tyler.durden
/
harbian-audit
mirror of https://github.com/hardenedlinux/harbian-audit.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Fix bug for 7.7.4.

This commit is contained in:
Samson-W 2019-04-09 17:18:17 +08:00
parent f9c5a21dff
commit 8a873e2652
1 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
bin/hardening/7.7.4_ensure_default_deny_firewall_policy.sh
View File

@ -20,9 +20,9 @@ IPS6=$(which ip6tables)
# This function will be called if the script status is on enabled / audit mode
audit () {
if [ $(${IPS4} -S | grep -c "\-P") -eq 0 ]; then
crit "Ip4tables: Firewall policy is not default deny!"
if [ $(${IPS6} -S | grep -c "\-P") -eq 0 ]; then
if [ $(${IPS4} -S | grep -c "\-P INPUT DROP") -eq 0 -o $(${IPS4} -S | grep -c "\-P OUTPUT DROP") -eq 0 -o $(${IPS4} -S | grep -c "\-P FORWARD DROP") -eq 0 ]; then
crit "Iptables: Firewall policy is not default deny!"
if [ $(${IPS6} -S | grep -c "\-P INPUT DROP") -eq 0 -o $(${IPS4} -S | grep -c "\-P OUTPUT DROP") -eq 0 -o $(${IPS4} -S | grep -c "\-P FORWARD DROP") -eq 0 ]; then
crit "Ip6tables: Firewall policy is not default deny!"
FNRET=1
else
@ -30,7 +30,7 @@ audit () {
FNRET=0
fi
else
ok "Ip4tables has set default deny for firewall policy!"
ok "Iptables has set default deny for firewall policy!"
FNRET=0
fi
}