File: //opt/BCLinux/bse/secure_check/c06_umask
#!/bin/sh
#=======================================================
InsertSection "check umask"
cat /etc/profile|grep mask|grep -v "#" | awk -F " " '{print $2}'|tail -1 | while read aaa
do
if [ x"${aaa}" = x ];then
more /etc/profile|grep mask|grep -v "#" | awk '{print $2}'|tail -1 | while read aaa
do
if [[ "${aaa}" -lt "027" ]];then #unary operator expected
echo "c06" >> $RESULT_FILE
echo "" >> $RESULT_FILE
logtext "WRN_C06: The default umask is ${aaa}"
logtext "Suggestion: $(loadtext TXT_SUG_C06)"
Display --indent 2 --text "- Wrong umask set... " --result WARNING --color RED
AddHP 0 1
else
logtext "Has right umask set, checking ok"
Display --indent 2 --text "- Has right umask set... " --result OK --color GREEN
AddHP 1 1
fi
done
else
if [[ "${aaa}" -lt "027" ]];then #unary operator expected
echo "c06" >> $RESULT_FILE
echo "" >> $RESULT_FILE
logtext "WRN_C06: The default umask is ${aaa}"
logtext "Suggestion: $(loadtext TXT_SUG_C06)"
Display --indent 2 --text "- Wrong umask set... " --result WARNING --color RED
AddHP 0 1
else
logtext "Has right umask set, checking ok"
Display --indent 2 --text "- Has right umask set... " --result OK --color GREEN
AddHP 1 1
fi
fi
done
bbb=$(cat /etc/profile|grep mask|grep -v "#" | awk -F " " '{print $2}'|tail -1)
if [ x"${bbb}" = x ];then
echo "c06" >> $RESULT_FILE
echo "" >> $RESULT_FILE
logtext "WRN_C06: No umask set"
logtext "Suggestion: $(loadtext TXT_SUG_C06)"
Display --indent 2 --text "- No umask set... " --result WARNING --color RED
AddHP 0 1
fi