Git-Mirrors/security-misc
1
0
Fork 0
mirror of https://github.com/Kicksecure/security-misc.git synced 2025-01-26 17:17:58 -05:00
Code Issues Packages Projects Releases Wiki Activity

refactoring

Browse Source
This commit is contained in:
Patrick Schleizer 2019-12-20 03:13:27 -05:00
parent bfee6b60cb
commit 4f65b0fc1e
No known key found for this signature in database
GPG Key ID: CB8D50BB77BB3C48
1 changed files with 7 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
usr/lib/security-misc/permission-hardening
View File

@ -56,7 +56,7 @@ add_statoverride_entry() {
fi
done < <( stat -c "%n %a %U %G" "${fso%/}/"** )
else
echo_wrapper dpkg-statoverride --add --update "$owner" "$group" "$mode" "${fso%/}"
echo_wrapper dpkg-statoverride --add --update "$owner" "$group" "$mode_from_config" "${fso%/}"
fi
}
@ -78,7 +78,7 @@ set_file_perms() {
continue
fi
if ! read -r fso mode owner group capability <<< "$line" ; then
if ! read -r fso mode_from_config owner group capability <<< "$line" ; then
exit_code=201
echo "ERROR: cannot parse line: $line" >&2
continue
@ -90,14 +90,14 @@ set_file_perms() {
fi
nosuid=""
if [ "$mode" = "nosuid" ]; then
if [ "$mode_from_config" = "nosuid" ]; then
nosuid="true"
elif ! seq -w 000 4777 | grep -qw "$mode"; then
echo "ERROR: Mode '$mode' is invalid!" >&2
elif ! seq -w 000 4777 | grep -qw "$mode_from_config"; then
echo "ERROR: Mode '$mode_from_config' is invalid!" >&2
continue
fi
if [ ! "$mode" = "nosuid" ]; then
if [ ! "$mode_from_config" = "nosuid" ]; then
if ! getent passwd | grep -q "^${owner}:"; then
echo "ERROR: User '$owner' does not exist!" >&2
continue
@ -114,7 +114,7 @@ set_file_perms() {
if dpkg-statoverride --list | grep -q "${fso%/}"; then
## If there is an entry for the fso, but the owner/group/mode do not
## match, we remove and re-add the entry to update it.
if ! dpkg-statoverride --list | grep -q "$owner $group ${mode:1} ${fso%/}"; then
if ! dpkg-statoverride --list | grep -q "$owner $group ${mode_from_config:1} ${fso%/}"; then
echo_wrapper dpkg-statoverride --remove "${fso}"
add_statoverride_entry
fi