diff --git a/tests/hardening/6.1.10_find_world_writable_file.sh b/tests/hardening/6.1.10_find_world_writable_file.sh index c7615e0..700529f 100755 --- a/tests/hardening/6.1.10_find_world_writable_file.sh +++ b/tests/hardening/6.1.10_find_world_writable_file.sh @@ -1,26 +1,32 @@ # run-shellcheck test_audit() { - describe Running on blank host - register_test retvalshouldbe 0 - register_test contain "No world writable files found" - # shellcheck disable=2154 - run blank /opt/debian-cis/bin/hardening/"${script}".sh --audit-all + + #run this test only if we're not in docker + if [ -f "/.dockerenv" ]; then + skip "SKIPPED on docker" + else + describe Running on blank host + register_test retvalshouldbe 0 + register_test contain "No world writable files found" + # shellcheck disable=2154 + run blank /opt/debian-cis/bin/hardening/"${script}".sh --audit-all - describe Tests purposely failing - local targetfile="/home/secaudit/worldwritable" - touch $targetfile - chmod 777 $targetfile - register_test retvalshouldbe 1 - register_test contain "Some world writable files are present" - run noncompliant /opt/debian-cis/bin/hardening/"${script}".sh --audit-all + describe Tests purposely failing + local targetfile="/home/secaudit/worldwritable" + touch $targetfile + chmod 777 $targetfile + register_test retvalshouldbe 1 + register_test contain "Some world writable files are present" + run noncompliant /opt/debian-cis/bin/hardening/"${script}".sh --audit-all - describe correcting situation - sed -i 's/audit/enabled/' /opt/debian-cis/etc/conf.d/"${script}".cfg - /opt/debian-cis/bin/hardening/"${script}".sh --apply || true + describe correcting situation + sed -i 's/audit/enabled/' /opt/debian-cis/etc/conf.d/"${script}".cfg + /opt/debian-cis/bin/hardening/"${script}".sh --apply || true - describe Checking resolved state - register_test retvalshouldbe 0 - register_test contain "No world writable files found" - run resolved /opt/debian-cis/bin/hardening/"${script}".sh --audit-all + describe Checking resolved state + register_test retvalshouldbe 0 + register_test contain "No world writable files found" + run resolved /opt/debian-cis/bin/hardening/"${script}".sh --audit-all + fi } diff --git a/tests/launch_tests.sh b/tests/launch_tests.sh index 81dcff5..cafe367 100755 --- a/tests/launch_tests.sh +++ b/tests/launch_tests.sh @@ -59,6 +59,9 @@ ok() { printf "%b %b\n" "\033[30m\033[42m[ OK ]\033[0m" "$*" >&2 } +skip() { + printf "%b %b\n" "\033[30m\e[43m[SKIP]\033[0m" "$*" >&2 +} # retrieves audit script logfile get_stdout() {