elie/debian-cis
1
0
Fork 0
mirror of https://github.com/ovh/debian-cis.git synced 2025-06-24 11:34:35 +02:00
Code Issues Packages Projects Releases Wiki Activity

Fixed 8.2.4 check file exists before testing rights

Browse Source
This commit is contained in:
thibault.dewailly
2016-04-20 14:36:55 +02:00
parent c5b4aa220d
commit 799b3b5145
3 changed files with 18 additions and 13 deletions
Download Patch File Download Diff File Expand all files Collapse all files

25
bin/hardening/8.2.4_set_logfile_perm.sh
View File

@ -19,18 +19,23 @@ GROUP='adm'
audit () {
FILES=$(grep "file(" $SYSLOG_BASEDIR/syslog-ng.conf | grep '"' | cut -d'"' -f 2)
for FILE in $FILES; do
has_file_correct_ownership $FILE $USER $GROUP
if [ $FNRET = 0 ]; then
ok "$FILE has correct ownership"
does_file_exist $FILE
if [ $FNRET != 0 ]; then
crit "$FILE does not exist"
else
crit "$FILE is not $USER:$GROUP ownership set"
has_file_correct_ownership $FILE $USER $GROUP
if [ $FNRET = 0 ]; then
ok "$FILE has correct ownership"
else
crit "$FILE is not $USER:$GROUP ownership set"
fi
has_file_correct_permissions $FILE $PERMISSIONS
if [ $FNRET = 0 ]; then
ok "$FILE has correct permissions"
else
crit "$FILE has not $PERMISSIONS permissions set"
fi
fi
has_file_correct_permissions $FILE $PERMISSIONS
if [ $FNRET = 0 ]; then
ok "$FILE has correct permissions"
else
crit "$FILE has not $PERMISSIONS permissions set"
fi
done
}

2
bin/postinstall/tripwire.sh
View File

@ -4,7 +4,7 @@
# CIS Debian 7 Hardening
#
# If you followed this CIS hardenning, this script follows 8.3.1_install_tripwire.sh
# If you followed this CIS hardening, this script follows 8.3.1_install_tripwire.sh
# After installing tripwire, you may want to run those few commented commands to make it fully functionnal
echo "Generating Site key file..."