diff --git a/controls/3_5_firewall_configuration.rb b/controls/3_5_firewall_configuration.rb index 54d5fd0..9197697 100644 --- a/controls/3_5_firewall_configuration.rb +++ b/controls/3_5_firewall_configuration.rb @@ -117,7 +117,7 @@ tag cis: 'distribution-independent-linux:3.5.1.4' tag level: 1 - port.where { address !~ /^(127\.0\.0\.1|::1)$/ }.ports.each do |port| + port.where { address !~ /^(127\.|::1)$/ }.ports.each do |port| describe "Firewall rule should exist for port #{port}" do subject { ip6tables.retrieve_rules.any? { |s| s =~ /\s--(dport|dports) #{port}\s/ } } it { should be true } @@ -214,7 +214,7 @@ tag cis: 'distribution-independent-linux:3.5.2.4' tag level: 1 - port.where { address !~ /^(127\.0\.0\.1|::1)$/ }.ports.each do |port| + port.where { address !~ /^(127\.|::1)$/ }.ports.each do |port| describe "Firewall rule should exist for port #{port}" do subject { iptables.retrieve_rules.any? { |s| s =~ /\s--(dport|dports) #{port}\s/ } } it { should be true }