mirror of https://github.com/CISOfy/lynis.git
Adjusted hints to solve wrong file permissions
This commit is contained in:
parent
2ce4cf5c57
commit
9ed32c4e2f
12
lynis
12
lynis
|
@ -91,19 +91,19 @@
|
|||
ISSUE=0
|
||||
# Check permissions of include/consts file
|
||||
if [ ! "${PERMS}" = "r--------" -a ! "${PERMS}" = "rw-------" ]; then
|
||||
ISSUE=1; echo "[!] Change file permissions of ${INCLUDEDIR}/consts to 600."
|
||||
ISSUE=1; echo "[!] Change file permissions of ${INCLUDEDIR}/consts to 600."; echo " Command: chmod 600 ${INCLUDEDIR}/consts"
|
||||
fi
|
||||
# Check permissions of include/functions file
|
||||
if [ ! "${PERMS2}" = "r--------" -a ! "${PERMS2}" = "rw-------" ]; then
|
||||
ISSUE=1; echo "[!] Change file permissions of ${INCLUDEDIR}/functions to 600."
|
||||
ISSUE=1; echo "[!] Change file permissions of ${INCLUDEDIR}/functions to 600."; echo " Command: chmod 600 ${INCLUDEDIR}/functions"
|
||||
fi
|
||||
# Check if owner of both files is root user, or the same user which is running Lynis (for pentester mode)
|
||||
if [ ! "${OWNER}" = "root" -a ! "${OWNERID}" = "0" -a ! "${MYID}" = "${OWNER2ID}" ]; then
|
||||
ISSUE=1; echo "[!] Change ownership of ${INCLUDEDIR}/consts to 'root' or similar (found: ${OWNER} with UID ${OWNERID})."
|
||||
ISSUE=1; echo "[!] Change ownership of ${INCLUDEDIR}/consts to 'root' or similar (found: ${OWNER} with UID ${OWNERID})."; echo " Command: chown root:root ${INCLUDEDIR}/consts"
|
||||
fi
|
||||
# Check if owner of both files is root user, or the same user which is running Lynis (for pentester mode)
|
||||
if [ ! "${OWNER2}" = "root" -a ! "${OWNER2ID}" = "0" -a ! "${MYID}" = "${OWNER2ID}" ]; then
|
||||
ISSUE=1; echo "[!] Change ownership of ${INCLUDEDIR}/functions to 'root' or similar (found: ${OWNER2} with UID ${OWNER2ID})."
|
||||
ISSUE=1; echo "[!] Change ownership of ${INCLUDEDIR}/functions to 'root' or similar (found: ${OWNER2} with UID ${OWNER2ID})."; echo " Command: chown root:root ${INCLUDEDIR}/functions"
|
||||
fi
|
||||
|
||||
if [ ${ISSUE} -eq 0 ]; then
|
||||
|
@ -113,10 +113,6 @@
|
|||
echo ""; echo "";
|
||||
echo "[X] Security check failed: See action above to correct this issue."
|
||||
echo " Please change ownership and permissions of the related files and start Lynis again."
|
||||
echo ""
|
||||
echo "Related commands:"
|
||||
echo "chown root:root ${INCLUDEDIR}/*"
|
||||
echo "chmod 600 ${INCLUDEDIR}/*"
|
||||
echo ""; echo "";
|
||||
exit 1
|
||||
fi
|
||||
|
|
Loading…
Reference in New Issue