浏览代码

Not using aide

Check for tripwire cron entry instead
Bob Mottram 8 年前
父节点
当前提交
054c452d71
共有 3 个文件被更改,包括 6 次插入6 次删除
  1. 1
    1
      src/freedombone-tests
  2. 0
    5
      tests/check-aide-cron.sh
  3. 5
    0
      tests/check-tripwire-cron.sh

+ 1
- 1
src/freedombone-tests 查看文件

1031
     ##RHEL-06-000302
1031
     ##RHEL-06-000302
1032
     ##A file integrity tool must be used at least weekly to check for unauthorized file changes, particularly the addition of unauthorized system libraries or binaries, or for unauthorized modification to authorized system libraries or binaries.
1032
     ##A file integrity tool must be used at least weekly to check for unauthorized file changes, particularly the addition of unauthorized system libraries or binaries, or for unauthorized modification to authorized system libraries or binaries.
1033
 
1033
 
1034
-    bash $STIG_TESTS_DIR/check-aide-cron.sh > /dev/null 2>&1 &
1034
+    bash $STIG_TESTS_DIR/check-tripwire-cron.sh > /dev/null 2>&1 &
1035
 
1035
 
1036
     stig_spinner $!
1036
     stig_spinner $!
1037
     output "V-38695" $? ${SETLANG}
1037
     output "V-38695" $? ${SETLANG}

+ 0
- 5
tests/check-aide-cron.sh 查看文件

1
-#1/bin/bash
2
-
3
-if [ $(grep aide /etc/crontab /etc/cron.*/* | wc -l) -ne 0 ];then
4
-        exit 1
5
-fi

+ 5
- 0
tests/check-tripwire-cron.sh 查看文件

1
+#1/bin/bash
2
+
3
+if [ ! -f /etc/cron.daily/tripwire ];then
4
+        exit 1
5
+fi