CIS Level 1 Audit Test

1.download.sh

curl -L 'https://gist.github.com/ibejohn818/1c93f895e0247211954266569ea862eb/download' -o gist.zip &&\
unzip gist.zip -d ./ &&\
cp -r  1c93f895e0247211954266569ea862eb-master/* . &&\
make test &&\
rm -rf *;

Makefile

install_env:
	virtualenv -ppython3 env; \
	source env/bin/activate; \
	pip install -r requirements.txt;
        
venv:
	source env/bin/activate;

test: install_env
	source env/bin/activate; \
	pytest test_cis_level1.py -vv -s

requirements.txt

pytest
pytest-runner

test_cis_level1.py

import pytest
import subprocess
import shlex

def test_filesystems_disabled():
  systems = [
    'cramfs',
    'freevxfs',
    'jffs2',
    'hfs',
    'hfsplus',
    'squashfs',
    'udf',
    'vfat']
  
  for fs in systems:
    cmd = "modprobe -n -v {}".format(fs)
    print("TESTING FS: {}".format(fs))
    result = subprocess.check_output(cmd, shell=True).strip()
    assert b'install /bin/true' in result