Git-Mirrors/security-misc
1
0
Fork 0
mirror of https://github.com/Kicksecure/security-misc.git synced 2024-10-01 08:25:45 -04:00
Code Issues Packages Projects Releases Wiki Activity

refactoring

Browse Source
This commit is contained in:
Patrick Schleizer 2019-12-20 03:40:47 -05:00
parent 98535e3a2b
commit b92a690c16
No known key found for this signature in database
GPG Key ID: CB8D50BB77BB3C48
1 changed files with 5 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
usr/lib/security-misc/permission-hardening
View File

@ -84,8 +84,8 @@ set_file_perms() {
continue
fi
if ! [ -e "${fso}" ]; then
echo "INFO: fso '${fso}' does not exist!"
if ! [ -e "$fso" ]; then
echo "INFO: fso '$fso' does not exist!"
continue
fi
@ -120,7 +120,7 @@ set_file_perms() {
## If there is an entry for the fso, but the owner/group/mode do not
## match, we remove and re-add the entry to update it.
if ! dpkg-statoverride --list | grep -q "$owner $group $mode_from_config $fso_without_trailing_slash"; then
echo_wrapper dpkg-statoverride --remove "${fso}"
echo_wrapper dpkg-statoverride --remove "$fso"
add_statoverride_entry
fi
else
@ -129,14 +129,14 @@ set_file_perms() {
if ! [ "$capability" = "" ]; then
if [ "$capability" = "none" ]; then
echo_wrapper setcap -r "${fso}"
echo_wrapper setcap -r "$fso"
else
if ! capsh --print | grep "Bounding set" | grep -q "$capability"; then
echo "ERROR: Capability '$capability' does not exist!" >&2
continue
fi
echo_wrapper setcap "${capability}+ep" "${fso}"
echo_wrapper setcap "${capability}+ep" "$fso"
fi
fi
done < "${config_file}"