tyler.durden
/
lynis
mirror of https://github.com/CISOfy/lynis.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Support for allow-auto-purge option in profiles

This commit is contained in:
Michael Boelen 2017-11-25 16:11:04 +01:00
parent c453331265
commit e4cb190237
No known key found for this signature in database
GPG Key ID: 26141F77A09D7F04
2 changed files with 13 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
default.prf
View File

@ -460,6 +460,9 @@ permdir:/root/.ssh:rwx------:root:-:WARN:
#
#################################################################################
# Allow this system to be purged when it is outdated (default: not defined).
# This is useful for ephemeral systems which are short-lived.
#allow-auto-purge=yes
# Proxy settings
# Protocol (http, https, socks5)

10
include/profiles
View File

@ -45,6 +45,16 @@
case ${OPTION} in
# Is Lynis Enterprise allowed to purge this system when it is becomes outdated?
allow-auto-purge)
FIND=$(echo "${VALUE}" | egrep "^(1|true|yes)$")
if [ ! -z "${FIND}" ]; then
Report "allow-auto-purge=1"
else
Report "allow-auto-purge=0"
fi
;;
# Define which compliance standards are enabled
# For this to work, the Enterprise plugins are needed
compliance_standards | check-compliance)