arildjensen/cis-puppet

IF/ELSE in "files/linuxcontrols/scripts/f0000.sh" script referenced by "cis::linuxcontrols::c0010" seem to be reversed.

Opened this issue · 0 comments

From EL6 Benchmark 1.4.6:

Perform the following to determine if unconfined daemons are running on the system. # ps -eZ | egrep "initrc" | egrep -vw "tr|ps|egrep|bash|awk" | tr ':' ' ' | awk '{ print $NF }' [no output produced]

The current code returns "fail" if the audit succeeds (because no output is produced by the $COMMAND in the conditional expression).