diff --git a/tests/hardening/1.1.21_sticky_bit_world_writable_folder.sh b/tests/hardening/1.1.21_sticky_bit_world_writable_folder.sh index 5f6845c..f706d49 100755 --- a/tests/hardening/1.1.21_sticky_bit_world_writable_folder.sh +++ b/tests/hardening/1.1.21_sticky_bit_world_writable_folder.sh @@ -1,25 +1,28 @@ # run-shellcheck test_audit() { - describe Running on blank host - register_test retvalshouldbe 0 - register_test contain "All world writable directories have a sticky bit" - # shellcheck disable=2154 - run blank /opt/debian-cis/bin/hardening/"${script}".sh --audit-all + describe Running on blank host + register_test retvalshouldbe 0 + register_test contain "All world writable directories have a sticky bit" + # shellcheck disable=2154 + run blank /opt/debian-cis/bin/hardening/"${script}".sh --audit-all + if [ -f "/.dockerenv" ]; then + skip "SKIPPED on docker" + else + describe Tests purposely failing + local targetdir="/home/secaudit/world_writable_folder" + mkdir $targetdir || true + chmod 777 $targetdir + register_test retvalshouldbe 1 + register_test contain "Some world writable directories are not on sticky bit mode" + run noncompliant /opt/debian-cis/bin/hardening/"${script}".sh --audit-all - describe Tests purposely failing - local targetdir="/home/secaudit/world_writable_folder" - mkdir $targetdir || true - chmod 777 $targetdir - register_test retvalshouldbe 1 - register_test contain "Some world writable directories are not on sticky bit mode" - run noncompliant /opt/debian-cis/bin/hardening/"${script}".sh --audit-all + describe correcting situation + sed -i 's/audit/enabled/' /opt/debian-cis/etc/conf.d/"${script}".cfg + /opt/debian-cis/bin/hardening/"${script}".sh --apply || true - describe correcting situation - sed -i 's/audit/enabled/' /opt/debian-cis/etc/conf.d/"${script}".cfg - /opt/debian-cis/bin/hardening/"${script}".sh --apply || true - - describe Checking resolved state - register_test retvalshouldbe 0 - register_test contain "All world writable directories have a sticky bit" - run resolved /opt/debian-cis/bin/hardening/"${script}".sh --audit-all + describe Checking resolved state + register_test retvalshouldbe 0 + register_test contain "All world writable directories have a sticky bit" + run resolved /opt/debian-cis/bin/hardening/"${script}".sh --audit-all + fi }