tyler.durden
/
lynis
mirror of https://github.com/CISOfy/lynis.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Added warning when GLSA finds security updates

This commit is contained in:
mboelen 2014-10-14 10:39:34 +02:00
parent ae0dcdfcfd
commit d6dbbeedb5
1 changed files with 4 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
include/tests_ports_packages
View File

@ -836,8 +836,8 @@
FIND=`/usr/bin/glsa-check -t all 2>&1 | grep -v "This system is affected by the following GLSAs:" | grep -v "This system is not affected by any of the listed GLSAs" | wc -l` FIND=`/usr/bin/glsa-check -t all 2>&1 | grep -v "This system is affected by the following GLSAs:" | grep -v "This system is not affected by any of the listed GLSAs" | wc -l`
if [ "${FIND}" = "" ]; then if [ "${FIND}" = "" ]; then
logtext "Result: unexpected result: wc should report 0 if no vulnerable packages found." logtext "Result: unexpected result: wc should report 0 if no vulnerable packages found."
ReportSuggestion ${TEST_NO} "Check if system is up-to-date, security updates check (glsa-check) gives and unexpected result" #ReportSuggestion ${TEST_NO} "Check if system is up-to-date, security updates check (glsa-check) gives and unexpected result"
ReportExcpetion "${TEST_NO}:1" "glsa-check did not provide any result" ReportException "${TEST_NO}:1" "glsa-check did not provide any result"
else else
if [ "${FIND}" = "0" ]; then if [ "${FIND}" = "0" ]; then
logtext "Result; no vulnerable packages found via glsa-check" logtext "Result; no vulnerable packages found via glsa-check"
@ -846,7 +846,8 @@
VULNERABLE_PACKAGES_FOUND=1 VULNERABLE_PACKAGES_FOUND=1
SCAN_PERFORMED=1 SCAN_PERFORMED=1
logtext "Result: found ${FIND} security updates with glsa-check" logtext "Result: found ${FIND} security updates with glsa-check"
ReportSuggestion ${TEST_NO} "Found ${FIND} security update(s) with glsa-check. Run 'glsa-check -t all' to see which GLSA(s) were identified." ReportWarning "${TEST_NO}" "H" "Found ${FIND} security update(s) with glsa-check."
logtext "Notes: Run 'glsa-check -t all' to see which GLSA(s) were identified."
AddHP 0 25 AddHP 0 25
fi fi
fi fi