scottk/secureblue
1
0
Fork 0
mirror of https://github.com/optim-enterprises-bv/secureblue.git synced 2025-11-01 02:47:46 +00:00
Code Issues Packages Projects Releases Wiki Activity

feat: Add audit-secureblue check for system bluetooth and ptrace

Browse Source
This commit is contained in:
Rubiginosa
2024-10-04 13:12:22 -04:00
committed by GitHub
parent 8dc96b57ec
commit 5deb22e35b
1 changed files with 14 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
files/system/usr/share/ublue-os/just/70-secureblue.just
View File

@@ -413,6 +413,20 @@ audit-secureblue:
print_status "$SYSCTL_TEST_STRING" "$STATUS_FAILURE"
fi
SYSCTL_TEST_STRING="Ensuring bluetooth is not loaded"
if ! lsmod | cut -d " " -f 1 | grep -w "bluetooth" > /dev/null; then
print_status "$SYSCTL_TEST_STRING" "$STATUS_SUCCESS"
else
print_status "$SYSCTL_TEST_STRING" "$STATUS_FAILURE"
fi
SYSCTL_TEST_STRING="Ensuring ptrace is forbidden"
if [[ "$(cat /proc/sys/kernel/yama/ptrace_scope)" == 3 ]]; then
print_status "$SYSCTL_TEST_STRING" "$STATUS_SUCCESS"
else
print_status "$SYSCTL_TEST_STRING" "$STATUS_FAILURE"
fi
AUTHSELECT_TEST_STRING="Ensuring no authselect overrides"
if diff /usr/etc/authselect /etc/authselect --suppress-common-lines -r > /dev/null; then
print_status "$AUTHSELECT_TEST_STRING" "$STATUS_SUCCESS"