From 468f5fac6e8aaeea2200a65d9d7ad177f4c987ab Mon Sep 17 00:00:00 2001 From: hutr Date: Thu, 7 Jun 2018 16:08:43 +0200 Subject: [PATCH] changes for 1.4.11 and 1.4.2 added tests: for 1.4.11 and removed grep -v grep for both --- cfg/1.8/master.yaml | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/cfg/1.8/master.yaml b/cfg/1.8/master.yaml index 59117e8..5630121 100644 --- a/cfg/1.8/master.yaml +++ b/cfg/1.8/master.yaml @@ -942,8 +942,9 @@ groups: - id: 1.4.11 text: "Ensure that the etcd data directory permissions are set to 700 or more restrictive (Scored)" - audit: ps -ef | grep $etcdbin | grep -- --data-dir | grep -v grep | sed 's%.*data-dir[= ]\([^ ]*\).*%\1%' | xargs stat -c %a - test_items: + audit: ps -ef | grep $etcdbin | grep -- --data-dir | sed 's%.*data-dir[= ]\([^ ]*\).*%\1%' | xargs stat -c %a + tests: + test_items: - flag: "700" compare: op: eq @@ -959,7 +960,7 @@ groups: - id: 1.4.12 text: "Ensure that the etcd data directory ownership is set to etcd:etcd (Scored)" - audit: ps -ef | grep $etcdbin | grep -- --data-dir | grep -v grep | sed 's%.*data-dir[= ]\(\S*\)%\1%' | xargs stat -c %U:%G + audit: ps -ef | grep $etcdbin | grep -- --data-dir | sed 's%.*data-dir[= ]\(\S*\)%\1%' | xargs stat -c %U:%G tests: test_items: - flag: "etcd:etcd"