tyler.durden
/
lynis
mirror of https://github.com/CISOfy/lynis.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Suhosin is hard linked into PHP on OpenBSD (#423)

This commit is contained in:
alobodzinski 2017-07-28 10:14:04 +02:00 committed by Michael Boelen
parent b301a1c108
commit 6147ebd47b
1 changed files with 22 additions and 17 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

39
include/tests_php
View File

@ -301,24 +301,29 @@
if [ ${SKIPTEST} -eq 0 ]; then
FOUND=0
SIMULATION=0
for I in ${PHPINI_ALLFILES}; do
LogText "Test: Checking for PHP suhosin extension status in file ${I}"
FIND=$(${GREPBINARY} -oP '^extension=.*?suhosin.so.*$' ${I})
if [ -z "${FIND}" ]; then
LogText "Result: ${I}: suhosin is not enabled"
else
LogText "Result: ${I}: suhosin is enabled"
FOUND=1
fi
if [ "${OS}" = "OpenBSD" ]; then
FOUND=1 # On OpenBSD, Suhosin is hard linked into PHP
SIMULATION=off
else
for I in ${PHPINI_ALLFILES}; do
LogText "Test: Checking for PHP suhosin extension status in file ${I}"
FIND=$(${GREPBINARY} -oP '^extension=.*?suhosin.so.*$' ${I})
if [ -z "${FIND}" ]; then
LogText "Result: ${I}: suhosin is not enabled"
else
LogText "Result: ${I}: suhosin is enabled"
FOUND=1
fi
LogText "Test: Check Suhosin simulation mode status"
SIMULATION=$(${GREPBINARY} -oP '^suhosin.simulation.*$' ${I} | ${CUTBINARY} -d= -f2 | ${GREPBINARY} -io 'off' | ${TRBINARY} '[:upper:]' '[:lower:]')
if [ "${SIMULATION}" = "off" ]; then
LogText "Result: ${I}: suhosin simulation mode is not active"
else
LogText "Result: ${I}: suhosin simulation mode is active"
fi
done
LogText "Test: Check Suhosin simulation mode status"
SIMULATION=$(${GREPBINARY} -oP '^suhosin.simulation.*$' ${I} | ${CUTBINARY} -d= -f2 | ${GREPBINARY} -io 'off' | ${TRBINARY} '[:upper:]' '[:lower:]')
if [ "${SIMULATION}" = "off" ]; then
LogText "Result: ${I}: suhosin simulation mode is not active"
else
LogText "Result: ${I}: suhosin simulation mode is active"
fi
done
fi
if [ ${FOUND} -eq 0 ]; then
LogText "Result: Suhosin extension is not enabled"