tyler.durden/lynis
1
0
Fork 0
mirror of https://github.com/CISOfy/lynis.git synced 2025-07-17 02:44:30 +02:00
Code Issues Packages Projects Releases Wiki Activity

Changed file permissions check to allow non-privileged mode

Browse Source
This commit is contained in:
mboelen 2014-09-08 14:55:37 +02:00
parent d983b6ba48
commit cf9a44cd41
1 changed files with 16 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
include/functions
View File

@ -866,6 +866,7 @@
PERMS_OK=0 PERMS_OK=0
logtext "Checking permissions of $1" logtext "Checking permissions of $1"
if [ $# -eq 1 ]; then if [ $# -eq 1 ]; then
IS_PARAMETERS_FILE=`echo $1 | grep "/parameters"`
# Check file permissions # Check file permissions
if [ ! -f "$1" ]; then if [ ! -f "$1" ]; then
logtext "Fatal error: file $1 does not exist. Quitting." logtext "Fatal error: file $1 does not exist. Quitting."
@ -876,17 +877,26 @@
# Owner permissions # Owner permissions
OWNER=`echo ${PERMS} | awk -F" " '{ print $3 }'` OWNER=`echo ${PERMS} | awk -F" " '{ print $3 }'`
OWNERID=`ls -n $1 | awk -F" " '{ print $3 }'` OWNERID=`ls -n $1 | awk -F" " '{ print $3 }'`
if [ ${PENTESTINGMODE} -eq 0 -a "${IS_PARAMETERS_FILE}" = "" ]; then
if [ ! "${OWNER}" = "root" -a ! "${OWNERID}" = "0" ]; then if [ ! "${OWNER}" = "root" -a ! "${OWNERID}" = "0" ]; then
echo "Fatal error: file $1 should be owned by user 'root' or similar (found: ${OWNER})." echo "Fatal error: file $1 should be owned by user 'root' or similar (found: ${OWNER})."
ExitFatal ExitFatal
fi fi
else
logtext "Note: Owner permissions of file $1 to be expected similar as the UID executing the process"
fi
# Group permissions # Group permissions
GROUP=`echo ${PERMS} | awk -F" " '{ print $4 }'` GROUP=`echo ${PERMS} | awk -F" " '{ print $4 }'`
GROUPID=`ls -n $1 | awk -F" " '{ print $4 }'` GROUPID=`ls -n $1 | awk -F" " '{ print $4 }'`
if [ ${PENTESTINGMODE} -eq 0 -a "${IS_PARAMETERS_FILE}" = "" ]; then
if [ ! "${GROUP}" = "root" -a ! "${GROUP}" = "wheel" -a ! "${GROUPID}" = "0" ]; then if [ ! "${GROUP}" = "root" -a ! "${GROUP}" = "wheel" -a ! "${GROUPID}" = "0" ]; then
echo "Fatal error: group owner of directory $1 should be owned by root user, wheel or similar (found: ${GROUP})." echo "Fatal error: group owner of directory $1 should be owned by root user, wheel or similar (found: ${GROUP})."
ExitFatal ExitFatal
fi fi
else
logtext "Note: Group permissions of file $1 to be expected similar as the UID executing the process"
fi
# Other permissions # Other permissions
OTHER_PERMS=`echo ${PERMS} | cut -c8-10` OTHER_PERMS=`echo ${PERMS} | cut -c8-10`
if [ ! "${OTHER_PERMS}" = "---" ]; then if [ ! "${OTHER_PERMS}" = "---" ]; then