GuillaumeHemmen/docker-bench-security
1
0
Fork 0
mirror of https://github.com/docker/docker-bench-security.git synced 2025-01-18 16:22:33 +01:00
Code Issues Projects Releases Packages Wiki Activity

fix socket check

Browse source 
Signed-off-by: Thomas Sjögren <konstruktoid@users.noreply.github.com>
This commit is contained in:
Thomas Sjögren 2021-07-12 15:22:12 +02:00
parent 2024e16f09
commit 683c5a92b5
1 changed files with 2 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
tests/3_docker_daemon_configuration_files.sh
View file

@ -600,7 +600,7 @@ check_3_23() {
starttestjson "$id" "$desc" starttestjson "$id" "$desc"
file="/run/containerd/containerd.sock" file="/run/containerd/containerd.sock"
if [ -f "$file" ]; then if [ -S "$file" ]; then
if [ "$(stat -c %U:%G $file)" = 'root:root' ]; then if [ "$(stat -c %U:%G $file)" = 'root:root' ]; then
pass -s "$check" pass -s "$check"
logcheckresult "PASS" logcheckresult "PASS"
@ -625,7 +625,7 @@ check_3_24() {
starttestjson "$id" "$desc" starttestjson "$id" "$desc"
file="/run/containerd/containerd.sock" file="/run/containerd/containerd.sock"
if [ -f "$file" ]; then if [ -S "$file" ]; then
if [ "$(stat -c %a $file)" -le 660 ]; then if [ "$(stat -c %a $file)" -le 660 ]; then
pass -s "$check" pass -s "$check"
logcheckresult "PASS" logcheckresult "PASS"