Git-Mirrors/security-misc
1
0
Fork 0
mirror of https://github.com/Kicksecure/security-misc.git synced 2024-12-28 00:19:32 -05:00
Code Issues Packages Projects Releases Wiki Activity

add /usr/lib/security-misc/permission-hardening-undo

Browse Source
This commit is contained in:
Patrick Schleizer 2019-12-21 07:37:41 -05:00
parent af8b04b73d
commit 6b13a644df
No known key found for this signature in database
GPG Key ID: CB8D50BB77BB3C48
1 changed files with 56 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

56
usr/lib/security-misc/permission-hardening-undo Executable file
View File

@ -0,0 +1,56 @@
#!/bin/bash
## Copyright (C) 2012 - 2019 ENCRYPTED SUPPORT LP <adrelanos@riseup.net>
## See the file COPYING for copying conditions.
#set -x
set -e
set -o pipefail
exit_code=0
dpkg_admindir_parameter_existing_mode="--admindir /var/lib/permission-hardening/existing_mode"
dpkg_admindir_parameter_new_mode="--admindir /var/lib/permission-hardening/new_mode"
undo_all() {
if [ ! -f /var/lib/permission-hardening/existing_mode/statoverride ]; then
return 0
fi
local line
while read -r line; do
## example line:
## root root 4755 /usr/lib/eject/dmcrypt-get-device
local owner group mode file_name
if ! read -r owner group mode file_name <<< "$line" ; then
exit_code=201
echo "ERROR: cannot parse line: $line" >&2
continue
fi
true "owner: '$owner' group: '$group' mode: '$mode' file_name: '$file_name'"
stat -c "%n %a %U %G" "$file_name" || true
chmod "$mode" "$file_name" || exit_code=202
chown "${owner}:${group}" "$file_name" || exit_code=203
stat -c "%n %a %U %G" "$file_name" || true
dpkg-statoverride --remove "$file_name" &>/dev/null || true
dpkg-statoverride $dpkg_admindir_parameter_existing_mode --remove "$file_name" &>/dev/null || true
dpkg-statoverride $dpkg_admindir_parameter_new_mode --remove "$file_name" &>/dev/null || true
stat -c "%n %a %U %G" "$file_name" || true
done < "/var/lib/permission-hardening/existing_mode/statoverride"
}
undo_all
if [ ! "$exit_code" = "0" ]; then
echo "ERROR: Will exit with non-zero exit code: '$exit_code'" >&2
fi
exit "$exit_code"