tyler.durden
/
harbian-audit
mirror of https://github.com/hardenedlinux/harbian-audit.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Fix a bug for 4.5

This commit is contained in:
samson 2018-12-11 17:31:49 +08:00
parent b7f4300e59
commit e0f97af8a7
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
bin/hardening/4.5_enable_apparmor.sh
View File

@ -35,7 +35,7 @@ audit () {
if [ $( grep -w "^${KEYWORD}" ${GRUBFILE} | grep -c ${PATTERN}) -eq 1 ]; then
ok "There are ${SETSTRING} to ${KEYWORD} in ${GRUBFILE}"
is_mounted "/sys/kernel/security"
if [ ${FNRET} -eq 0 -a $(/usr/sbin/apparmor_status | grep -c "apparmor filesystem is not mounted.") -eq 1 ]; then
if [ ${FNRET} -eq 0 -a $(/usr/sbin/apparmor_status 2>&1 | grep -c "apparmor filesystem is not mounted.") -eq 1 ]; then
crit "AppArmor profiles not enable in the system "
FNRET=3
elif [ ${FNRET} -eq 0 -a $(/usr/sbin/apparmor_status | grep 'profiles are loaded' | awk '{print $1}') -gt 0 ]; then
@ -43,7 +43,7 @@ audit () {
FNRET=0
fi
else
crit "There are ${SETSTRING} to ${KEYWORD} in ${GRUBFILE}"
crit "There are not set ${SETSTRING} to ${KEYWORD} in ${GRUBFILE}"
FNRET=2
fi
fi