Test 5830 fails for stock Slackware kernels about lynis

[mboelen]

Thanks for reporting this. A patch have been added to better determine versions. Can you have a look to see if it now detected your running version?

[denydias]

Hi, @mboelen. Thanks for the fix.

I'm in the middle of very busy days to test this right now. I'm going to test this out in the end of the next week if you don't mind. I'll come back here to report the results. You may close the issue if you want to get rid of it.

[conraid]

Hi, in commit there is a error
... sed 's/vmlinuz-//' sed 's/generic.//' ...
without pipe procude a error,
... sed 's/vmlinuz-//' | sed 's/generic.//' ...
it's ok

[mboelen]

Thanks, changed and committed new version. Working better now?

[conraid]

this is the result:

Whithout patch

[09:58:52] Performing test ID KRNL-5830 (Checking if system is running on the latest kernel)
[09:58:52] Test: Checking presence /var/run/reboot-required.pkgs
[09:58:52] Result: file /var/run/reboot-required.pkgs not found
[09:58:52] Result: /boot exists, performing more tests from here
[09:58:52] Result: found symlink of /boot/vmlinuz, skipping file
[09:58:52] Result: using 4.0.4 as my kernel version (stripped)
[09:58:52] Result: Found huge
[09:58:52] Result: Found vmlinuz
[09:58:52] Result: Found huge.3.18.11
[09:58:52] Result: Found 3.17.8
[09:58:52] Result: Found 3.19.4
[09:58:52] Result: Found 4.0.3
[09:58:52] Result: Found 4.0.4 (= our kernel)
[09:58:52] Result: we found our kernel on disk as last entry, so seems to be up-to-date
[09:58:52] Hardening: assigned 5 hardening points (max for this item: 5), current: 5, total: 5

With patch

[10:07:42] Performing test ID KRNL-5830 (Checking if system is running on the latest kernel)
[10:07:43] Test: Checking presence /var/run/reboot-required.pkgs
[10:07:43] Result: file /var/run/reboot-required.pkgs not found
[10:07:43] Result: /boot exists, performing more tests from here
[10:07:43] Result: found symlink of /boot/vmlinuz, skipping file
[10:07:43] Result: using 4.0.4 as my kernel version (stripped)
[10:07:43] Result: Found huge
[10:07:43] Result: Found vmlinuz
[10:07:43] Result: Found 3.17.8
[10:07:43] Result: Found 3.18.11
[10:07:43] Result: Found 3.19.4
[10:07:43] Result: Found 4.0.3
[10:07:43] Result: Found 4.0.4 (= our kernel)
[10:07:43] Result: we found our kernel on disk as last entry, so seems to be up-to-date
[10:07:43] Hardening: assigned 5 hardening points (max for this item: 5), current: 5, total: 5

And kernel in my pc are:

lrwxrwxrwx 1 root root      20 apr 22 11:33 vmlinuz -> vmlinuz-huge-3.18.11
-rw-r--r-- 1 root root 3671952 feb 13 15:52 vmlinuz-3.17.8-cf
-rw-r--r-- 1 root root 3751776 apr 14 10:36 vmlinuz-3.19.4-cf
-rw-r--r-- 1 root root 4221616 mag 15 13:25 vmlinuz-4.0.3-cf
-rw-r--r-- 1 root root 4221872 mag 18 14:15 vmlinuz-4.0.4-cf
lrwxrwxrwx 1 root root      20 apr 22 11:33 vmlinuz-huge -> vmlinuz-huge-3.18.11
-rw-r--r-- 1 root root 7144496 apr  7 20:10 vmlinuz-huge-3.18.11

[denydias]

Hi, @mboelen. I'm sorry for the delay to reply. Busy days, got sick...

Testing against 785ac74 commit works for me. The log now says:

[03:59:48] Performing test ID KRNL-5830 (Checking if system is running on the latest kernel)
[03:59:48] Test: Checking presence /var/run/reboot-required.pkgs
[03:59:48] Result: file /var/run/reboot-required.pkgs not found
[03:59:48] Result: /boot exists, performing more tests from here
[03:59:48] Result: found symlink of /boot/vmlinuz, skipping file
[03:59:48] Result: using 3.18.11 as my kernel version (stripped)
[03:59:48] Result: Found generic
[03:59:48] Result: Found huge
[03:59:48] Result: Found vmlinuz
[03:59:48] Result: Found 3.18.11 (= our kernel)
[03:59:48] Result: Found 3.18.11 (= our kernel)
[03:59:48] Result: we found our kernel on disk as last entry, so seems to be up-to-date
[03:59:48] Hardening: assigned 5 hardening points (max for this item: 5), current: 12, total: 12

I think this one is a closed deal. Thanks to you and @conraid for the patch revision.

[mboelen]

Thanks for confirmation, closing issue.