elie/debian-cis
1
0
Fork 0
mirror of https://github.com/ovh/debian-cis.git synced 2025-06-24 19:44:35 +02:00
Code Issues Packages Projects Releases Wiki Activity

IMP(shellcheck): disable quoting warning for find

Browse Source
This commit is contained in:
Thibault Ayanides
2020-12-14 14:28:27 +01:00
parent 2ab1bd50dc
commit fad8e8c1f1
4 changed files with 6 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
bin/hardening/1.1.21_sticky_bit_world_writable_folder.sh
View File

@ -21,6 +21,7 @@ DESCRIPTION="Set sticky bit on world writable directories to prevent users from
audit() {
info "Checking if setuid is set on world writable Directories"
FS_NAMES=$(df --local -P | awk '{if (NR!=1) print $6}')
# shellcheck disable=SC2086
RESULT=$($SUDO_CMD find $FS_NAMES -xdev -type d \( -perm -0002 -a ! -perm -1000 \) -print 2>/dev/null)
if [ -n "$RESULT" ]; then
crit "Some world writable directories are not on sticky bit mode!"