Modify apply method of 14.1

2020-11-02 21:56:30 +08:00 · 2020-11-02 21:56:30 +08:00 · 34de8084d7
parent 6bf8a58bef
commit 34de8084d7
1 changed files with 6 additions and 1 deletions
--- a/bin/hardening/14.1_security_related_NAT_slipstreaming.sh
+++ b/bin/hardening/14.1_security_related_NAT_slipstreaming.sh
@ -70,7 +70,12 @@ apply () {
        		ok "$SYSCTL_PARAM correctly set to $SYSCTL_EXP_RESULT"
    		fi
 	else
-		echo "$SYSCTL_PARAM = $SYSCTL_EXP_RESULT" >> /etc/sysctl.conf
+		warn "/proc/sys/net/netfilter/nf_conntrack_helper is not exist, just set $SYSCTL_PARAM = $SYSCTL_EXP_RESULT to /etc/sysctl.conf"
+		if [ $(grep "^$SYSCTL_PARAM = $SYSCTL_EXP_RESULT" /etc/sysctl.conf | wc -l) -eq 0 ]; then
+			echo "$SYSCTL_PARAM = $SYSCTL_EXP_RESULT" >> /etc/sysctl.conf
+		else
+			:
+		fi
 	fi
 }