From 91c9760598435a628307480565a05c9dd9e91150 Mon Sep 17 00:00:00 2001
From: mboelen <michael@cisofy.com>
Date: Wed, 16 Sep 2015 17:01:17 +0200
Subject: [PATCH] Add hardening points properly to umask tests

---
 include/tests_authentication | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/include/tests_authentication b/include/tests_authentication
index ad24a432..e230e9b2 100644
--- a/include/tests_authentication
+++ b/include/tests_authentication
@@ -822,8 +822,10 @@
                 if [ ! "${FIND}" = "077" -a ! "${FIND}" = "027" ]; then
                     logtext "Result: found umask ${FIND}, which could be more strict"
                     WEAK_UMASK=1
+                    AddHP 1 2
                   else
                     logtext "Result: found umask ${FIND}, which is fine"
+                    AddHP 2 2
                 fi
               # Found more than 1 umask value in profile
               else
@@ -833,11 +835,12 @@
                     if [ ! "${I}" = "077" -a ! "${I}" = "027" ]; then
                         logtext "Result: umask ${I} could be more strict"
                         WEAK_UMASK=1
+                        AddHP 1 2
                       else
                         logtext "Result: Found umask ${I}, which is fine"
+                        AddHP 2 2
                     fi
                 done
-                AddHP 1 2
             fi
 
             if [ ${FOUND_UMASK} -eq 1 ]; then