tyler.durden
/
lynis
mirror of https://github.com/CISOfy/lynis.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #43 from rsmith-nl/ipfw 

Add test for 'ipfw' firewall on FreeBSD.
This commit is contained in:
Michael Boelen 2015-09-06 17:34:36 +02:00
parent 05dd1a6814 a0b20fcfe3
commit 8ab314cf07
1 changed files with 28 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

29
include/tests_firewalls
View File

@ -270,7 +270,34 @@
#################################################################################
#
# Test : FIRE-4530
# Description : Check ipfw
# Description : Check ipfw (FreeBSD)
Register --test-no FIRE-4530 --os FreeBSD --weight L --network NO --description "Check ipfw status"
if [ ${SKIPTEST} -eq 0 ]; then
if [ ! "${SYSCTLBINARY}" = "" ]; then
# For now, only check for IPv4.
FIND=`${SYSCTLBINARY} net.inet.ip.fw.enable | awk '{ print $2 }'`
if [ "${FIND}" = "1" ]; then
Display --indent 2 --text "- Checking ipfw status" --result RUNNING --color GREEN
logtext "Result: ipfw is running for IPv4"
FIREWALL_ACTIVE=1
FIREWALL_SOFTWARE="ipfw"
IPFW_ENABLED=`service -e | grep -o ipfw`
if [ "${IPFW_ENABLED}" = "ipfw" ]; then
Display --indent 4 --text "- ipfw enabled in /etc/rc.conf" --result YES --color GREEN
logtext "Result: ipfw is enabled at start-up for IPv4"
else
Display --indent 4 --text "- ipfw enabled in /etc/rc.conf" --result NO --color YELLOW
logtext "Result: ipfw is disabled at start-up for IPv4"
fi
else
Display --indent 2 --text "- Checking ipfw status" --result "NOT RUNNING" --color YELLOW
logtext "Result: ipfw is not running for IPv4"
fi
else
Display --indent 2 --text "- Checking ipfw" --result SKIPPED --color YELLOW
ReportException "${TEST_NO}:4" "No IPFW test available (sysctl missing)"
fi
fi
#
#################################################################################
#