mirror of
https://github.com/docker/docker-bench-security.git
synced 2025-01-18 16:22:33 +01:00
fail=1 when Docker exec fails
Signed-off-by: Thomas Sjögren <konstruktoid@users.noreply.github.com>
This commit is contained in:
parent
d964e084fc
commit
643beee453
1 changed files with 14 additions and 1 deletions
|
@ -61,6 +61,13 @@ else
|
||||||
|
|
||||||
fail=0
|
fail=0
|
||||||
for c in $containers; do
|
for c in $containers; do
|
||||||
|
exec_check=`docker exec $c ps -el 2>/dev/null`
|
||||||
|
if [ $? -eq 255 ]; then
|
||||||
|
warn "$check_5_3"
|
||||||
|
warn " * Docker exec fails: $c"
|
||||||
|
fail=1
|
||||||
|
fi
|
||||||
|
|
||||||
processes=`docker exec $c ps -el 2>/dev/null | wc -l | awk '{print $1}'`
|
processes=`docker exec $c ps -el 2>/dev/null | wc -l | awk '{print $1}'`
|
||||||
if [ $processes -gt 5 ]; then
|
if [ $processes -gt 5 ]; then
|
||||||
# If it's the first container, fail the test
|
# If it's the first container, fail the test
|
||||||
|
@ -165,8 +172,14 @@ else
|
||||||
|
|
||||||
fail=0
|
fail=0
|
||||||
for c in $containers; do
|
for c in $containers; do
|
||||||
processes=`docker exec $c ps -el 2>/dev/null | grep sshd | wc -l | awk '{print $1}'`
|
exec_check=`docker exec $c ps -el 2>/dev/null`
|
||||||
|
if [ $? -eq 255 ]; then
|
||||||
|
warn "$check_5_7"
|
||||||
|
warn " * Docker exec failed: $c"
|
||||||
|
fail=1
|
||||||
|
fi
|
||||||
|
|
||||||
|
processes=`docker exec $c ps -el 2>/dev/null | grep sshd | wc -l | awk '{print $1}'`
|
||||||
if [ $processes -gt 1 ]; then
|
if [ $processes -gt 1 ]; then
|
||||||
# If it's the first container, fail the test
|
# If it's the first container, fail the test
|
||||||
if [ $fail -eq 0 ]; then
|
if [ $fail -eq 0 ]; then
|
||||||
|
|
Loading…
Reference in a new issue