HEX
Server: nginx/1.16.1
System: Linux ecs-04358622 4.19.90-2107.6.0.0100.oe1.bclinux.x86_64 #1 SMP Wed Dec 1 19:59:44 CST 2021 x86_64
User: nginx (994)
PHP: 8.0.0
Disabled: NONE
Upload Files
File: //opt/BCLinux/bse/secure_check/c08_fileProperty
#!/bin/sh

#=======================================================
InsertSection "check file property set"

tmp_count=1

###644---2
IS_EXIST=`egrep -v '^#|^$' ${PROFILE} | grep chmod_644_file |wc -l`
if [ "${IS_EXIST}" = "1" ];then
    for i in $CHMOD_644_FILE
    do
       property_value=`stat -c %a $i`
       if [ "${property_value}" !=  "644" ];then
           echo "c08" >> $RESULT_FILE
           echo "" >> $RESULT_FILE
           logtext ""
           logtext "WRN_C08_$tmp_count: $(loadtext TXT_WRN_C08_$tmp_count)"
           logtext "Suggestion: $(loadtext TXT_SUG_C08_$tmp_count)"
           Display --indent 2 --text "- $i's property is not safe... " --result WARNING --color RED
           AddHP 0 1
        else
           logtext "$i is safe, checking ok"
           Display --indent 2 --text "- Check $i property... " --result OK --color GREEN
           AddHP 1 1
        fi
        tmp_count=$(expr ${tmp_count} + 1)
    done
fi




###------------------------------------------------
####600---3
IS_EXIST=`egrep -v '^#|^$' ${PROFILE} | grep chmod_600_file |wc -l`
if [ "${IS_EXIST}" = "1" ];then
    for i in $CHMOD_600_FILE
        do
            if [ -e $i ];then
                property_value=`stat -c %a $i`
                if [ "${property_value}" !=  "600" ];then
                    echo "c08" >> $RESULT_FILE
                    echo "" >> $RESULT_FILE
                    logtext ""
                    logtext "WRN_C08_$tmp_count: $(loadtext TXT_WRN_C08_$tmp_count)"
                    logtext "Suggestion: $(loadtext TXT_SUG_C08_$tmp_count)"
                    Display --indent 2 --text "- $i's property is not safe... " --result WARNING --color RED
                    AddHP 0 1
                else
                    logtext "$i is safe, checking ok"
                    Display --indent 2 --text "- Check $i property... " --result OK --color GREEN
                    AddHP 1 1
                fi

            fi
             tmp_count=$(expr ${tmp_count} + 1)
        done
fi

###------------------------------------------------
###400  ---1
IS_EXIST=`egrep -v '^#|^$' ${PROFILE} | grep chmod_400_file |wc -l`
if [ "${IS_EXIST}" = "1" ];then
    for i in $CHMOD_400_FILE
        do
            if [ -e $i ];then
                property_value=`stat -c %a $i`
                if [ "${property_value}" !=  "400" ];then
                    echo "c08" >> $RESULT_FILE
                    echo "" >> $RESULT_FILE
                    logtext ""
                    logtext "WRN_C08_$tmp_count: $(loadtext TXT_WRN_C08_$tmp_count)"
                    logtext "Suggestion: $(loadtext TXT_SUG_C08_$tmp_count)"
                    Display --indent 2 --text "- $i's property is not safe... " --result WARNING --color RED
                    AddHP 0 1
                else
                    logtext "$i is safe, checking ok"
                    Display --indent 2 --text "- Check $i property... " --result OK --color GREEN
                    AddHP 1 1
                fi
            fi
             tmp_count=$(expr ${tmp_count} + 1)
        done
fi


###------------------------------------------------
###751  ---1
IS_EXIST=`egrep -v '^#|^$' ${PROFILE} | grep chmod_751_file |wc -l`
if [ "${IS_EXIST}" = "1" ];then
    for i in $CHMOD_751_FILE
        do
            if [ -e $i ];then
                property_value=`stat -c %a $i`
                if [ "${property_value}" !=  "751" ];then
                    echo "c08" >> $RESULT_FILE
                    echo "" >> $RESULT_FILE
                    logtext ""
                    logtext "WRN_C08_$tmp_count: $(loadtext TXT_WRN_C08_$tmp_count)"
                    logtext "Suggestion: $(loadtext TXT_SUG_C08_$tmp_count)"
                    Display --indent 2 --text "- $i's property is not safe... " --result WARNING --color RED
                    AddHP 0 1
                else
                    logtext "$i is safe, checking ok"
                    Display --indent 2 --text "- Check $i property... " --result OK --color GREEN
                    AddHP 1 1
                fi
            fi
             tmp_count=$(expr ${tmp_count} + 1)
        done
fi

##------------------------------------------------
####750-----9
IS_EXIST=`egrep -v '^#|^$' ${PROFILE} | grep chmod_750_file |wc -l`
if [ "${IS_EXIST}" = "1" ];then
    for i in $CHMOD_750_FILE
    do
        if [ -e $i ];then
            property_value=`stat -c %a $i`
            if [ "${property_value}" !=  "750" ];then
                echo "c08" >> $RESULT_FILE
                echo "" >> $RESULT_FILE
                logtext ""
                logtext "WRN_C08_$tmp_count: $(loadtext TXT_WRN_C08_$tmp_count)"
                logtext "Suggestion: $(loadtext TXT_SUG_C08_$tmp_count)"
                Display --indent 2 --text "- $i's property is not safe... " --result WARNING --color RED
                AddHP 0 1
            else
                logtext "$i is safe, checking ok"
                Display --indent 2 --text "- Check $i property... " --result OK --color GREEN
                AddHP 1 1
            fi
        fi
         tmp_count=$(expr ${tmp_count} + 1)
    done
fi