debian-cis/tests/hardening/6.2.16_check_duplicate_uid.sh

31 lines
1.0 KiB
Bash
Raw Normal View History

# run-shellcheck
test_audit() {
describe Running on blank host
register_test retvalshouldbe 0
register_test contain "[ OK ] No duplicate UIDs"
# shellcheck disable=2154
run blank /opt/debian-cis/bin/hardening/"${script}".sh --audit-all
2019-02-14 11:15:51 +01:00
useradd -u 1001 usertest1
useradd -o -u 1001 usertest2
# Proceed to operation that will end up to a non compliant system
describe Tests purposely failing
register_test retvalshouldbe 1
2019-02-14 11:15:51 +01:00
register_test contain "[ KO ] Duplicate UID (1001): usertest1 usertest2"
run noncompliant /opt/debian-cis/bin/hardening/"${script}".sh --audit-all
# shellcheck disable=2016
2019-02-14 11:15:51 +01:00
echo 'EXCEPTIONS="$EXCEPTIONS 1001"' >> /opt/debian-cis/etc/conf.d/"${script}".cfg
describe Adding exceptions
register_test retvalshouldbe 0
2019-02-14 11:15:51 +01:00
register_test contain "[ OK ] No duplicate UIDs apart from configured exceptions: (1001): usertest1 usertest2"
run exception /opt/debian-cis/bin/hardening/"${script}".sh --audit-all
# Cleanup
userdel usertest1
userdel usertest2
}