tyler.durden/lynis
1
0
Fork 0
mirror of https://github.com/CISOfy/lynis.git synced 2025-07-26 23:34:25 +02:00
Code Issues Packages Projects Releases Wiki Activity

Check for arpon as ARP monitoring software (#267)

Browse Source
This commit is contained in:
afa- 2016-08-29 17:31:17 +00:00 committed by Michael Boelen
parent 639c5adc72
commit 4e139f4d71
1 changed files with 16 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
include/tests_networking
View File

@ -27,6 +27,7 @@
NUMBERACTIVENS=0 # Number of active nameservers NUMBERACTIVENS=0 # Number of active nameservers
DHCP_CLIENT_RUNNING=0 # DHCP client availability DHCP_CLIENT_RUNNING=0 # DHCP client availability
ARPWATCH_RUNNING=0 # ARP-cache based attack monitoring software ARPWATCH_RUNNING=0 # ARP-cache based attack monitoring software
ARPON_RUNNING=0 # ARP-cache based attack monitoring software
# #
################################################################################# #################################################################################
# #
@ -605,13 +606,26 @@
# Description : Checking for ARP spoofing and related monitoring software # Description : Checking for ARP spoofing and related monitoring software
Register --test-no NETW-3032 --os Linux --weight L --network NO --category security --description "Checking for ARP monitoring software" Register --test-no NETW-3032 --os Linux --weight L --network NO --category security --description "Checking for ARP monitoring software"
if [ ${SKIPTEST} -eq 0 ]; then if [ ${SKIPTEST} -eq 0 ]; then
FOUND=0
# arpwatch
IsRunning arpwatch IsRunning arpwatch
if [ ${RUNNING} -eq 1 ]; then if [ ${RUNNING} -eq 1 ]; then
FOUND=1
ARPWATCH_RUNNING=1 ARPWATCH_RUNNING=1
Display --indent 2 --text "- Checking for ARP monitoring software" --result "${STATUS_RUNNING}" --color GREEN Display --indent 2 --text "- Checking for ARP monitoring software" --result "${STATUS_RUNNING}" --color GREEN
else fi
# arpon
IsRunning arpon
if [ ${RUNNING} -eq 1 ]; then
FOUND=1
ARPON_RUNNING=1
Display --indent 2 --text "- Checking for ARP monitoring software" --result "${STATUS_RUNNING}" --color GREEN
fi
if [ ${FOUND} -eq 0 ]; then
Display --indent 2 --text "- Checking for ARP monitoring software" --result "${STATUS_NOT_FOUND}" --color YELLOW Display --indent 2 --text "- Checking for ARP monitoring software" --result "${STATUS_NOT_FOUND}" --color YELLOW
ReportSuggestion ${TEST_NO} "Consider running ARP monitoring software (arpwatch)" ReportSuggestion ${TEST_NO} "Consider running ARP monitoring software (arpwatch,arpon)"
fi fi
fi fi
# #