elie/debian-cis
1
0
Fork 0
mirror of https://github.com/ovh/debian-cis.git synced 2024-11-22 13:37:02 +01:00
Code Issues Packages Projects Releases Wiki Activity

fixup! IMP(4.1.x): add tests for each checks

Browse Source
This commit is contained in:
Thibault Ayanides 2020-11-16 16:54:51 +01:00
parent 9bfb7efca1
commit d640a467e2
6 changed files with 3 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
bin/hardening/4.1.1.1_audit_log_storage.sh
View File

@ -39,7 +39,6 @@ apply () {
does_file_exist $FILE does_file_exist $FILE
if [ $FNRET != 0 ]; then if [ $FNRET != 0 ]; then
warn "$FILE does not exist, creating it" warn "$FILE does not exist, creating it"
mkdir -p /etc/audit
touch $FILE touch $FILE
else else
ok "$FILE exists" ok "$FILE exists"

1
bin/hardening/4.1.1.2_halt_when_audit_log_full.sh
View File

@ -44,7 +44,6 @@ apply () {
does_file_exist $FILE does_file_exist $FILE
if [ $FNRET != 0 ]; then if [ $FNRET != 0 ]; then
warn "$FILE does not exist, creating it" warn "$FILE does not exist, creating it"
mkdir -p /etc/audit/auditd.conf
touch $FILE touch $FILE
else else
ok "$FILE exists" ok "$FILE exists"

1
bin/hardening/4.1.1.3_keep_all_audit_logs.sh
View File

@ -44,7 +44,6 @@ apply () {
does_file_exist $FILE does_file_exist $FILE
if [ $FNRET != 0 ]; then if [ $FNRET != 0 ]; then
warn "$FILE does not exist, creating it" warn "$FILE does not exist, creating it"
mkdir -p /etc/audit
touch $FILE touch $FILE
else else
ok "$FILE exists" ok "$FILE exists"

2
tests/docker/Dockerfile.debian10
View File

@ -2,7 +2,7 @@ FROM debian:buster
RUN groupadd -g 500 secaudit && useradd -u 500 -g 500 -s /bin/bash secaudit && mkdir -m 700 /home/secaudit && chown secaudit:secaudit /home/secaudit RUN groupadd -g 500 secaudit && useradd -u 500 -g 500 -s /bin/bash secaudit && mkdir -m 700 /home/secaudit && chown secaudit:secaudit /home/secaudit
RUN apt-get update && DEBIAN_FRONTEND=noninteractive apt-get install -y bc openssh-server sudo syslog-ng net-tools RUN apt-get update && DEBIAN_FRONTEND=noninteractive apt-get install -y bc openssh-server sudo syslog-ng net-tools auditd
COPY --chown=500:500 . /opt/debian-cis/ COPY --chown=500:500 . /opt/debian-cis/

2
tests/docker/Dockerfile.debian8
View File

@ -2,7 +2,7 @@ FROM debian:jessie
RUN groupadd -g 500 secaudit && useradd -u 500 -g 500 -s /bin/bash secaudit && mkdir -m 700 /home/secaudit && chown secaudit:secaudit /home/secaudit RUN groupadd -g 500 secaudit && useradd -u 500 -g 500 -s /bin/bash secaudit && mkdir -m 700 /home/secaudit && chown secaudit:secaudit /home/secaudit
RUN apt-get update && DEBIAN_FRONTEND=noninteractive apt-get install -y bc openssh-server sudo syslog-ng net-tools RUN apt-get update && DEBIAN_FRONTEND=noninteractive apt-get install -y bc openssh-server sudo syslog-ng net-tools auditd
COPY --chown=500:500 . /opt/debian-cis/ COPY --chown=500:500 . /opt/debian-cis/

2
tests/docker/Dockerfile.debian9
View File

@ -2,7 +2,7 @@ FROM debian:stretch
RUN groupadd -g 500 secaudit && useradd -u 500 -g 500 -s /bin/bash secaudit && mkdir -m 700 /home/secaudit && chown secaudit:secaudit /home/secaudit RUN groupadd -g 500 secaudit && useradd -u 500 -g 500 -s /bin/bash secaudit && mkdir -m 700 /home/secaudit && chown secaudit:secaudit /home/secaudit
RUN apt-get update && DEBIAN_FRONTEND=noninteractive apt-get install -y bc openssh-server sudo syslog-ng net-tools RUN apt-get update && DEBIAN_FRONTEND=noninteractive apt-get install -y bc openssh-server sudo syslog-ng net-tools auditd
COPY --chown=500:500 . /opt/debian-cis/ COPY --chown=500:500 . /opt/debian-cis/