tyler.durden/lynis
1
0
Fork 0
mirror of https://github.com/CISOfy/lynis.git synced 2025-07-30 09:14:18 +02:00
Code Issues Packages Projects Releases Wiki Activity

Minor changes

Browse Source
This commit is contained in:
Michael Boelen 2018-01-26 12:28:52 +01:00
parent a30d429315
commit 0d3b89e254
No known key found for this signature in database
GPG Key ID: 26141F77A09D7F04
1 changed files with 8 additions and 15 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

23
include/tests_usb
View File

@ -23,7 +23,6 @@
# #
################################################################################# #################################################################################
# #
USBGUARD_FOUND=0 USBGUARD_FOUND=0
USBGUARD_CONFIG="" USBGUARD_CONFIG=""
USBGUARD_RULES="" USBGUARD_RULES=""
@ -35,24 +34,20 @@
USBGUARD_RULES_ALLOW=0 USBGUARD_RULES_ALLOW=0
USBGUARD_RULES_BLOCK=0 USBGUARD_RULES_BLOCK=0
USBGUARD_RULES_REJECT=0 USBGUARD_RULES_REJECT=0
# #
################################################################################# #################################################################################
# #
# Test to determine if USBGuard is installed. If it is, we will limit # Test to determine if USBGuard is installed. If it is, we will limit
# suggestions from other tests. # suggestions from other tests.
if [ ! -z "${USBGUARDBINARY}" ]; then if [ ! -z "${USBGUARDBINARY}" ]; then
USBGUARD_FOUND=1 USBGUARD_FOUND=1
fi fi
# #
################################################################################# #################################################################################
# #
# Test : USB-1200
# Test : USB-0100
# Description : Check for disabled USB storage # Description : Check for disabled USB storage
Register --test-no USB-0100 --os Linux --weight L --network NO --category security --description "Check if USB storage is disabled" Register --test-no USB-1200 --os Linux --weight L --network NO --category security --description "Check if USB storage is disabled"
if [ ${SKIPTEST} -eq 0 ]; then if [ ${SKIPTEST} -eq 0 ]; then
FOUND=0 FOUND=0
LogText "Test: Checking USB storage driver in directory /etc/modprobe.d and configuration file /etc/modprobe.conf" LogText "Test: Checking USB storage driver in directory /etc/modprobe.d and configuration file /etc/modprobe.conf"
@ -89,14 +84,12 @@
AddHP 3 3 AddHP 3 3
fi fi
fi fi
# #
################################################################################# #################################################################################
# #
# Test : USB-2000
# Test : USB-0200
# Description : Check USB authorizations # Description : Check USB authorizations
Register --test-no USB-0200 --os Linux --weight L --network NO --category security --description "Check USB authorizations" Register --test-no USB-2000 --os Linux --weight L --network NO --category security --description "Check USB authorizations"
if [ ${SKIPTEST} -eq 0 ]; then if [ ${SKIPTEST} -eq 0 ]; then
LogText "Test: Checking USB devices authorization to connect to the system" LogText "Test: Checking USB devices authorization to connect to the system"
FOUND=0 FOUND=0
@ -134,11 +127,11 @@
################################################################################# #################################################################################
# #
# Test : USB-0300 # Test : USB-3000
# Description : Perform USBGuard check # Description : Perform USBGuard check
Register --test-no USB-0300 --os Linux --weight L --network NO --category security --description "Check for presence of USBGuard" Register --test-no USB-3000 --os Linux --weight L --network NO --category security --description "Check for presence of USBGuard"
if [ ${SKIPTEST} -eq 0 ]; then if [ ${SKIPTEST} -eq 0 ]; then
if [ "${USBGUARD_FOUND}" -gt "0" ]; then if [ ${USBGUARD_FOUND} -eq 1 ]; then
LogText "Result: USBGuard is installed (${USBGUARDBINARY})" LogText "Result: USBGuard is installed (${USBGUARDBINARY})"
Display --indent 2 --text "- Checking USBGuard" --result "${STATUS_FOUND}" --color GREEN Display --indent 2 --text "- Checking USBGuard" --result "${STATUS_FOUND}" --color GREEN
AddHP 1 1 AddHP 1 1
@ -343,7 +336,6 @@
fi fi
fi fi
# #
################################################################################# #################################################################################
# #
@ -352,3 +344,4 @@ WaitForKeyPress
# #
#================================================================================ #================================================================================
# Lynis - Security Auditing and System Hardening for Linux and UNIX - https://cisofy.com