elie/debian-cis
1
0
Fork 0
mirror of https://github.com/ovh/debian-cis.git synced 2025-06-22 02:33:42 +02:00
Code Issues Packages Projects Releases Wiki Activity

IMP(6.2.6): add purposely failing tests

Browse Source
This commit is contained in:
Thibault Ayanides
2020-10-27 09:17:57 +01:00
parent 1e64a14299
commit bb266ebe4a
2 changed files with 53 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
bin/hardening/6.2.6_sanitize_root_path.sh
View File

@ -8,6 +8,10 @@
# 6.2.6 Ensure root PATH Integrity (Scored)
#
# set path to the $PATH environnement variable if path is not defined
# used in test
[[ $path && ${path-x} ]] || path=$PATH
set -e # One error, it's over
set -u # One variable unset, it's over
@ -18,15 +22,15 @@ ERRORS=0
# This function will be called if the script status is on enabled / audit mode
audit () {
if [ "`echo $PATH | grep :: `" != "" ]; then
if [ "`echo $path | grep :: `" != "" ]; then
crit "Empty Directory in PATH (::)"
ERRORS=$((ERRORS+1))
fi
if [ "`echo $PATH | grep :$`" != "" ]; then
crit "Trailing : in PATH $PATH"
if [ "`echo $path | grep :$`" != "" ]; then
crit "Trailing : in PATH $path"
ERRORS=$((ERRORS+1))
fi
FORMATTED_PATH=$(echo $PATH | sed -e 's/::/:/' -e 's/:$//' -e 's/:/ /g')
FORMATTED_PATH=$(echo $path | sed -e 's/::/:/' -e 's/:$//' -e 's/:/ /g')
set -- $FORMATTED_PATH
while [ "${1:-}" != "" ]; do
if [ "$1" = "." ]; then