engine: Consider 'is not set' as off

a13xp0p0v · Nov 23, 2024 · 6b34070 · 6b34070
1 parent 3b65f77
commit 6b34070
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/kernel_hardening_checker/engine.py b/kernel_hardening_checker/engine.py
@@ -93,8 +93,8 @@ def check(self) -> None:
         if self.expected == 'is not off':
             if self.state == 'off':
                 self.result = 'FAIL: is off'
-            elif self.state == '0':
-                self.result = 'FAIL: is off, "0"'
+            elif self.state == '0' or self.state == 'is not set':
+                self.result = f'FAIL: is off, "{self.state}"'
             elif self.state is None:
                 self.result = 'FAIL: is off, not found'
             else:
@@ -316,7 +316,7 @@ def check(self) -> None:
                         self.result = f'FAIL: {opt.name} is not "{opt.expected}"'
                     elif opt.result == 'FAIL: is not present':
                         self.result = f'FAIL: {opt.name} is not present'
-                    elif opt.result in ('FAIL: is off', 'FAIL: is off, "0"'):
+                    elif opt.result in ('FAIL: is off', 'FAIL: is off, "0"', 'FAIL: is off, "is not set"'):
                         self.result = f'FAIL: {opt.name} is off'
                     else:
                         assert(opt.result == 'FAIL: is off, not found'), \