSection "Software: file integrity" + InsertSection "Software: system integrity" Display --indent 2 --text "- Checking file integrity tools" # ################################################################################# # - if [ -x "/usr/bin/csrutil" ]; then PREQS_MET="YES"; else PREQS_MET="NO"; SKIPREASON="No CSrutil binary found"; fi + if [ -x ${ROOTDIR}/usr/bin/csrutil ]; then PREQS_MET="YES"; else PREQS_MET="NO"; SKIPREASON="No CSrutil binary found"; fi Register --test-no SINT-7010 --preqs-met ${PREQS_MET} --skip-reason "${SKIPREASON}" --weight H --network NO --category security --description "System Integrity Status" if [ ${SKIPTEST} -eq 0 ]; then - # Most tests use the "if-then-else". If something is true, take one step, otherwise the other. - if /usr/bin/csrutil status|grep -sq enabled ; then + if ${ROOTDIR}usr/bin/csrutil status | ${GREPBINARY} -sq enabled ; then Display --indent 2 --text "- System Integrity Protectioni (status)" --result "${STATUS_OK}" --color GREEN Report "system_integrity_tool[]=mac-sip" LogText "Result: SIP enabled, OK" @@ -43,7 +42,6 @@ Display --indent 2 --text "- System Integrity Protection (status)" --result "${STATUS_NO}" --color RED LogText "Result: SIP disabled, BAD" AddHP 0 3 - # TODO: add suggestion fi fi |