tyler.durden/lynis
1
0
Fork 0
mirror of https://github.com/CISOfy/lynis.git synced 2025-07-27 07:44:14 +02:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #76 from bodine/secure-pidfile

Browse Source 
PIDfile fixes
This commit is contained in:
Michael Boelen 2015-09-13 21:23:23 +02:00
commit b8ee6ff24c
2 changed files with 24 additions and 17 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
CONTRIBUTORS
View File

@ -24,6 +24,7 @@
------------------------------------------ ------------------------------------------
Alexander Lobodzinski Alexander Lobodzinski
Bodine Wilson
Brian Ginsbach Brian Ginsbach
C.J. Adams-Collier, US C.J. Adams-Collier, US
Charlie Heselton, US Charlie Heselton, US

40
lynis
View File

@ -290,8 +290,22 @@
# #
################################################################################# #################################################################################
# #
# Check if there is already a PID file (incorrect termination of previous instance)
if [ -f lynis.pid -o -f /var/run/lynis.pid ]; then # Decide where to write our PID file. For unprivileged users this will be in their home directory, or /tmp if their
# home directory isn't set. For root it will be /var/run, or the current workign directory if /var/run doesn't exist.
MYHOMEDIR=`echo ~`
if [ "${MYHOMEDIR}" = "" ]; then MYHOMEDIR="/tmp"; fi
if [ ${PRIVILEGED} -eq 0 ]; then
PIDFILE="${MYHOMEDIR}/lynis.pid"
elif [ -d /var/run ]; then
PIDFILE="/var/run/lynis.pid"
else
PIDFILE="./lynis.pid"
fi
# Check if there is already a PID file in any of the locations (incorrect termination of previous instance)
if [ -f "${MYHOMEDIR}/lynis.pid" -o -f "./lynis.pid" -o -f "/var/run/lynis.pid" ]; then
echo "" echo ""
echo " ${WARNING}Warning${NORMAL}: ${WHITE}PID file exists, probably another Lynis process is running.${NORMAL}" echo " ${WARNING}Warning${NORMAL}: ${WHITE}PID file exists, probably another Lynis process is running.${NORMAL}"
echo " ------------------------------------------------------------------------------" echo " ------------------------------------------------------------------------------"
@ -305,26 +319,18 @@
echo " ${YELLOW}Note: ${WHITE}Cancelling the program can leave temporary files behind${NORMAL}" echo " ${YELLOW}Note: ${WHITE}Cancelling the program can leave temporary files behind${NORMAL}"
echo "" echo ""
wait_for_keypress wait_for_keypress
# Deleting temporary files # Deleting any stale PID files that might exist.
# Note: Display function does not work yet at this point # Note: Display function does not work yet at this point
if [ -f lynis.pid ]; then rm -f lynis.pid; fi if [ -f "${MYHOMEDIR}/lynis.pid" ]; then rm -f "${MYHOMEDIR}/lynis.pid"; fi
if [ -f /var/run/lynis.pid ]; then rm -f /var/run/lynis.pid; fi if [ -f "./lynis.pid" ]; then rm -f "./lynis.pid"; fi
if [ -f "/var/run/lynis.pid" ]; then rm -f "/var/run/lynis.pid"; fi
fi fi
# Create new PID file (use work directory if /var/run is not available) # Create new PID file writable only by owner. Decrease the window for symlink attacks.
if [ ${PRIVILEGED} -eq 0 ]; then (umask 077; rm -f ${PIDFILE} ; touch ${PIDFILE})
# Store it in home directory of user
MYHOMEDIR=`echo ~`
if [ "${MYHOMEDIR}" = "" ]; then HOMEDIR="/tmp"; fi
PIDFILE="${MYHOMEDIR}/lynis.pid"
elif [ -d /var/run ]; then
PIDFILE="/var/run/lynis.pid"
else
PIDFILE="lynis.pid"
fi
OURPID=`echo $$` OURPID=`echo $$`
echo ${OURPID} > ${PIDFILE} echo ${OURPID} > ${PIDFILE}
chmod 600 ${PIDFILE}
# #
################################################################################# #################################################################################
# #