Skip to content

os-06: Check for SUID/ SGID blacklist control previously passing is now falling #146

@se-dsingh

Description

@se-dsingh

Describe the bug
Control os-06 to check for the SUID/SGID blacklist, which was working as of 28 Jan 2021, is today no longer working due to changes in the control source code

Expected behavior
When running the inspec control via the inspec CLI, this control was previously found to be passing on the same version of the Ubuntu build.

19:31:59      amazon-ebs.<AMI_NAME>:   ✔  os-06: Check for SUID/ SGID blacklist
19:31:59      amazon-ebs.<AMI_NAME>:      ✔  suid_check diff should be empty

Actual behavior
Output seen now:

12:48:33      amazon-ebs.<AMI_NAME>:   ×  os-06: Check for SUID/ SGID blacklist
12:48:33      amazon-ebs.<AMI_NAME>:      ×  Control Source Code Error linux-baseline-master/controls/os_spec.rb:169
12:48:33      amazon-ebs.<AMI_NAME>:      wrong number of arguments (given 1, expected 0)

Example code
CLI Command to execute the profile:

inspec exec https://github.com/dev-sec/linux-baseline --backend ssh --host 127.0.0.1 --user worker --key-files /tmp/packer-provisioner-inspec.147623399.key --port 44157 --input-file /tmp/packer-provisioner-inspec.183185946.yml --no-distinct-exit --controls /os-(0[1-9]|1[0-1])(a|b)*$/ /package-(.*)$/ /sysctl-(.*)$/

OS / Environment
Ubuntu 18.04 AMD Server on AWS

Inspec Version

v4.26.4

Baseline Version

Version: 2.6.2
https://github.com/dev-sec/linux-baseline/commit/be16dbaa779fafda2ae7a5ef19e2b26abfc1dea8

Additional context
N/A

Metadata

Metadata

Assignees

Labels

No labels
No labels

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions