Welcome to mirror list, hosted at ThFree Co, Russian Federation.

github.com/CISOfy/lynis.git - Unnamed repository; edit this file 'description' to name the repository.
summaryrefslogtreecommitdiff
path: root/include/tests_firewalls
AgeCommit message (Collapse)Author
2017-03-08Updated logMichael Boelen
2017-03-07Lots of cleanups (#366)hlein
* Description fix: SafePerms works on files not dirs. All uses of SafePerms are on files (and indeed, it would reject directories which would have +x set). * Lots of whitespace cleanups. Enforce everywhere(?) the same indentations for if/fi blocks. The standard for the Lynis codebase is 4 spaces. But sometimes it's 1, sometimes 3, sometimes 8. These patches standardize all(?) if blocks but _not_ else's (which are usually indented 2, but sometimes zero); I was too lazy to identify those (see below). This diff is giant, but should not change code behavior at all; diff -w shows no changes apart from whitespace. FWIW I identified instances to check by using: perl -ne 'if ($oldfile ne $ARGV) { $.=1; $oldfile=$ARGV; }; chomp; if ($spaces) { next unless /^( *)([^ ]+)/; $newspaces=length($1); $firsttok = $2; next unless defined($firsttok); $offset = ($firsttok eq "elif" ? 0 : 4); if ($newspaces != $spaces + $offset) { print "$ARGV:$ifline\n$ARGV:$.:$_\n\n" }; $ifline=""; $spaces=""; } if (/^( *)if (?!.*[; ]fi)/) { $ifline = "$.:$_"; $spaces = length($1); }' $(find . -type f -print0 | xargs -0 file | egrep shell | cut -d: -f1) Which produced output like: ./extras/build-lynis.sh:217: if [ ${VERSION_IN_SPECFILE} = "" -o ! "${VERSION_IN_SPECFILE}" = "${LYNIS_VERSION}" ]; then ./extras/build-lynis.sh:218: echo "[X] Version in specfile is outdated" ./plugins/plugin_pam_phase1:69: if [ -d ${PAM_DIRECTORY} ]; then ./plugins/plugin_pam_phase1:70: LogText "Result: /etc/pam.d exists" ...There's probably formal shellscript-beautification tools that I'm oblivious about. * More whitespace standardization. * Fix a syntax error. This looks like an if [ foo -o bar ]; was converted to if .. elif, but incompletely. * Add whitespace before closing ]. Without it, the shell thinks the ] is part of the last string, and emits warnings like: .../lynis/include/tests_authentication: line 1028: [: missing `]'
2017-03-06Various cleanups (#363)hlein
* Typo fix. * Style change: always use $(), never ``. The Lynis code already mostly used $(), but backticks were sprinkled around. Converted all of them. * Lots of minor spelling/typo fixes. FWIW these were found with: find . -type f -print0 | xargs -0 cat | aspell list | sort -u | egrep '^[a-z]+$' | less And then reviewing the list to pick out things that looked like misspelled words as opposed to variables, etc., and then manual inspection of context to determine the intention.
2017-02-14[FIRE-4512] lowered number of minimum rulesMichael Boelen
2017-02-10[FIRE-4586] escape search stringMichael Boelen
2017-02-09Changed date and preparing for release2.4.1Michael Boelen
2017-01-28Added FIRE-4586Michael Boelen
2016-11-05macOS Refactoring (#311)Justin P
* Default all macOS `OS` names as macOS. Added comments to specify `uname` outputs for better understanding. * Refactored all `Mac` instances referring to macOS over to `macOS` formatting. Tested on my own machine, unable to find any errors outside of normal parameters.
2016-10-27[FIRE-4518] mark as a root-only test - correctionMichael Boelen
2016-10-27[FIRE-4518] mark as a root-only testMichael Boelen
2016-10-15[FIRE-4530] Don't show error on screen for missing IPFW sysctl keyMichael Boelen
2016-10-15Reversed file check on /dev/pfMichael Boelen
2016-10-15Improve detection of pf on FreeBSDMichael Boelen
2016-10-15Add then statementMichael Boelen
2016-10-15Added process detection for Little SnitchMichael Boelen
2016-10-15[FIRE-4534] detection of Little SnitchMichael Boelen
2016-09-10Code cleanups and generic enhancementsMichael Boelen
2016-09-08Style improvements and command replacementsMichael Boelen
2016-09-06added TRBINARY + fix nftables check (#276)BlueC0re
fixes #273
2016-09-05Renamed tr commandMichael Boelen
2016-09-05Added test FIRE-4540 and textual changesMichael Boelen
2016-09-05[FIRE-4520] Use discovered pfctl binary and style improvementMichael Boelen
2016-09-05[FIRE-4520] Remove suggestionMichael Boelen
2016-08-25Use detected binariesMichael Boelen
2016-08-10Removed unneeded fieldMichael Boelen
2016-07-24Rename of categories, introduction of groupsMichael Boelen
2016-06-18Replaced text strings to allow translationsMichael Boelen
2016-05-19use ${LSMODBINARY} instead of lsmod (#200)Yann ILAS
2016-04-28Replaced old function names with new onesmboelen
2016-04-27Added firewall_software[] to reportmboelen
2016-03-13Removed copyright line, added descriptionmboelen
2016-03-13Added link to website, blog, githubmboelen
2015-12-30New tests and renumberingmboelen
2015-12-21Rename of logtext and report functions, upcoming year changemboelen
2015-12-02Test for longer status stringmboelen
2015-12-02Audit status of application firewall and added test for Mac OS X (FIRE-4532)mboelen
2015-12-02Improved test FIRE-4512 so that it also triggers if no more than 10 rules ↵mboelen
are found
2015-09-08Cleanup: Don't show pflogd status on screen, when pf is not availablemboelen
2015-09-06Change ipfw to IPFW, change exeception ID for IPFW testmboelen
2015-09-06Don't show pf status on screen when it is not availablemboelen
2015-09-06Merge pull request #43 from rsmith-nl/ipfwMichael Boelen
Add test for 'ipfw' firewall on FreeBSD.
2015-09-01Use different status for unused firewall rulesmboelen
2015-07-22Remove incomplete tests, code enhancementsmboelen
2015-04-27Wrap ipfw test in SKIPTEST block.Roland Smith
2015-04-27Check if ipfw is enabled in rc.conf.Roland Smith
2015-04-27Initial version of IPFW test (FreeBSD).Roland Smith
2015-04-07Change pf firewall detectionmboelen
2015-03-18Changed path names into variablesmboelen
2015-03-17Test for presence of CSFmboelen
2015-01-03Update of the files to reflect HTTPS version of website and 2015. Happy New ↵mboelen
Year!
generated by cgit v1.2.3 (git 2.25.1) at 2024-06-27 14:09:00 +0300