aquasecurity / aquasecurity/linux-bench
Test 5.2.6 False Negative
Open
- Dominant language
- Go
- Stars
- 188
- Forks
- 65
- PR merge metrics
- No merged PRs in 30d
Description
When running test 5.2.6 audit command:
"sshd -T | grep x11forwarding'"
I get as an output:
"x11forwarding no"
and the expected output is:
"X11Forwarding no"
In the summary, it is shown as failed even though the outputs are similar.
Contributor guide
Research direction
Locate the implementation of audit test 5.2.6 and the comparison used for the sshd output, then reproduce the case where the command returns lowercase x11forwarding. Confirm that equivalent capitalization no longer produces a failed summary, and run the relevant audit tests to verify the result.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- go, linux
- Domain
- operating-systems, security
- Issue type
- Bug
- Difficulty
- 2/5
- Estimated time
- 1-3 hours
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 45/100