tyler.durden
/
lynis
mirror of https://github.com/CISOfy/lynis.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Extended permissions check for functions and consts file

This commit is contained in:
mboelen 2014-09-04 15:35:10 +02:00
parent e0be20e699
commit d43cdae34f
1 changed files with 12 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

19
lynis
View File

@ -91,22 +91,27 @@
PERMS2=`ls -l ${INCLUDEDIR}/functions | cut -c 2-10` PERMS2=`ls -l ${INCLUDEDIR}/functions | cut -c 2-10`
OWNER=`ls -l ${INCLUDEDIR}/consts | awk -F" " '{ print $3 }'` OWNER=`ls -l ${INCLUDEDIR}/consts | awk -F" " '{ print $3 }'`
OWNER2=`ls -l ${INCLUDEDIR}/functions | awk -F" " '{ print $3 }'` OWNER2=`ls -l ${INCLUDEDIR}/functions | awk -F" " '{ print $3 }'`
OWNERID=`ls -n ${INCLUDEDIR}/consts | awk -F" " '{ print $3 }'`
OWNER2ID=`ls -n ${INCLUDEDIR}/functions | awk -F" " '{ print $3 }'`
ISSUE=0 ISSUE=0
# Check permissions of include/consts file # Check permissions of include/consts file
if [ ! "${PERMS}" = "r--------" -a ! "${PERMS}" = "rw-------" ]; then if [ ! "${PERMS}" = "r--------" -a ! "${PERMS}" = "rw-------" ]; then
ISSUE=1 ISSUE=1; echo "[!] Change file permissions of ${INCLUDEDIR}/consts to 600."
echo "[!] Change file permissions of ${INCLUDEDIR}/consts to 600"
fi fi
# Check permissions of include/functions file # Check permissions of include/functions file
if [ ! "${PERMS2}" = "r--------" -a ! "${PERMS2}" = "rw-------" ]; then if [ ! "${PERMS2}" = "r--------" -a ! "${PERMS2}" = "rw-------" ]; then
ISSUE=1 ISSUE=1; echo "[!] Change file permissions of ${INCLUDEDIR}/functions to 600."
echo "[!] Change file permissions of ${INCLUDEDIR}/functions to 600"
fi fi
# Check if owner of both files is root user # Check if owner of both files is root user
if [ ! "${OWNER}" = "root" -o ! "${OWNER2}" = "root" ]; then if [ ! "${OWNER}" = "root" -a ! "${OWNERID}" = "0" ]; then
ISSUE=1 ISSUE=1; echo "[!] Change ownership of ${INCLUDEDIR}/consts to 'root' or similar (found: ${OWNER} with UID ${OWNERID})."
echo "[!] Change ownership of ${INCLUDEDIR}/consts and ${INCLUDEDIR}/functions to 'root'"
fi fi
# Check if owner of both files is root user
if [ ! "${OWNER2}" = "root" -a ! "${OWNER2ID}" = "0" ]; then
ISSUE=1; echo "[!] Change ownership of ${INCLUDEDIR}/functions to 'root' or similar (found: ${OWNER2} with UID ${OWNER2ID})."
fi
if [ ${ISSUE} -eq 0 ]; then if [ ${ISSUE} -eq 0 ]; then
. ${INCLUDEDIR}/consts . ${INCLUDEDIR}/consts
. ${INCLUDEDIR}/functions . ${INCLUDEDIR}/functions