tyler.durden
/
lynis
mirror of https://github.com/CISOfy/lynis.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

[INSE-8050] added com.apple.ftp-proxy and improved text output

This commit is contained in:
Michael Boelen 2019-07-16 14:35:00 +02:00
parent b935ab8b6a
commit 5869fa4eb1
No known key found for this signature in database
GPG Key ID: 26141F77A09D7F04
1 changed files with 6 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
include/tests_insecure_services
View File

@ -495,16 +495,16 @@
if [ -n "${LAUNCHCTL_BINARY}" ]; then PREQS_MET="YES"; SKIPREASON=""; else PREQS_MET="NO"; SKIPREASON="No launchctl binary on this system"; fi
Register --test-no INSE-8050 --os "macOS" --preqs-met ${PREQS_MET} --skip-reason "${SKIPREASON}" --weight M --network NO --category security --description "Check for insecure services on macOS"
if [ ${SKIPTEST} -eq 0 ]; then
TEST_SERVICES="com.apple.fingerd"
for ITEM in ${TEST_SERVICES}; do
if ${LAUNCHCTL_BINARY} print-enabled system | ${GREPBINARY} -sq ${ITEM}; then
Display --indent 2 --text "- $text" --result "${STATUS_NO}" --color RED
TEST_SERVICES="com.apple.fingerd com.apple.ftp-proxy"
for ITEM in "${TEST_SERVICES}"; do
if ${LAUNCHCTL_BINARY} list | ${GREPBINARY} -sq ${ITEM}; then
Display --indent 2 --text "- ${ITEM}" --result "${STATUS_NO}" --color RED
LogText "Result: found ${ITEM}, which is considered an insecure service"
AddSuggestion "${TEST_NO}" "Consider disabling service ${ITEM}" "launchctl" "-"
AddHP 0 1
else
Display --indent 2 --text "- $text" --result "${STATUS_OK}" --color GREEN
LogText "Result: $text, OK"
Display --indent 2 --text "- ${ITEM}" --result "${STATUS_OK}" --color GREEN
LogText "Result: did not find ${ITEM}, which is fine"
AddHP 1 1
fi
done