elie/debian-cis
1
0
Fork 0
mirror of https://github.com/ovh/debian-cis.git synced 2024-11-22 05:27:01 +01:00
Code Issues Packages Projects Releases Wiki Activity

Fixed 8.2.4 check file exists before testing rights

Browse Source
This commit is contained in:
thibault.dewailly 2016-04-20 14:36:55 +02:00
parent 3ece442743
commit 5048099df8
3 changed files with 18 additions and 13 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

25
bin/hardening/8.2.4_set_logfile_perm.sh
View File

@ -19,17 +19,22 @@ GROUP='adm'
audit () {
FILES=$(grep "file(" $SYSLOG_BASEDIR/syslog-ng.conf | grep '"' | cut -d'"' -f 2)
for FILE in $FILES; do
has_file_correct_ownership $FILE $USER $GROUP
if [ $FNRET = 0 ]; then
ok "$FILE has correct ownership"
does_file_exist $FILE
if [ $FNRET != 0 ]; then
crit "$FILE does not exist"
else
crit "$FILE is not $USER:$GROUP ownership set"
fi
has_file_correct_permissions $FILE $PERMISSIONS
if [ $FNRET = 0 ]; then
ok "$FILE has correct permissions"
else
crit "$FILE has not $PERMISSIONS permissions set"
has_file_correct_ownership $FILE $USER $GROUP
if [ $FNRET = 0 ]; then
ok "$FILE has correct ownership"
else
crit "$FILE is not $USER:$GROUP ownership set"
fi
has_file_correct_permissions $FILE $PERMISSIONS
if [ $FNRET = 0 ]; then
ok "$FILE has correct permissions"
else
crit "$FILE has not $PERMISSIONS permissions set"
fi
fi
done
}

2
bin/postinstall/tripwire.sh
View File

@ -4,7 +4,7 @@
# CIS Debian 7 Hardening
#
# If you followed this CIS hardenning, this script follows 8.3.1_install_tripwire.sh
# If you followed this CIS hardening, this script follows 8.3.1_install_tripwire.sh
# After installing tripwire, you may want to run those few commented commands to make it fully functionnal
echo "Generating Site key file..."

4
debian/default vendored
View File

@ -1,5 +1,5 @@
# Default file for CIS Debian hardenning scripts
# Default file for CIS Debian hardening scripts
# Define here root directory for CIS debian hardenning scripts
# Define here root directory for CIS debian hardening scripts
CIS_ROOT_DIR='/opt/cis-hardening'