Alexandre Pujol
c29b4ba536
feat(profile): various security/linter improvement
...
- Ignore some rule from the linter
- Move some bin to subprofile
2025-08-15 18:03:36 +02:00
Alexandre Pujol
5c8c5029e0
tests(packer): add lxqt test image, update xfce.
2025-08-12 18:12:51 +02:00
Alexandre Pujol
aab12e6948
fix(profile): dockerd can be installed in both bin or sbin depending of the package source.
2025-08-12 11:07:08 +02:00
Alexandre Pujol
616486d5ba
tests(check): add a check to ensure all udev/data access are documented.
2025-08-11 16:18:58 +02:00
Alexandre Pujol
caee95ff9e
fix(test): checks.sh: allow empty disabled array.
2025-08-11 11:18:21 +02:00
Alexandre Pujol
a724af9ded
tests: improve check.sh
2025-08-10 18:24:29 +02:00
Alexandre Pujol
1b939eaa6f
feat(profile): add more test for lspci.
2025-08-04 13:05:48 +02:00
Alexandre Pujol
2a249cfe34
tests(check): more linting.
2025-08-04 13:05:20 +02:00
Alexandre Pujol
af1904118d
fix(tests): ignore some failed command.
2025-08-04 12:47:01 +02:00
Alexandre Pujol
540cbc1ae9
fix(tests): ignore some failed command.
2025-08-04 12:47:01 +02:00
Alexandre Pujol
1d3b58f15c
tests(check): enable and enfore more checks.
2025-08-04 12:47:01 +02:00
Alexandre Pujol
c0b43c86b6
tests(check): add support for blocl ignore, handle inline comments.
2025-08-04 12:47:01 +02:00
Alexandre Pujol
78c41305fa
tests(check): look for missing tunables.
2025-08-04 12:47:01 +02:00
Alexandre Pujol
41fc182860
fix(test): minor integration tests fixes.
2025-08-04 12:47:01 +02:00
Alexandre Pujol
cd15178c81
tests(check): globally ignore check in commented lines.
2025-08-04 12:47:01 +02:00
Alexandre Pujol
7d2229cd05
build: fully replace make by just.
2025-08-04 12:47:01 +02:00
Alexandre Pujol
18212c9ff7
tests: re-enable apt tests.
2025-08-04 12:47:01 +02:00
Alexandre Pujol
8f7e373f62
fix: update-alternatives is **not** installed in sbin.
2025-08-04 12:47:01 +02:00
Alexandre Pujol
ef9b93b866
tests(check): enable more linter rule.
2025-08-04 12:47:01 +02:00
Alexandre Pujol
b2910ae593
tests(check): add support for '#aa:lint ignore' inline directive to disable linting.
2025-08-04 12:47:01 +02:00
Alexandre Pujol
d579b33011
tests: add a few integration tests.
2025-08-04 12:47:01 +02:00
Alexandre Pujol
0c2385fef9
tests: update tests dependencies.
2025-08-04 12:47:01 +02:00
Alexandre Pujol
4f265c6d58
feat(profile): add lsns.
2025-08-04 12:47:01 +02:00
Alexandre Pujol
8b03cff0cf
feat(profile): add lslogins.
2025-08-04 12:47:01 +02:00
Alexandre Pujol
926a6fdcb9
feat(profile): add lslocks
2025-08-04 12:47:01 +02:00
Alexandre Pujol
f516e1140a
feat(profile): add lsfd
2025-08-04 12:47:01 +02:00
Alexandre Pujol
ed06dac702
feat(profile): add lsipc
2025-08-04 12:47:01 +02:00
Alexandre Pujol
e490a11c1a
feat(profile): add hwclock.
2025-07-20 14:25:41 +02:00
Alexandre Pujol
7a47914542
tests: add test file for whois.
2025-07-18 11:37:26 -06:00
Alexandre Pujol
e6939f4968
feat(profile): add pgrep.
2025-07-07 00:37:07 +02:00
Alexandre Pujol
c85ed58fa9
feat(profile): add vmstat
2025-07-07 00:30:21 +02:00
Alexandre Pujol
771dd9b589
feat(profile): add pidof
2025-07-07 00:22:26 +02:00
Alexandre Pujol
6b5fad404b
feat(profile): add free
2025-07-07 00:19:35 +02:00
Alexandre Pujol
f443c71c7b
tests: allow empty abstractions directory.
2025-06-21 21:05:53 +02:00
Alexandre Pujol
24a9da865f
chore: update sbin.list
2025-06-21 20:05:47 +02:00
Alexandre Pujol
3ffff07f3f
tests: enforce abstractions test.
2025-06-20 00:00:48 +02:00
Alexandre Pujol
033a7475e0
tests: enforce equivalent tests.
2025-06-19 23:35:13 +02:00
Alexandre Pujol
0e4cc45a5b
tests: simplify sbin check.
2025-06-19 20:03:53 +02:00
Alexandre Pujol
a4737546f7
tests: update sbin.list
2025-06-10 23:58:24 +02:00
Alexandre Pujol
edcbaa1b94
fix: add gpartedbin back to sbin.list.
2025-06-10 23:01:24 +02:00
Alexandre Pujol
f0355f36b9
tests: show error line in sbin check.
2025-06-05 00:36:30 +02:00
Alexandre Pujol
6ed873aad3
feat(profile): update sbin list and ensure the profiles use the good variable (sbin or bin).
2025-06-05 00:35:43 +02:00
Alexandre Pujol
c8f2a435f8
tests: remove symbolic link from sbin.
2025-06-02 23:59:41 +02:00
Alexandre Pujol
f579940ae7
test: add some security checks.
2025-06-02 20:41:20 +02:00
Alexandre Pujol
fff0df39ba
tests: add more check for sbin path
...
Also look for path that should not use sbin.
2025-06-01 23:59:14 +02:00
Alexandre Pujol
71a473712c
tests: rewrite and expand the profile check to more files.
...
Rewrite: Speed up the checking by not using grep anymore and only using bash, also make it parallel
Revisit the way result are shown.
Expand: Also scan for mapping files and abstaction completion. Adapt the scan accordingly.
2025-06-01 23:58:02 +02:00
Alexandre Pujol
e771ef77b8
tests(packer): update base images content.
2025-05-30 00:18:39 +02:00
Alexandre Pujol
89a1714610
fix(profile): a few linting fixes.
2025-05-30 00:14:54 +02:00
Alexandre Pujol
4e4f8d8a0e
build: update sbin.list
2025-05-26 00:47:47 +02:00
Alexandre Pujol
8755c4a1b7
fix(profile): remove sbin on some program path
...
Debian and opensuse do not install the same programs under /usr/sbin.
This will have to be tracked by distribution.
For now, sbin.list follows debian install.
2025-05-26 00:47:46 +02:00
