mirror of
https://github.com/ovh/debian-cis.git
synced 2025-07-16 13:52:17 +02:00
Compare commits
2 Commits
Author | SHA1 | Date | |
---|---|---|---|
4ed8adf790 | |||
f4328deeb2 |
@ -17,6 +17,8 @@ HARDENING_LEVEL=2
|
|||||||
# shellcheck disable=2034
|
# shellcheck disable=2034
|
||||||
DESCRIPTION="Set sticky bit on world writable directories to prevent users from deleting or renaming files that are not owned by them."
|
DESCRIPTION="Set sticky bit on world writable directories to prevent users from deleting or renaming files that are not owned by them."
|
||||||
|
|
||||||
|
EXCEPTIONS=''
|
||||||
|
|
||||||
# This function will be called if the script status is on enabled / audit mode
|
# This function will be called if the script status is on enabled / audit mode
|
||||||
audit() {
|
audit() {
|
||||||
info "Checking if setuid is set on world writable Directories"
|
info "Checking if setuid is set on world writable Directories"
|
||||||
|
@ -17,6 +17,8 @@ HARDENING_LEVEL=3
|
|||||||
# shellcheck disable=2034
|
# shellcheck disable=2034
|
||||||
DESCRIPTION="Ensure no world writable files exist"
|
DESCRIPTION="Ensure no world writable files exist"
|
||||||
|
|
||||||
|
EXCEPTIONS=''
|
||||||
|
|
||||||
# This function will be called if the script status is on enabled / audit mode
|
# This function will be called if the script status is on enabled / audit mode
|
||||||
audit() {
|
audit() {
|
||||||
info "Checking if there are world writable files"
|
info "Checking if there are world writable files"
|
||||||
|
6
debian/changelog
vendored
6
debian/changelog
vendored
@ -1,3 +1,9 @@
|
|||||||
|
cis-hardening (3.1-5) unstable; urgency=medium
|
||||||
|
|
||||||
|
* Fix unbound EXCEPTIONS variable in some cases
|
||||||
|
|
||||||
|
-- Thibault Ayanides <thibault.ayanides@ovhcloud.com> Fri, 28 May 2021 15:02:34 +0200
|
||||||
|
|
||||||
cis-hardening (3.1-4) unstable; urgency=medium
|
cis-hardening (3.1-4) unstable; urgency=medium
|
||||||
|
|
||||||
* Add test to check stderr is empty
|
* Add test to check stderr is empty
|
||||||
|
Reference in New Issue
Block a user