kernel_hardening module can't be used to check value containing whitespace

[tlaguz]

Describe the bug kernel.printk takes four digits as a value. sysctl -a returns them separated by tab. This tabulation can't be expressed in profile. Tab between digits and \t trigger Fatal error: unexpected characters in profile. Stopping execution (security measure). character gets replaced by -space- string.

Version

• Distribution Debian 11
• Lynis version 3.0.6

Expected behavior Tabulation in kernel.printk expected value should be possible to express as config-data=sysctl rule.

[mboelen]

Thanks for reporting.

• Did you try what happens if you just use numbers without any tabs in the profile?
• Is this the only key for you that uses a tab?