tyler.durden
/
harbian-audit
mirror of https://github.com/hardenedlinux/harbian-audit.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Fix some bug for 7.7.4 and 7.7.5

This commit is contained in:
Samson-W 2019-04-09 04:59:31 -04:00
parent 86ca90d417
commit f9c5a21dff
2 changed files with 9 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
bin/hardening/7.7.4_ensure_default_deny_firewall_policy.sh
View File

@ -20,9 +20,9 @@ IPS6=$(which ip6tables)
# This function will be called if the script status is on enabled / audit mode
audit () {
if [ $(${IPS4} -S | egrep "\-P") -eq 0 ]; then
if [ $(${IPS4} -S | grep -c "\-P") -eq 0 ]; then
crit "Ip4tables: Firewall policy is not default deny!"
if [ $(${IPS6} -S | egrep "\-P") -eq 0 ]; then
if [ $(${IPS6} -S | grep -c "\-P") -eq 0 ]; then
crit "Ip6tables: Firewall policy is not default deny!"
FNRET=1
else

11
bin/hardening/7.7.5_ensure_loopback_traffic_is_configured.sh
View File

@ -15,13 +15,14 @@ set -u # One variable unset, it's over
HARDENING_LEVEL=2
IPS4=$(which iptables)
IPS6=$(which ip6tables)
INPUT_ACCEPT=1
OUTPUT_ACCEPT=1
INPUT_DENY=1
# This function will be called if the script status is on enabled / audit mode
audit () {
# Check the loopback interface to accept INPUT traffic.
ensure_lo_traffic_input_is_accept()
ensure_lo_traffic_input_is_accept
if [ $FNRET = 0 ]; then
INPUT_ACCEPT=0
ok "Iptables loopback traffic INPUT has configured!"
@ -30,7 +31,7 @@ audit () {
crit "Iptables: loopback traffic INPUT is not configured!"
fi
# Check the loopback interface to accept OUTPUT traffic.
ensure_lo_traffic_output_is_accept()
ensure_lo_traffic_output_is_accept
if [ $FNRET = 0 ]; then
OUTPUT_ACCEPT=0
ok "Iptables loopback traffic OUTPUT has configured!"
@ -39,7 +40,7 @@ audit () {
crit "Iptables: loopback traffic OUTPUT is not configured!"
fi
# all other interfaces to deny traffic to the loopback network.
ensure_lo_traffic_other_if_input_is_deny()
ensure_lo_traffic_other_if_input_is_deny
if [ $FNRET = 0 ]; then
INPUT_DENY=0
ok "Iptables loopback traffic INPUT deny from other interfaces has configured!"