aquasecurity / aquasecurity/linux-bench

Test 5.2.6 False Negative

Open
#96 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Go
Stars
188
Forks
65
PR merge metrics
No merged PRs in 30d

Description

When running test 5.2.6 audit command:
"sshd -T | grep x11forwarding'"

I get as an output:
"x11forwarding no"

and the expected output is:
"X11Forwarding no"

In the summary, it is shown as failed even though the outputs are similar.

Contributor guide

Open the contributing guide

Research direction

Locate the implementation of audit test 5.2.6 and the comparison used for the sshd output, then reproduce the case where the command returns lowercase x11forwarding. Confirm that equivalent capitalization no longer produces a failed summary, and run the relevant audit tests to verify the result.

Written by the indexing model from the issue text.

Assessment

Tech stack
go, linux
Domain
operating-systems, security
Issue type
Bug
Difficulty
2/5
Estimated time
1-3 hours
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
45/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.