elie/debian-cis
1
0
Fork 0
mirror of https://github.com/ovh/debian-cis.git synced 2025-06-24 11:34:35 +02:00
Code Issues Packages Projects Releases Wiki Activity

IMP(3.1-3.x): add comprehensive tests

Browse Source
This commit is contained in:
Thibault Ayanides
2021-01-21 11:02:08 +01:00
committed by Thibault Serti
parent c51513e083
commit 5a72d986ea
11 changed files with 239 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files

21
tests/hardening/3.3.6_enable_bad_error_message_protection.sh
View File

@ -7,5 +7,24 @@ test_audit() {
# shellcheck disable=2154
run blank /opt/debian-cis/bin/hardening/"${script}".sh --audit-all
# TODO fill comprehensive tests
if [ -f "/.dockerenv" ]; then
skip "SKIPPED on docker"
else
describe Tests purposely failing
sysctl -w net.ipv4.icmp_ignore_bogus_error_responses=0 2>/dev/null
register_test retvalshouldbe 1
register_test contain "net.ipv4.icmp_ignore_bogus_error_responses was not set to 1"
run noncompliant /opt/debian-cis/bin/hardening/"${script}".sh --audit-all
describe correcting situation
sed -i 's/audit/enabled/' /opt/debian-cis/etc/conf.d/"${script}".cfg
/opt/debian-cis/bin/hardening/"${script}".sh --apply || true
describe Checking resolved state
register_test retvalshouldbe 0
register_test contain "correctly set to 0"
register_test contain "net.ipv4.icmp_ignore_bogus_error_responses correctly set to 0"
run resolved /opt/debian-cis/bin/hardening/"${script}".sh --audit-all
fi
}