diff --git a/bin/hardening/5.2.3_ssh_host_public_keys_perm_ownership.sh b/bin/hardening/5.2.3_ssh_host_public_keys_perm_ownership.sh index 7a9f6c2..c1b2b61 100755 --- a/bin/hardening/5.2.3_ssh_host_public_keys_perm_ownership.sh +++ b/bin/hardening/5.2.3_ssh_host_public_keys_perm_ownership.sh @@ -32,8 +32,13 @@ audit () { if [ $FNRET = 0 ]; then ok "$FILE permissions were set to $PERMISSIONS" else - ERRORS=$((ERRORS+1)) - crit "$FILE permissions were not set to $PERMISSIONS" + has_file_correct_permissions $FILE 600 + if [ $FNRET = 0 ]; then + ok "$FILE permissions were set to $PERMISSIONS" + else + ERRORS=$((ERRORS+1)) + crit "$FILE permissions were not set to $PERMISSIONS" + fi fi fi @@ -73,8 +78,13 @@ apply () { if [ $FNRET = 0 ]; then ok "$FILE permissions were set to $PERMISSIONS" else - warn "fixing $DIR SSH public keys permissions to $USER:$GROUP" - chmod 0$PERMISSIONS $FILE + has_file_correct_permissions $FILE 600 + if [ $FNRET = 0 ]; then + ok "$FILE permissions were set to $PERMISSIONS" + else + warn "fixing $DIR SSH public keys permissions to $USER:$GROUP" + chmod 0$PERMISSIONS $FILE + fi fi fi done