bump to 3.5-1 (#152 )

Signed-off-by: Tarik Megzari <tarik.megzari@corp.ovh.com>
fix: add 10s wait timeout on iptables command (#151 )
2025-07-16 22:02:17 +02:00 · 2022-03-23 18:40:25 +01:00 · 2022-03-23 16:56:38 +01:00
2 changed files with 8 additions and 1 deletions
--- a/bin/hardening/3.5.4.1.1_net_fw_default_policy_drop.sh
+++ b/bin/hardening/3.5.4.1.1_net_fw_default_policy_drop.sh
@ -21,6 +21,7 @@ PACKAGE="iptables"
 FW_CHAINS="INPUT FORWARD"
 FW_POLICY="DROP"
 FW_CMD="iptables"
+FW_TIMEOUT="10"

 # This function will be called if the script status is on enabled / audit mode
 audit() {
@ -28,7 +29,7 @@ audit() {
    if [ "$FNRET" != 0 ]; then
        crit "$PACKAGE is not installed!"
    else
-        ipt=$($SUDO_CMD "$FW_CMD" -nL 2>/dev/null || true)
+        ipt=$($SUDO_CMD "$FW_CMD" -w "$FW_TIMEOUT" -nL 2>/dev/null || true)
        if [[ -z "$ipt" ]]; then
            crit "Empty return from $FW_CMD command. Aborting..."
            return
--- a/debian/changelog
+++ b/debian/changelog
@ -1,3 +1,9 @@
+cis-hardening (3.5-1) unstable; urgency=medium
+
+  * fix: add 10s wait timeout on iptables command (#151)
+
+ -- Tarik Megzari <tarik.megzari@corp.ovh.com>  Wed, 23 Mar 2022 17:28:08 +0100
+
 cis-hardening (3.4-1) unstable; urgency=medium

  * fix: allow passwd-, group- and shadow- debian default permissions (#149)