feat: add new checks for debian12

systemd_timesyncd_is_enabled_and_running.sh	-> 2.3.2.2
rpcbind_is_disabled.sh				-> 2.1.12
ftp_client_not_installed.sh			-> 2.2.6
chrony_with_chrony_user.sh			-> 2.3.3.2
ipv6_is_enabled.sh				-> 3.1.1
This commit is contained in:
damien cavagnini
2025-07-23 10:09:28 +02:00
parent eda302d55f
commit a7bc6a47f9
19 changed files with 562 additions and 15 deletions

View File

@@ -0,0 +1,29 @@
# shellcheck shell=bash
# run-shellcheck
test_audit() {
describe prepare failing test
apt install -y chrony
echo "user root" >>/etc/chrony/chrony.conf
/usr/sbin/chronyd -Ux
describe On purpose failing test
register_test retvalshouldbe 1
# shellcheck disable=2154
run failed "${CIS_CHECKS_DIR}/${script}.sh" --audit-all
describe correcting situation
sed -i 's/audit/enabled/' "${CIS_CONF_DIR}/conf.d/${script}.cfg"
"${CIS_CHECKS_DIR}/${script}.sh" --apply || true
pkill chronyd
/usr/sbin/chronyd -Ux
describe resolved test
register_test retvalshouldbe 0
run failed "${CIS_CHECKS_DIR}/${script}.sh" --audit-all
pkill chronyd
apt remove chrony -y
}