Add two additional PATH env checks for the rule 'os-04'
Nobody has claimed this yet.
Assessment
- Difficulty
- 2/5
- Estimated time
- 1-3 hours
- Newbie friendliness
- 58/100
- Issue type
- Feature
- Clarity
- Mostly clear
- Activity status
- Stale
- Tech stack
- ruby
- Domain
- operating-systems, security
Research direction
Start by locating the os-04 PATH environment-variable check in the InSpec profile and inspect how its split values are currently tested. Add coverage for the two requested conditions and verify that the applicable profile checks pass with the expected PATH validation.
Written by the indexing model from the issue text.
Description
Description
I suggest adding two checks for the rule 'os-04' for PATH environment variable:
- check that there are no spaces;
- check that there are no '..' (parent directory of the current one).
I guess it won't be superfluous.
Solution
Can be easily solved as:
...
its('split') { should_not include(' ') }
its('split') { should_not include('..') }
...
- Dominant language
- Ruby
- Stars
- 876
- Forks
- 194
- Avg merge
- 9m
- Merged PRs (30d)
- 1
Getting set up
This project ships no dev container, Dockerfile or contributing guide, so setting up is up to you: start from its README, and see our first-contribution guide for the general steps.
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from dev-sec/linux-baseline
-
enhancement
Difficulty 4/5 3-5 days Newbie friendliness 48/100
dev-sec/linux-baseline#191 · 2 comments ·
-
Difficulty 1/5 Under an hour Newbie friendliness 48/100
dev-sec/linux-baseline#173 · 6 comments ·
-
Difficulty 3/5 1-2 days Newbie friendliness 48/100
dev-sec/linux-baseline#161 · 1 comment ·
-
Difficulty 5/5 Over a week Newbie friendliness 25/100
dev-sec/linux-baseline#140 · 7 comments · 5 reactions ·
-
disable rpcbindOpen
Difficulty 4/5 3-5 days Newbie friendliness 35/100
dev-sec/linux-baseline#137 · 3 comments ·
All issues in dev-sec/linux-baseline
Similar issues
-
security
Difficulty 2/5 1-3 hours Newbie friendliness 68/100
Maintainers usually reply within 1 day
-
Difficulty 2/5 1-3 hours Newbie friendliness 84/100
grafana/pyroscope#5729 · 1 comment ·
Maintainers usually reply within 1 day
-
Difficulty 2/5 1-3 hours Newbie friendliness 65/100
rubygems/rubygems.org#6895 ·
Maintainers usually reply within 1 day
-
Difficulty 2/5 1-3 hours Newbie friendliness 78/100
samvera/hyku#3359 · 1 comment ·
Maintainers usually reply within 1 day
-
Child factories do not inherit traits from their parentPossibly taken @alassek claimed this today. Open
Difficulty 2/5 1-3 hours Newbie friendliness 76/100
rom-rb/rom-factory#99 ·