tyler.durden
/
lynis
mirror of https://github.com/CISOfy/lynis.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Update tests_firewalls

This commit is contained in:
nser77 2024-10-09 09:40:01 +02:00 committed by GitHub
parent 2d4ec42696
commit d64f480823
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 18 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

27
include/tests_firewalls
View File

@ -112,7 +112,7 @@
tables="filter nat mangle raw security"
for t in ${tables}
do
${iptables_binary} -t "${t}" -S -v -w 1 2>/dev/zero | while read -r line
${IPTABLESBINARY} -t "${t}" -S -v -w 1 2>/dev/zero | while read -r line
do
set -- ${line}
while [ $# -gt 0 ]
@ -199,16 +199,25 @@
# logics
if [ "${t}" = "filter" ] || [ "${t}" = "security" ]
then
if [ "${c}" = "INPUT" ] && [ "${j}" = "ACCEPT" ]
if [ "${c}" = "INPUT" ]
then
LogText "Result: Found ${j} for ${c} (table: ${t})"
Display --indent 6 --text "- Checking chain ${c} (table: ${t}, chain ${c})" --result "${j}" --color YELLOW
AddHP 1 3
elif [ "${c}" = "INPUT" ] && [ "${j}" = "DROP" ]
if [ "${j}" = "ACCEPT" ]
then
LogText "Result: Found ${j} for ${c} (table: ${t})"
Display --indent 6 --text "- Checking chain ${c} (table: ${t}, chain ${c})" --result "${j}" --color YELLOW
AddHP 1 3
elif [ "${j}" = "DROP" ]
then
LogText "Result: Found ${j} for ${c} (table: ${t})"
Display --indent 6 --text "- Checking chain ${c} (table: ${t}, chain ${c})" --result "${j}" --color GREEN
AddHP 3 3
fi
elif [ "${c}" = "FORWARD" ]
then
LogText "Result: Found ${j} for ${c} (table: ${t})"
Display --indent 6 --text "- Checking chain ${c} (table: ${t}, chain ${c})" --result "${j}" --color GREEN
AddHP 3 3
:
elif [ "${c}" = "OUTPUT" ]
then
:
elif [ "${c}" = "INPUT" ] || [ "${c}" = "FORWARD" ] || [ "${c}" = "OUTPUT" ]
then
if [ "${j}" = "NFQUEUE" ]