OS X Application firewall not detected about lynis

[mboelen]

Hi Tim,

In that case the best option is to make it a prereq for the test, like many tests have. Adding the path to binary search is not preferred in this case :)
So if file /usr/libexec/ApplicationFirewall/socketfilterfw exists, prereq is met and test will be executed.

Currently don't have a Mac running here. So if you can share the output, we can create the test very easily.

[mboelen]

Hi Tim, can you share your output?

[tas50]

what output exactly do you want?

[mboelen]

Output of the command you suggested: /usr/libexec/ApplicationFirewall/socketfilterfw --getglobalstate
(or any parameter that might be useful)

Thanks!

[tas50]

bash-3.2# /usr/libexec/ApplicationFirewall/socketfilterfw --getglobalstate
Firewall is enabled. (State = 1)

[mboelen]

First patch is applied to detect this. If you have the chance, please test and let us know the status of FIRE-4532.

[tas50]

Application firewall is now supported. I'll open another ticket for pf not showing up though. Thanks for getting this fixed.

[tas50]

Scratch that part about PF. It's doing the right thing after all.