diff --git a/bin/hardening.sh b/bin/hardening.sh index 6c48c0d..9b0185b 100755 --- a/bin/hardening.sh +++ b/bin/hardening.sh @@ -18,6 +18,7 @@ TOTAL_CHECKS=0 TOTAL_TREATED_CHECKS=0 AUDIT=0 APPLY=0 +AUDIT_ALL=0 usage() { cat << EOF @@ -40,6 +41,9 @@ while [[ $# > 0 ]]; do --audit) AUDIT=1 ;; + --audit-all) + AUDIT_ALL=1 + ;; --apply) APPLY=1 ;; @@ -76,6 +80,9 @@ for SCRIPT in $(ls $CIS_ROOT_DIR/bin/hardening/*.sh | sort -V); do if [ $AUDIT = 1 ]; then debug "$CIS_ROOT_DIR/bin/hardening/$SCRIPT --audit" $SCRIPT --audit + elif [ $AUDIT_ALL = 1 ]; then + debug "$CIS_ROOT_DIR/bin/hardening/$SCRIPT --audit-all" + $SCRIPT --audit-all elif [ $APPLY = 1 ]; then debug "$CIS_ROOT_DIR/bin/hardening/$SCRIPT" $SCRIPT diff --git a/lib/main.sh b/lib/main.sh index 5c1497c..7808f28 100644 --- a/lib/main.sh +++ b/lib/main.sh @@ -26,6 +26,10 @@ fi while [[ $# > 0 ]]; do ARG="$1" case $ARG in + --audit-all) + debug "Audit all specified, setting status to audit regardless of configuration" + status=audit + ;; --audit) if [ $status != 'disabled' -a $status != 'false' ]; then debug "Audit argument detected, setting status to audit"