elie/debian-cis
1
0
Fork 0
mirror of https://github.com/ovh/debian-cis.git synced 2025-09-04 13:38:24 +02:00
Code Issues Packages Projects Releases Wiki Activity

feat: add debian12 scripts (#293)

Browse Source 
- nftables_is_enabled.sh 		-> 4.2.9
- nftables_has_table.sh 		-> 4.2.4
- nftables_has_base_chains.sh 		-> 4.2.5
- nftables_rules_permanent.sh		-> 4.2.10
- nftables_default_deniy_policy.sh	-> 4.2.8

Co-authored-by: damien cavagnini <damien.cavagnini@corp.ovh.com>
This commit is contained in:
damcav35
2025-08-22 13:38:23 +02:00
committed by GitHub
parent fde8d2beeb
commit f0075600e1
12 changed files with 536 additions and 13 deletions
Download Patch File Download Diff File Expand all files Collapse all files

24
tests/hardening/nftables_not_installed_with_iptables.sh
View File

@@ -2,23 +2,23 @@
# run-shellcheck
test_audit() {
describe set up successful check
apt remove -y nftables
apt install -y iptables
apt install -y iptables nftables
describe Running success test
register_test retvalshouldbe 0
# shellcheck disable=2154
run success "${CIS_CHECKS_DIR}/${script}.sh" --audit-all
describe set up failed check
DEBIAN_FRONTEND='noninteractive' apt -o Dpkg::Options::="--force-confdef" -o Dpkg::Options::="--force-confold" install nftables apt-utils -y
describe running failed check
describe Running failed test
register_test retvalshouldbe 1
# shellcheck disable=2154
run failed "${CIS_CHECKS_DIR}/${script}.sh" --audit-all
apt remove -y nftables iptables
describe Fixing first situation
sed -i 's/audit/enabled/' "${CIS_CONF_DIR}/conf.d/${script}.cfg"
"${CIS_CHECKS_DIR}/${script}.sh" || true
describe running success check
register_test retvalshouldbe 0
# shellcheck disable=2154
run success "${CIS_CHECKS_DIR}/${script}.sh" --audit-all
apt remove -y iptables
apt autoremove -y
}