avoiding /etc/passwd

This commit is contained in:
monsieuremre 2023-10-26 19:35:59 +00:00 committed by GitHub
parent b5ba03247a
commit 88f396264c
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -34,7 +34,7 @@
home_folder_access_rights_lockdown() { home_folder_access_rights_lockdown() {
# Each users home directory to himself # Each users home directory to himself
for user in $(dir /home); do # lists directories only for user in $(dir /home); do # lists directories only
if [ grep --quiet "$user" /etc/passwd ]; then # check if user actually exists, and this is not some random directory if [ $(id --user $user) ]; then # check if user actually exists, and this is not some random directory
dpkg-statoverride --add --update $user $user 0700 /home/$user # home directory of the user itself dpkg-statoverride --add --update $user $user 0700 /home/$user # home directory of the user itself
echo "Permission updated: chmod go-rwx /home/$user" echo "Permission updated: chmod go-rwx /home/$user"
fi fi