Merge pull request #12994 from jan-cerny/broken_grep

Fix grep commands
ComplianceAsCode · Feb 11, 2025 · fdbcf30 · fdbcf30
2 parents bc0bfa6 + 000366c
commit fdbcf30
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/...ware/integrity/crypto/harden_sshd_ciphers_opensshserver_conf_crypto_policy/bash/shared.sh b/...ware/integrity/crypto/harden_sshd_ciphers_opensshserver_conf_crypto_policy/bash/shared.sh
@@ -11,7 +11,7 @@ test -f ${CONF_FILE} || touch ${CONF_FILE}
 # Ensure CRYPTO_POLICY is not commented out
 sed -i 's/#CRYPTO_POLICY=/CRYPTO_POLICY=/' ${CONF_FILE}
 
-if ! grep -q "$correct_value" "$CONF_FILE"; then
+if ! grep -q "\\$correct_value" "$CONF_FILE"; then
     # We need to get the existing value, using PCRE to maintain same regex
     existing_value=$(grep -Po '(-oCiphers=\S+)' ${CONF_FILE})
 

diff --git a/...oftware/integrity/crypto/harden_sshd_macs_opensshserver_conf_crypto_policy/bash/shared.sh b/...oftware/integrity/crypto/harden_sshd_macs_opensshserver_conf_crypto_policy/bash/shared.sh
@@ -11,7 +11,7 @@ test -f ${CONF_FILE} || touch ${CONF_FILE}
 # Ensure CRYPTO_POLICY is not commented out
 sed -i 's/#CRYPTO_POLICY=/CRYPTO_POLICY=/' ${CONF_FILE}
 
-if ! grep -q "$correct_value" "$CONF_FILE"; then
+if ! grep -q "\\$correct_value" "$CONF_FILE"; then
     # We need to get the existing value, using PCRE to maintain same regex
     existing_value=$(grep -Po '(-oMACs=\S+)' ${CONF_FILE})