tyler.durden/lynis
1
0
Fork 0
mirror of https://github.com/CISOfy/lynis.git synced 2025-07-25 23:05:01 +02:00
Code Issues Packages Projects Releases Wiki Activity

Put in fail-safe options for systems using AIX or busybox

Browse Source
This commit is contained in:
Michael Boelen 2019-08-20 14:49:34 +02:00
parent a310c43176
commit e685182b18
No known key found for this signature in database
GPG Key ID: 26141F77A09D7F04
1 changed files with 20 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

28
include/functions
View File

@ -53,6 +53,7 @@
# FileIsReadable Check if a file is readable or directory accessible # FileIsReadable Check if a file is readable or directory accessible
# GetHostID Retrieve an unique ID for this host # GetHostID Retrieve an unique ID for this host
# GetReportData Request data from report # GetReportData Request data from report
# HasCorrectFilePermissions Check file permissions and see if they match expected values
# HasData Checks for data in variable # HasData Checks for data in variable
# InsertSection Insert a section block # InsertSection Insert a section block
# InsertPluginSection Insert a section block for plugins # InsertPluginSection Insert a section block for plugins
@ -214,7 +215,7 @@
# #
# Parameters : $1 = Full path to file or directory # Parameters : $1 = Full path to file or directory
# $2 = Permissions # $2 = Permissions
# Returns : exit code (0 = correct, 1 = not correct) # Returns : exit code (0 = correct, 1 = not correct, 2 = file does not exist)
################################################################################ ################################################################################
HasCorrectFilePermissions() { HasCorrectFilePermissions() {
@ -227,14 +228,22 @@
for CHECK_PERMISSION in ${CHECKPERMISSION_FULL}; do for CHECK_PERMISSION in ${CHECKPERMISSION_FULL}; do
DATA=$(echo ${CHECK_PERMISSION} | ${EGREPBINARY} "[rwx]") DATA=$(echo ${CHECK_PERMISSION} | ${EGREPBINARY} "[rwx]")
if [ $? -eq 0 ]; then if [ $? -eq 0 ]; then
# add first dummy character # add a dummy character as first character so it looks like output is a normal file
CHECK_PERMISSION=$(echo "-${CHECK_PERMISSION}" | ${AWKBINARY} '{k=0;for(i=0;i<=8;i++)k+=((substr($1,i+2,1)~/[rwx]/)*2^(8-i));if(k)printf("%0o",k)}') CHECK_PERMISSION=$(echo "-${CHECK_PERMISSION}" | ${AWKBINARY} '{k=0;for(i=0;i<=8;i++)k+=((substr($1,i+2,1)~/[rwx]/)*2^(8-i));if(k)printf("%0o",k)}')
fi fi
# First try stat command
LogText "Test: checking if file ${CHECKFILE} is ${CHECK_PERMISSION}" LogText "Test: checking if file ${CHECKFILE} is ${CHECK_PERMISSION}"
if [ -n "${STATBINARY}" ]; then if [ -n "${STATBINARY}" ]; then
DATA=$(${STATBINARY} --format=%a ${CHECKFILE}) # busybox does not support format
LogText "Output: ${DATA}" if [ ${SHELL_IS_BUSYBOX} -eq 0 ]; then
elif [ -n "${FINDBINARY}" ]; then DATA=$(${STATBINARY} --format=%a ${CHECKFILE})
LogText "Output: ${DATA}"
fi
fi
# See if we can use the find binary
if [ -z "${DATA}" ]; then
case ${OS} in case ${OS} in
"AIX") "AIX")
ReportException "HasCorrectFilePermissions:01" "OS not supported yet" ReportException "HasCorrectFilePermissions:01" "OS not supported yet"
@ -244,12 +253,15 @@
DATA=$(${FINDBINARY} ${CHECKFILE} -printf "%m") DATA=$(${FINDBINARY} ${CHECKFILE} -printf "%m")
;; ;;
esac esac
else fi
# Finally use ls command
if [ -z "${DATA}" ]; then
# If 'file' is an directory, use -d # If 'file' is an directory, use -d
if [ -d ${CHECKFILE} ]; then if [ -d ${CHECKFILE} ]; then
DATA=$(ls -d -l ${CHECKFILE} | cut -c 2-10) DATA=$(${LSBINARY} -d -l ${CHECKFILE} | cut -c 2-10)
else else
DATA=$(ls -l ${CHECKFILE} | cut -c 2-10) DATA=$(${LSBINARY} -l ${CHECKFILE} | cut -c 2-10)
fi fi
# Convert permissions to octal # Convert permissions to octal
LogText "Converting ${DATA} to octal" LogText "Converting ${DATA} to octal"