aeacus
aeacus copied to clipboard
Add ability to score with more advanced boolean logic
We need to be able to score one finding using multiple sources. To be able to do this a more advanced logic than just Pass/Pass Override/Fail is necessary. For example, to be able to score PAM configs there could be a file that exists in the directory that isn't parsed, so directory contains isn't sufficient, but password management could be handled by several different files. So you'd need to test if a file exists and the file contains a certain string three or four times in a single scored point.
So for 3 different files in the pam directory you'd need (A & B) or (C & D) or (D & E) would be sufficient for scoring points.