Mirrors/linux-baseline
2
0
Fork 0
mirror of https://github.com/dev-sec/linux-baseline synced 2024-11-22 03:03:02 +00:00
Code Issues Projects Releases Packages Wiki Activity

fix spelling errors

Browse source 
Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>
This commit is contained in:
Martin Schurz 2023-04-30 19:11:41 +02:00
parent fe8a9eff9f
commit 6cfbd386f0
2 changed files with 5 additions and 5 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
controls/os_spec.rb
View file

@ -60,25 +60,25 @@ cpuvulndir = '/sys/devices/system/cpu/vulnerabilities/'
mount_exec_blocklist = input(
'mount_exec_blocklist',
value: ['/boot', '/dev', '/dev/shm', '/tmp', '/var/log', '/var/log/audit', '/var/tmp'],
description: 'List of mountspoints where \'noexec\' mount option shoud be set'
description: 'List of mountpoints where \'noexec\' mount option should be set'
)
mount_suid_blocklist = input(
'mount_suid_blocklist',
value: ['/boot', '/dev', '/dev/shm', '/home', '/run', '/tmp', '/var', '/var/log', '/var/log/audit', '/var/tmp'],
description: 'List of mountpoints where \'nosuid\' mount option shoud be set'
description: 'List of mountpoints where \'nosuid\' mount option should be set'
)
mount_dev_blocklist = input(
'mount_dev_blocklist',
value: ['/boot', '/dev/shm', '/home', '/run', '/tmp', '/var', '/var/log', '/var/log/audit', '/var/tmp'],
description: 'List of mountpoints where \'nodev\' mount option shoud be set'
description: 'List of mountpoints where \'nodev\' mount option should be set'
)
control 'os-01' do
impact 1.0
title 'Trusted hosts login'
desc "hosts.equiv file is a weak implemenation of authentication. Disabling the hosts.equiv support helps to prevent users from subverting the system's normal access control mechanisms of the system."
desc "hosts.equiv file is a weak implementation of authentication. Disabling the hosts.equiv support helps to prevent users from subverting the system's normal access control mechanisms of the system."
describe file('/etc/hosts.equiv') do
it { should_not exist }
end

2
libraries/suid_blacklist.rb
View file

@ -4,7 +4,7 @@
class SUIDBlacklist < Inspec.resource(1)
name 'suid_blacklist'
desc 'The suid_blacklist resoruce returns the default suid blacklist'
desc 'The suid_blacklist resource returns the default suid blacklist'
def default
[