Exit with exit code 0 by default, unless error-on-warnings is being used

include/consts

@@ -76,6 +76,7 @@ unset LANG
     DB2_RUNNING=0
     DISCOVERED_BINARIES=""
     DOCKER_DAEMON_RUNNING=0
+    ERROR_ON_WARNINGS=0
     FILEVALUE=""
     FIND=""
     FIREWALL_ACTIVE=0

include/profiles

@@ -99,6 +99,13 @@
                     fi
                 ;;
 
+                # Show non-zero exit code when errors are found
+                error-on-warnings)
+                    if [ "${VALUE}" = "yes" -o "${VALUE}" = "true" -o ${VALUE} = "1" ]; then
+                        ERROR_ON_WARNINGS=1
+                    fi
+                ;;
+
                 # Skip FreeBSD port audit
                 freebsd_skip_portaudit)
                     LogText "Option set: Skip FreeBSD portaudit"

lynis

@@ -986,7 +986,12 @@ ${NORMAL}
 
     # Clean exit (Delete PID file)
     if [ ${TOTAL_WARNINGS} -gt 0 ]; then
-        ExitCustom 78
+        # Use exit code 78 if we found any warnings (and enabled)
+        if [ ${ERROR_ON_WARNINGS} -eq 1 ]; then
+            ExitCustom 78
+          else
+            ExitClean
+        fi
       else
         ExitClean
     fi