Cybersecurity-Projects/PROJECTS/beginner/linux-cis-hardening-auditor/tests/test_03_network.sh

99 lines
2.5 KiB
Bash
Executable File

#!/usr/bin/env bash
# ©AngelaMos | 2026
# test_03_network.sh
test_3_1_1_pass() {
CURRENT_TEST="test_3_1_1_pass"
setup_test "${PROJECT_DIR}/testdata/fixtures"
check_3_1_1
assert_status "3.1.1" "PASS"
assert_evidence_contains "3.1.1" "IP forwarding is disabled"
}
test_3_1_1_fail() {
CURRENT_TEST="test_3_1_1_fail"
setup_test "${PROJECT_DIR}/testdata/fixtures_fail"
check_3_1_1
assert_status "3.1.1" "FAIL"
assert_evidence_contains "3.1.1" "expected 0"
}
test_3_2_1_pass() {
CURRENT_TEST="test_3_2_1_pass"
setup_test "${PROJECT_DIR}/testdata/fixtures"
check_3_2_1
assert_status "3.2.1" "PASS"
assert_evidence_contains "3.2.1" "Suspicious packets are logged"
}
test_3_2_1_fail() {
CURRENT_TEST="test_3_2_1_fail"
setup_test "${PROJECT_DIR}/testdata/fixtures_fail"
check_3_2_1
assert_status "3.2.1" "FAIL"
assert_evidence_contains "3.2.1" "expected 1"
}
test_3_2_5_pass() {
CURRENT_TEST="test_3_2_5_pass"
setup_test "${PROJECT_DIR}/testdata/fixtures"
check_3_2_5
assert_status "3.2.5" "PASS"
assert_evidence_contains "3.2.5" "TCP SYN Cookies enabled"
}
test_3_2_5_fail() {
CURRENT_TEST="test_3_2_5_fail"
setup_test "${PROJECT_DIR}/testdata/fixtures_fail"
check_3_2_5
assert_status "3.2.5" "FAIL"
assert_evidence_contains "3.2.5" "expected 1"
}
test_3_4_2_pass() {
CURRENT_TEST="test_3_4_2_pass"
setup_test "${PROJECT_DIR}/testdata/fixtures"
check_3_4_2
assert_status "3.4.2" "PASS"
assert_evidence_contains "3.4.2" "dccp"
}
test_3_4_2_fail() {
CURRENT_TEST="test_3_4_2_fail"
setup_test "${PROJECT_DIR}/testdata/fixtures_fail"
check_3_4_2
assert_status "3.4.2" "FAIL"
assert_evidence_contains "3.4.2" "dccp"
}
test_3_1_2_pass() {
CURRENT_TEST="test_3_1_2_pass"
setup_test "${PROJECT_DIR}/testdata/fixtures"
check_3_1_2
assert_status "3.1.2" "PASS"
assert_evidence_contains "3.1.2" "redirect sending disabled"
}
test_3_1_2_fail() {
CURRENT_TEST="test_3_1_2_fail"
setup_test "${PROJECT_DIR}/testdata/fixtures_fail"
check_3_1_2
assert_status "3.1.2" "FAIL"
}
test_3_2_6_pass() {
CURRENT_TEST="test_3_2_6_pass"
setup_test "${PROJECT_DIR}/testdata/fixtures"
check_3_2_6
assert_status "3.2.6" "PASS"
assert_evidence_contains "3.2.6" "router advertisements not accepted"
}
test_3_2_6_fail() {
CURRENT_TEST="test_3_2_6_fail"
setup_test "${PROJECT_DIR}/testdata/fixtures_fail"
check_3_2_6
assert_status "3.2.6" "FAIL"
assert_evidence_contains "3.2.6" "expected 0"
}