Fix case-sensitive regex in auditd_audispd_configure_remote_server

ComplianceAsCode · Apr 19, 2024 · 3984e2e · 3984e2e
1 parent e76fcec
commit 3984e2e
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 4 deletions.
diff --git a/...ing/configure_auditd_data_retention/auditd_audispd_configure_remote_server/bash/shared.sh b/...ing/configure_auditd_data_retention/auditd_audispd_configure_remote_server/bash/shared.sh
@@ -7,7 +7,7 @@ AUDITCONFIG={{{ audisp_conf_path }}}/audisp-remote.conf
 {{% if 'ubuntu' in product %}}
 AUREMOTECONFIG={{{ audisp_conf_path }}}/plugins.d/au-remote.conf
 
-{{{ bash_replace_or_append("$AUREMOTECONFIG", '^active', 'yes') }}}
+{{{ set_config_file("$AUREMOTECONFIG", 'active', 'yes', insensitive="true", separator=" = ", separator_regex="\s*=\s*") }}}
 {{% endif %}}
 
-{{{ bash_replace_or_append("$AUDITCONFIG", '^remote_server', "$var_audispd_remote_server") }}}
+{{{ set_config_file("$AUDITCONFIG", 'remote_server', "$var_audispd_remote_server", insensitive="true", separator=" = ", separator_regex="\s*=\s*") }}}
diff --git a/...ng/configure_auditd_data_retention/auditd_audispd_configure_remote_server/oval/shared.xml b/...ng/configure_auditd_data_retention/auditd_audispd_configure_remote_server/oval/shared.xml
@@ -20,7 +20,7 @@
     <ind:filepath>{{{ audisp_config_file_path }}}</ind:filepath>
     <!-- Allow only space (exactly) as delimiter -->
     <!-- Require at least one space before and after the equal sign -->
-    <ind:pattern operation="pattern match">^[ ]*remote_server[ ]+=[ ]+(\S+)[ ]*$</ind:pattern>
+    <ind:pattern operation="pattern match">^[ ]*(?i)remote_server(?-i)[ ]+=[ ]+(\S+)[ ]*$</ind:pattern>
     <ind:instance datatype="int">1</ind:instance>
   </ind:textfilecontent54_object>
 
@@ -37,7 +37,7 @@
 
   <ind:textfilecontent54_object id="object_au_remote_config" version="1">
     <ind:filepath>{{{ auremoteconfig }}}</ind:filepath>
-    <ind:pattern operation="pattern match">^[ ]*active[ ]+=[ ]+(yes)[ ]*$</ind:pattern>
+    <ind:pattern operation="pattern match">^[ ]*(?i)active(?-i)[ ]+=[ ]+(yes)[ ]*$</ind:pattern>
     <ind:instance datatype="int">1</ind:instance>
   </ind:textfilecontent54_object>
   {{% endif %}}