From a4824eb50d8c035b0ec73299623aa7f4a7297f20 Mon Sep 17 00:00:00 2001 From: Tom Miller Date: Mon, 9 Apr 2018 15:32:20 -0600 Subject: [PATCH] Centos7 uses grub2 by default, add checks for proper file. --- controls/1_4_secure_boot_settings.rb | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/controls/1_4_secure_boot_settings.rb b/controls/1_4_secure_boot_settings.rb index 187fabd..167d598 100644 --- a/controls/1_4_secure_boot_settings.rb +++ b/controls/1_4_secure_boot_settings.rb @@ -26,7 +26,7 @@ tag level: 1 describe.one do - %w(/boot/grub/grub.conf /boot/grub/grub.cfg /boot/grub/menu.lst /boot/boot/grub/grub.conf /boot/boot/grub/grub.cfg /boot/boot/grub/menu.lst).each do |f| + %w(/boot/grub/grub.conf /boot/grub/grub.cfg /boot/grub/menu.lst /boot/boot/grub/grub.conf /boot/boot/grub/grub.cfg /boot/boot/grub/menu.lst /boot/grub2/grub.cfg).each do |f| describe file(f) do it { should exist } it { should_not be_readable.by 'group' } @@ -51,7 +51,7 @@ tag level: 1 describe.one do - %w(/boot/grub/grub.conf /boot/grub/grub.cfg /boot/grub/menu.lst /boot/boot/grub/grub.conf /boot/boot/grub/grub.cfg /boot/boot/grub/menu.lst).each do |f| + %w(/boot/grub/grub.conf /boot/grub/grub.cfg /boot/grub/menu.lst /boot/boot/grub/grub.conf /boot/boot/grub/grub.cfg /boot/boot/grub/menu.lst /boot/grub/grub.cfg).each do |f| describe file(f) do its(:content) { should match(/^set superusers/) } its(:content) { should match(/^password/) }