From b74c83e7e7a0be4f33c27b194d2dfc6075cba85e Mon Sep 17 00:00:00 2001 From: mockturtl Date: Tue, 28 Mar 2017 13:24:22 -0400 Subject: [PATCH] BindsToAllNetworkInterfaces should check TLS also --- rules/bind.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/rules/bind.go b/rules/bind.go index c2fa781..ba91ba6 100644 --- a/rules/bind.go +++ b/rules/bind.go @@ -41,7 +41,7 @@ func (r *BindsToAllNetworkInterfaces) Match(n ast.Node, c *gas.Context) (gi *gas func NewBindsToAllNetworkInterfaces(conf map[string]interface{}) (gas.Rule, []ast.Node) { return &BindsToAllNetworkInterfaces{ - call: regexp.MustCompile(`^net\.Listen$`), + call: regexp.MustCompile(`^(net|tls)\.Listen$`), pattern: regexp.MustCompile(`^(0.0.0.0|:).*$`), MetaData: gas.MetaData{ Severity: gas.Medium,