tyler.durden
/
harbian-audit
mirror of https://github.com/hardenedlinux/harbian-audit.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Modify function for dpkg verity

This commit is contained in:
samson 2018-12-03 00:47:10 +08:00
parent dc19e48928
commit e6f204b7f0
4 changed files with 5 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
bin/hardening/12.10_find_suid_files.sh
View File

@ -34,7 +34,7 @@ audit () {
# This function will be called if the script status is on enabled mode
apply () {
info "Removing suid on valid binary may seriously harm your system, report only here"
warn "Removing suid on valid binary may seriously harm your system, report only here, need a manual fix."
}
# This function will create the config file for this check with default values

2
bin/hardening/13.6_sanitize_root_path.sh
View File

@ -62,7 +62,7 @@ audit () {
# This function will be called if the script status is on enabled mode
apply () {
info "Editing items from PATH may seriously harm your system, report only here"
warn "Editing items from PATH may seriously harm your system, report only here, need a manual fix."
}
# This function will check config parameters required

BIN
lib/.utils.sh.swp Normal file
View File

Binary file not shown.

4
lib/utils.sh
View File

@ -467,8 +467,10 @@ is_debian_9()
verify_integrity_all_packages()
{
if [ $($SUDO_CMD dpkg -V | wc -l) -gt 0 ]; then
dpkg -V > /dev/shm/dpkg_verify_ret
if [ $(cat /dev/shm/dpkg_verify_ret | wc -l) -gt 0 ]; then
debug "Verify integrity all packages is fail"
cat /dev/shm/dpkg_verify_ret
FNRET=1
else
debug "Verify integrity all packages is OK"