tyler.durden
/
lynis
mirror of https://github.com/CISOfy/lynis.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Added CRYP-7932 to determine if the system has enabled macOS FileVault.

This commit is contained in:
Florian Sonnenschein 2024-03-11 10:25:46 +01:00
parent d733780777
commit 0b7e8c3bfe
1 changed files with 21 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

21
include/tests_crypto
View File

@ -217,6 +217,27 @@
fi
#
#################################################################################
#
# Test : CRYP-7932
# Description : Determine if system has enabled macOS FileVault encryption
Register --test-no CRYP-7932 --os macOS --weight L --network NO --category crypto --description "Determine if system has enabled macOS FileVault encryption"
if [ ${SKIPTEST} -eq 0 ]; then
filevault_status=$(fdesetup status)
case "$filevault_status" in
*"FileVault is On."*)
LogText "Result: FileVault is enabled."
Display --indent 2 --text "- FileVault is enabled." --result "${STATUS_OK}" --color GREEN
Report "encryption[]=filevault"
;;
*)
LogText "Result: FileVault is not enabled."
Display --indent 2 --text "- FileVault is not enabled." --result "${STATUS_WARNING}" --color RED
;;
esac
fi
#
#################################################################################
#
# Test : CRYP-8002
# Description : Gather available kernel entropy