debian-cis/tests/hardening/99.1.1.23_disable_usb_devices.sh

# shellcheck shell=bash
# run-shellcheck
test_audit() {
    if [ -f "/.dockerenv" ]; then
        skip "SKIPPED on docker"
    else
        mkdir /etc/udev/rules.d || true
        chmod -R 700 /etc/udev

        describe Running on blank host
        register_test retvalshouldbe 0
        dismiss_count_for_test
        # shellcheck disable=2154
        run blank "${CIS_CHECKS_DIR}/${script}.sh" --audit-all

        echo 'ACTION=="add", SUBSYSTEMS=="usb", TEST=="authorized_default", ATTR{authorized_default}="0"' >/etc/udev/rules.d/10-CIS_99.2_usb_devices.sh

        describe compliant
        register_test retvalshouldbe 0
        run compliant "${CIS_CHECKS_DIR}/${script}.sh" --audit-all

        # TODO fill comprehensive tests

        # Cleanup
        rm /etc/udev/rules.d/10-CIS_99.2_usb_devices.sh
    fi
}