tyler.durden
/
lynis
mirror of https://github.com/CISOfy/lynis.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Added NETW-3032 to test for ARP monitoring software like arpwatch

This commit is contained in:
mboelen 2015-12-29 16:30:31 +01:00
parent 31b5c0bb42
commit 6b3c32b61f
1 changed files with 16 additions and 16 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

32
include/tests_networking
View File

@ -492,22 +492,6 @@
fi
#
#################################################################################
#
# Test : NETW-3032
# Description : Checking for ARP-Spoofing monitoring software
Register --test-no NETW-3032 --os Linux --weight L --network NO --description "Checking for ARP-Spoofing monitoring software"
if [ ${SKIPTEST} -eq 0 ]; then
IsRunning arpwatch
if [ ${RUNNING} -eq 1 ]; then
ARPWATCH_RUNNING=1
Display --indent 2 --text "Checking for ARP-Spoofing monitoring software" --result RUNNING --color GREEN
else
Display --indent 2 --text "Checking for ARP-Spoofing monitoring software" --result "NOT FOUND" --color RED
ReportSuggestion ${TEST_NO} "Install ARP-Spoofing attack monitoring software like 'arpwatch'"
fi
fi
#
#################################################################################
#
# Test : NETW-3030
# Description : Checking for DHCP client
@ -523,6 +507,22 @@
fi
#
#################################################################################
#
# Test : NETW-3032
# Description : Checking for ARP spoofing and related monitoring software
Register --test-no NETW-3032 --os Linux --weight L --network NO --description "Checking for ARP monitoring software"
if [ ${SKIPTEST} -eq 0 ]; then
IsRunning arpwatch
if [ ${RUNNING} -eq 1 ]; then
ARPWATCH_RUNNING=1
Display --indent 2 --text "Checking for ARP monitoring software" --result RUNNING --color GREEN
else
Display --indent 2 --text "Checking for ARP monitoring software" --result "NOT FOUND" --color YELLOW
ReportSuggestion ${TEST_NO} "Install ARP monitoring software like arpwatch"
fi
fi
#
#################################################################################
#
report "dhcp_client_running=${DHCP_CLIENT_RUNNING}"