tyler.durden
/
lynis
mirror of https://github.com/CISOfy/lynis.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Check if ipfw is enabled in rc.conf.

This commit is contained in:
Roland Smith 2015-04-27 12:00:58 +02:00
parent 5d7dc80481
commit ded7e95a14
1 changed files with 11 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
include/tests_firewalls
View File

@ -280,12 +280,20 @@
# For now, only check for IPv4. # For now, only check for IPv4.
FIND=`${SYSCTLBINARY} net.inet.ip.fw.enable | awk '{ print $2 }'` FIND=`${SYSCTLBINARY} net.inet.ip.fw.enable | awk '{ print $2 }'`
if [ "${FIND}" = "1" ]; then if [ "${FIND}" = "1" ]; then
Display --indent 4 --text "- Checking ipfw status" --result RUNNING --color GREEN Display --indent 2 --text "- Checking ipfw status" --result RUNNING --color GREEN
logtext "Result: ipfw is enabled and running for IPv4" logtext "Result: ipfw is running for IPv4"
FIREWALL_ACTIVE=1 FIREWALL_ACTIVE=1
FIREWALL_SOFTWARE="ipfw" FIREWALL_SOFTWARE="ipfw"
IPFW_ENABLED=`service -e | grep -o ipfw`
if [ "${IPFW_ENABLED}" = "ipfw" ]; then
Display --indent 4 --text "- ipfw enabled in /etc/rc.conf" --result YES --color GREEN
logtext "Result: ipfw is enabled at start-up for IPv4"
else
Display --indent 4 --text "- ipfw enabled in /etc/rc.conf" --result NO --color YELLOW
logtext "Result: ipfw is disabled at start-up for IPv4"
fi
else else
Display --indent 4 --text "- Checking ipfw status" --result "NOT RUNNING" --color YELLOW Display --indent 2 --text "- Checking ipfw status" --result "NOT RUNNING" --color YELLOW
logtext "Result: ipfw is not running for IPv4" logtext "Result: ipfw is not running for IPv4"
fi fi
else else