diff --git a/tests/hardening/1.5.1_restrict_core_dumps.sh b/tests/hardening/1.5.1_restrict_core_dumps.sh index b333419..180f73f 100644 --- a/tests/hardening/1.5.1_restrict_core_dumps.sh +++ b/tests/hardening/1.5.1_restrict_core_dumps.sh @@ -1,5 +1,8 @@ # run-shellcheck test_audit() { + if [ -f "/.dockerenv" ]; then + skip "SKIPPED on docker" + else describe Running on blank host register_test retvalshouldbe 0 dismiss_count_for_test @@ -7,4 +10,5 @@ test_audit() { run blank /opt/debian-cis/bin/hardening/"${script}".sh --audit-all # TODO fill comprehensive tests + fi } diff --git a/tests/hardening/1.5.2_enable_nx_support.sh b/tests/hardening/1.5.2_enable_nx_support.sh index b333419..b0ebe2a 100644 --- a/tests/hardening/1.5.2_enable_nx_support.sh +++ b/tests/hardening/1.5.2_enable_nx_support.sh @@ -1,10 +1,14 @@ # run-shellcheck test_audit() { - describe Running on blank host - register_test retvalshouldbe 0 - dismiss_count_for_test - # shellcheck disable=2154 - run blank /opt/debian-cis/bin/hardening/"${script}".sh --audit-all + if [ -f "/.dockerenv" ]; then + skip "SKIPPED on docker" + else + describe Running on blank host + register_test retvalshouldbe 0 + dismiss_count_for_test + # shellcheck disable=2154 + run blank /opt/debian-cis/bin/hardening/"${script}".sh --audit-all - # TODO fill comprehensive tests + # TODO fill comprehensive tests + fi }