mirror of https://github.com/CISOfy/lynis.git
Added warning when GLSA finds security updates
This commit is contained in:
parent
ae0dcdfcfd
commit
d6dbbeedb5
|
@ -836,8 +836,8 @@
|
|||
FIND=`/usr/bin/glsa-check -t all 2>&1 | grep -v "This system is affected by the following GLSAs:" | grep -v "This system is not affected by any of the listed GLSAs" | wc -l`
|
||||
if [ "${FIND}" = "" ]; then
|
||||
logtext "Result: unexpected result: wc should report 0 if no vulnerable packages found."
|
||||
ReportSuggestion ${TEST_NO} "Check if system is up-to-date, security updates check (glsa-check) gives and unexpected result"
|
||||
ReportExcpetion "${TEST_NO}:1" "glsa-check did not provide any result"
|
||||
#ReportSuggestion ${TEST_NO} "Check if system is up-to-date, security updates check (glsa-check) gives and unexpected result"
|
||||
ReportException "${TEST_NO}:1" "glsa-check did not provide any result"
|
||||
else
|
||||
if [ "${FIND}" = "0" ]; then
|
||||
logtext "Result; no vulnerable packages found via glsa-check"
|
||||
|
@ -846,7 +846,8 @@
|
|||
VULNERABLE_PACKAGES_FOUND=1
|
||||
SCAN_PERFORMED=1
|
||||
logtext "Result: found ${FIND} security updates with glsa-check"
|
||||
ReportSuggestion ${TEST_NO} "Found ${FIND} security update(s) with glsa-check. Run 'glsa-check -t all' to see which GLSA(s) were identified."
|
||||
ReportWarning "${TEST_NO}" "H" "Found ${FIND} security update(s) with glsa-check."
|
||||
logtext "Notes: Run 'glsa-check -t all' to see which GLSA(s) were identified."
|
||||
AddHP 0 25
|
||||
fi
|
||||
fi
|
||||
|
|
Loading…
Reference in New Issue