tyler.durden/harbian-audit
1
0
Fork 0
mirror of https://github.com/hardenedlinux/harbian-audit.git synced 2025-07-31 01:24:58 +02:00
Code Issues Packages Projects Releases Wiki Activity

Fix a bug for apply method of 4.6

Browse Source
This commit is contained in:
Samson-W 2020-07-01 02:42:49 +08:00
parent e72e87e45d
commit 68f56e4f93
1 changed files with 12 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

21
bin/hardening/4.6_enable_selinux.sh
View File

@ -104,7 +104,9 @@ audit () {
} }
apply_debian () { apply_debian () {
set +e
check_aa_status check_aa_status
set -e
if [ $FNRET = 0 ]; then if [ $FNRET = 0 ]; then
ok "AppArmor was actived. So pass." ok "AppArmor was actived. So pass."
return 0 return 0
@ -112,7 +114,16 @@ apply_debian () {
case $FNRET in case $FNRET in
0) ok "SELinux is active and in Enforcing mode." 0) ok "SELinux is active and in Enforcing mode."
;; ;;
1) warn "$PACKAGE is not installed, install $PACKAGES" 2) warn "Set SELinux to activate, and need reboot"
selinux-activate
warn "Set SELinux to enforcing mode, and need reboot"
replace_in_file $SELINUXCONF_FILE 'SELINUX=.*' $SELINUXENFORCE_MODE
;;
3) warn "Set SELinux to enforcing mode, and need reboot"
replace_in_file $SELINUXCONF_FILE 'SELINUX=.*' $SELINUXENFORCE_MODE
;;
# When return 1 or 5
*) warn "$PACKAGE is not installed, install $PACKAGES"
for PACKAGE in ${PACKAGES} for PACKAGE in ${PACKAGES}
do do
install_package $PACKAGE install_package $PACKAGE
@ -122,14 +133,6 @@ apply_debian () {
warn "Set SELinux to enforcing mode, and need reboot" warn "Set SELinux to enforcing mode, and need reboot"
replace_in_file $SELINUXCONF_FILE 'SELINUX=.*' $SELINUXENFORCE_MODE replace_in_file $SELINUXCONF_FILE 'SELINUX=.*' $SELINUXENFORCE_MODE
;; ;;
2) warn "Set SELinux to activate, and need reboot"
selinux-activate
warn "Set SELinux to enforcing mode, and need reboot"
replace_in_file $SELINUXCONF_FILE 'SELINUX=.*' $SELINUXENFORCE_MODE
;;
3) warn "Set SELinux to enforcing mode, and need reboot"
replace_in_file $SELINUXCONF_FILE 'SELINUX=.*' $SELINUXENFORCE_MODE
;;
esac esac
} }