mirror of
https://github.com/CISOfy/lynis.git
synced 2025-07-26 23:34:25 +02:00
fix FILE-6374 (#672)
This commit is contained in:
parent
71a0c79053
commit
137dc6f0cc
@ -560,7 +560,7 @@
|
||||
# ---------------------------------------------------------
|
||||
|
||||
FILESYSTEMS_TO_CHECK="/boot:nodev,noexec,nosuid /dev/shm:nosuid,nodev,noexec /home:nodev,nosuid /tmp:nodev,noexec,nosuid /var:nosuid /var/log:nodev,noexec,nosuid /var/log/audit:nodev,noexec,nosuid /var/tmp:nodev,noexec,nosuid"
|
||||
Register --test-no FILE-6374 --os Linux --weight L --network NO --category security --description "Checking /boot mount options"
|
||||
Register --test-no FILE-6374 --os Linux --weight L --network NO --category security --description "Checking partitions mount options"
|
||||
if [ ${SKIPTEST} -eq 0 ]; then
|
||||
if [ -f /etc/fstab ]; then
|
||||
for I in ${FILESYSTEMS_TO_CHECK}; do
|
||||
@ -574,7 +574,7 @@
|
||||
fi
|
||||
fi
|
||||
if [ ! -z "${FS_FSTAB}" ]; then
|
||||
FOUND_FLAGS=$(${AWKBINARY} -v fs=${FILESYSTEM} '{ if ($2==fs) { print $4 } }' /etc/fstab | ${SEDBINARY} 's/,/ /g' | ${TRBINARY} '\n' ' ')
|
||||
FOUND_FLAGS=$(${AWKBINARY} -v fs=${FILESYSTEM} '{ if ($2==fs) { print $4 } }' /etc/fstab | ${SEDBINARY} 's/,/ /g' | ${TRBINARY} -d '\n')
|
||||
LogText "File system: ${FILESYSTEM}"
|
||||
LogText "Expected flags: ${EXPECTED_FLAGS}"
|
||||
LogText "Found flags: ${FOUND_FLAGS}"
|
||||
|
Loading…
x
Reference in New Issue
Block a user