elie/debian-cis
1
0
Fork 0
mirror of https://github.com/ovh/debian-cis.git synced 2024-11-22 21:47:02 +01:00
Code Issues Packages Projects Releases Wiki Activity

Fixed 8.2.4 check file exists before testing rights

Browse Source
This commit is contained in:
thibault.dewailly 2016-04-20 14:36:55 +02:00
parent c5b4aa220d
commit 799b3b5145
3 changed files with 18 additions and 13 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

25
bin/hardening/8.2.4_set_logfile_perm.sh
View File

@ -19,18 +19,23 @@ GROUP='adm'
audit () { audit () {
FILES=$(grep "file(" $SYSLOG_BASEDIR/syslog-ng.conf | grep '"' | cut -d'"' -f 2) FILES=$(grep "file(" $SYSLOG_BASEDIR/syslog-ng.conf | grep '"' | cut -d'"' -f 2)
for FILE in $FILES; do for FILE in $FILES; do
has_file_correct_ownership $FILE $USER $GROUP does_file_exist $FILE
if [ $FNRET = 0 ]; then if [ $FNRET != 0 ]; then
ok "$FILE has correct ownership" crit "$FILE does not exist"
else else
crit "$FILE is not $USER:$GROUP ownership set" has_file_correct_ownership $FILE $USER $GROUP
if [ $FNRET = 0 ]; then
ok "$FILE has correct ownership"
else
crit "$FILE is not $USER:$GROUP ownership set"
fi
has_file_correct_permissions $FILE $PERMISSIONS
if [ $FNRET = 0 ]; then
ok "$FILE has correct permissions"
else
crit "$FILE has not $PERMISSIONS permissions set"
fi
fi fi
has_file_correct_permissions $FILE $PERMISSIONS
if [ $FNRET = 0 ]; then
ok "$FILE has correct permissions"
else
crit "$FILE has not $PERMISSIONS permissions set"
fi
done done
} }

2
bin/postinstall/tripwire.sh
View File

@ -4,7 +4,7 @@
# CIS Debian 7 Hardening # CIS Debian 7 Hardening
# #
# If you followed this CIS hardenning, this script follows 8.3.1_install_tripwire.sh # If you followed this CIS hardening, this script follows 8.3.1_install_tripwire.sh
# After installing tripwire, you may want to run those few commented commands to make it fully functionnal # After installing tripwire, you may want to run those few commented commands to make it fully functionnal
echo "Generating Site key file..." echo "Generating Site key file..."

4
debian/default vendored
View File

@ -1,5 +1,5 @@
# Default file for CIS Debian hardenning scripts # Default file for CIS Debian hardening scripts
# Define here root directory for CIS debian hardenning scripts # Define here root directory for CIS debian hardening scripts
CIS_ROOT_DIR='/opt/cis-hardening' CIS_ROOT_DIR='/opt/cis-hardening'