elie/debian-cis
1
0
Fork 0
mirror of https://github.com/ovh/debian-cis.git synced 2025-06-23 02:54:35 +02:00
Code Issues Packages Projects Releases Wiki Activity

Fixed 8.2.4 check file exists before testing rights

Browse Source
This commit is contained in:
thibault.dewailly
2016-04-20 14:36:55 +02:00
parent 3ece442743
commit 5048099df8
3 changed files with 18 additions and 13 deletions
Download Patch File Download Diff File Expand all files Collapse all files

25
bin/hardening/8.2.4_set_logfile_perm.sh
View File

@ -19,18 +19,23 @@ GROUP='adm'
audit () {
FILES=$(grep "file(" $SYSLOG_BASEDIR/syslog-ng.conf | grep '"' | cut -d'"' -f 2)
for FILE in $FILES; do
has_file_correct_ownership $FILE $USER $GROUP
if [ $FNRET = 0 ]; then
ok "$FILE has correct ownership"
does_file_exist $FILE
if [ $FNRET != 0 ]; then
crit "$FILE does not exist"
else
crit "$FILE is not $USER:$GROUP ownership set"
has_file_correct_ownership $FILE $USER $GROUP
if [ $FNRET = 0 ]; then
ok "$FILE has correct ownership"
else
crit "$FILE is not $USER:$GROUP ownership set"
fi
has_file_correct_permissions $FILE $PERMISSIONS
if [ $FNRET = 0 ]; then
ok "$FILE has correct permissions"
else
crit "$FILE has not $PERMISSIONS permissions set"
fi
fi
has_file_correct_permissions $FILE $PERMISSIONS
if [ $FNRET = 0 ]; then
ok "$FILE has correct permissions"
else
crit "$FILE has not $PERMISSIONS permissions set"
fi
done
}