elie/debian-cis
1
0
Fork 0
mirror of https://github.com/ovh/debian-cis.git synced 2025-08-04 22:31:16 +02:00
Code Issues Packages Projects Releases Wiki Activity

feat: add debian12 scripts

Browse Source 
- nftables_is_enabled.sh 	-> 4.2.9
- nftables_has_table.sh 	-> 4.2.4
- nftables_has_base_chains.sh 	-> 4.2.5
This commit is contained in:
damien cavagnini
2025-08-01 16:20:58 +02:00
parent 0cf11ca4cf
commit 1445aa00f7
6 changed files with 261 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
tests/hardening/nftables_has_base_chains.sh Normal file
View File

@@ -0,0 +1,11 @@
# shellcheck shell=bash
# run-shellcheck
test_audit() {
# running on a non privilieged container, wont test much...
describe Running on blank host
register_test retvalshouldbe 1
dismiss_count_for_test
# shellcheck disable=2154
run blank "${CIS_CHECKS_DIR}/${script}.sh" --audit-all
}

11
tests/hardening/nftables_has_table.sh Normal file
View File

@@ -0,0 +1,11 @@
# shellcheck shell=bash
# run-shellcheck
test_audit() {
# running on a non privilieged container, wont test much...
describe Running on blank host
register_test retvalshouldbe 1
dismiss_count_for_test
# shellcheck disable=2154
run blank "${CIS_CHECKS_DIR}/${script}.sh" --audit-all
}

10
tests/hardening/nftables_is_enabled.sh Normal file
View File

@@ -0,0 +1,10 @@
# shellcheck shell=bash
# run-shellcheck
test_audit() {
describe Running on blank host
register_test retvalshouldbe 0
dismiss_count_for_test
# shellcheck disable=2154
run blank "${CIS_CHECKS_DIR}/${script}.sh" --audit-all
}