Git-Mirrors/security-misc
1
0
Fork 0
mirror of https://github.com/Kicksecure/security-misc.git synced 2025-02-26 02:31:11 -05:00
Code Issues Packages Projects Releases Wiki Activity

actually we do it once indeed

Browse Source
This commit is contained in:
monsieuremre 2023-10-26 19:41:07 +00:00 committed by GitHub
parent 88f396264c
commit 91c445244c
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 5 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
usr/libexec/security-misc/permission-lockdown
View File

@ -34,9 +34,13 @@
home_folder_access_rights_lockdown() { home_folder_access_rights_lockdown() {
# Each users home directory to himself # Each users home directory to himself
for user in $(dir /home); do # lists directories only for user in $(dir /home); do # lists directories only
if [ -f /var/cache/security-misc/state-files/$user ]; then
continue
fi
if [ $(id --user $user) ]; then # check if user actually exists, and this is not some random directory if [ $(id --user $user) ]; then # check if user actually exists, and this is not some random directory
dpkg-statoverride --add --update $user $user 0700 /home/$user # home directory of the user itself dpkg-statoverride --add --update $user $user 0700 /home/$user # home directory of the user
echo "Permission updated: chmod go-rwx /home/$user" echo "Permission updated: chmod go-rwx /home/$user"
touch /var/cache/security-misc/state-files/$user # so that we know we did this one
fi fi
done done
} }