feat: add debian12 scripts

- iptables_loopback.sh 			-> 4.3.2.2
- iptables_rules_them_all.sh 		-> 4.3.2.4
- iptables_outbound_established.sh 	-> 4.3.2.3
- ip6tables_loopback.sh			-> 4.3.3.2
- ip6tables_outbound_established.sh	-> 4.3.3.3
- ip6tables_rules_them_all.sh		-> 4.3.3.4
- ip6tables_default_deny_policy.sh 	-> 4.3.3.1
This commit is contained in:
damien cavagnini
2025-08-05 16:23:52 +02:00
parent 9bd170438c
commit 11bcd1b93b
17 changed files with 842 additions and 19 deletions

View File

@@ -0,0 +1,39 @@
# shellcheck shell=bash
# run-shellcheck
test_audit() {
apt install -y iptables netcat-traditional
tests_is_ipv6_enabled
tests_get_debian_major_version
if [ "$CURRENT_IPV6_ENABLED" -eq 0 ] && [ "$DEB_MAJ_VER" -gt 11 ]; then
describe Prepare test
# shellcheck disable=2216
timeout 5s nc -lp 404 | true &
# not much to test here, unless working on a privileged container
describe Running failed test
register_test retvalshouldbe 1
# shellcheck disable=2154
run failed "${CIS_CHECKS_DIR}/${script}.sh" --audit-all
describe correcting situation
# just wait for timeout to expire
sleep 5
fi
if [ "$DEB_MAJ_VER" -gt 11 ]; then
describe Running success
register_test retvalshouldbe 0
# shellcheck disable=2154
run success "${CIS_CHECKS_DIR}/${script}.sh" --audit-all
describe clean test
apt remove -y iptables netcat-traditional
fi
}