Comments (8)
Hi Tim,
In that case the best option is to make it a prereq for the test, like many tests have. Adding the path to binary search is not preferred in this case :)
So if file /usr/libexec/ApplicationFirewall/socketfilterfw exists, prereq is met and test will be executed.
Currently don't have a Mac running here. So if you can share the output, we can create the test very easily.
from lynis.
Hi Tim, can you share your output?
from lynis.
what output exactly do you want?
from lynis.
Output of the command you suggested: /usr/libexec/ApplicationFirewall/socketfilterfw --getglobalstate
(or any parameter that might be useful)
Thanks!
from lynis.
bash-3.2# /usr/libexec/ApplicationFirewall/socketfilterfw --getglobalstate
Firewall is enabled. (State = 1)
from lynis.
First patch is applied to detect this. If you have the chance, please test and let us know the status of FIRE-4532.
from lynis.
Application firewall is now supported. I'll open another ticket for pf not showing up though. Thanks for getting this fixed.
from lynis.
Scratch that part about PF. It's doing the right thing after all.
from lynis.
Related Issues (20)
- [INSE-8000] The inetd service is not detected HOT 2
- [PKGS-7410] Does not detect the package containing the kernel. HOT 2
- PKGS-7392 - Found one or more vulnerable package right after dist-upgrade HOT 10
- NETW-3200 and FILE-6430 do no longer detect blacklisted modules HOT 4
- Function/test: [SSH-7404:01], Exception found!
- Unknown OS found - gardenlinux
- JBD2 is mistakenly undetected as a missing module in kernel while being built-in to it
- [PKGS-7398] NixOS: Add package audit tool vulnix
- Potential false positive on protocol detections HOT 4
- [DBS-1882] Exception HOT 1
- Potental false positive for DBS-1820 HOT 1
- [HRDN-7222] When checking permissions, permissions of symlinks are checked instead of the binary file (compilers)
- NAME-4404 is a false positive when hostname is resolved by systemd NSS modules
- Unknown OS found: openSUSE Tumbleweed-Slowroll
- Certificate of https://packages.cisofy.com has expired HOT 2
- Unknown OS found: Buildroot
- Unknown OS found: Peppermint
- fedora 40 bug on detecting systemd-analyze version HOT 1
- default_gateway not found
- small bug in /usr/share/lynis/include/tests_kernel line 695 HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from lynis.