File: //opt/BCLinux/bse/secure_check/c08_fileProperty
#!/bin/sh
#=======================================================
InsertSection "check file property set"
tmp_count=1
###644---2
IS_EXIST=`egrep -v '^#|^$' ${PROFILE} | grep chmod_644_file |wc -l`
if [ "${IS_EXIST}" = "1" ];then
for i in $CHMOD_644_FILE
do
property_value=`stat -c %a $i`
if [ "${property_value}" != "644" ];then
echo "c08" >> $RESULT_FILE
echo "" >> $RESULT_FILE
logtext ""
logtext "WRN_C08_$tmp_count: $(loadtext TXT_WRN_C08_$tmp_count)"
logtext "Suggestion: $(loadtext TXT_SUG_C08_$tmp_count)"
Display --indent 2 --text "- $i's property is not safe... " --result WARNING --color RED
AddHP 0 1
else
logtext "$i is safe, checking ok"
Display --indent 2 --text "- Check $i property... " --result OK --color GREEN
AddHP 1 1
fi
tmp_count=$(expr ${tmp_count} + 1)
done
fi
###------------------------------------------------
####600---3
IS_EXIST=`egrep -v '^#|^$' ${PROFILE} | grep chmod_600_file |wc -l`
if [ "${IS_EXIST}" = "1" ];then
for i in $CHMOD_600_FILE
do
if [ -e $i ];then
property_value=`stat -c %a $i`
if [ "${property_value}" != "600" ];then
echo "c08" >> $RESULT_FILE
echo "" >> $RESULT_FILE
logtext ""
logtext "WRN_C08_$tmp_count: $(loadtext TXT_WRN_C08_$tmp_count)"
logtext "Suggestion: $(loadtext TXT_SUG_C08_$tmp_count)"
Display --indent 2 --text "- $i's property is not safe... " --result WARNING --color RED
AddHP 0 1
else
logtext "$i is safe, checking ok"
Display --indent 2 --text "- Check $i property... " --result OK --color GREEN
AddHP 1 1
fi
fi
tmp_count=$(expr ${tmp_count} + 1)
done
fi
###------------------------------------------------
###400 ---1
IS_EXIST=`egrep -v '^#|^$' ${PROFILE} | grep chmod_400_file |wc -l`
if [ "${IS_EXIST}" = "1" ];then
for i in $CHMOD_400_FILE
do
if [ -e $i ];then
property_value=`stat -c %a $i`
if [ "${property_value}" != "400" ];then
echo "c08" >> $RESULT_FILE
echo "" >> $RESULT_FILE
logtext ""
logtext "WRN_C08_$tmp_count: $(loadtext TXT_WRN_C08_$tmp_count)"
logtext "Suggestion: $(loadtext TXT_SUG_C08_$tmp_count)"
Display --indent 2 --text "- $i's property is not safe... " --result WARNING --color RED
AddHP 0 1
else
logtext "$i is safe, checking ok"
Display --indent 2 --text "- Check $i property... " --result OK --color GREEN
AddHP 1 1
fi
fi
tmp_count=$(expr ${tmp_count} + 1)
done
fi
###------------------------------------------------
###751 ---1
IS_EXIST=`egrep -v '^#|^$' ${PROFILE} | grep chmod_751_file |wc -l`
if [ "${IS_EXIST}" = "1" ];then
for i in $CHMOD_751_FILE
do
if [ -e $i ];then
property_value=`stat -c %a $i`
if [ "${property_value}" != "751" ];then
echo "c08" >> $RESULT_FILE
echo "" >> $RESULT_FILE
logtext ""
logtext "WRN_C08_$tmp_count: $(loadtext TXT_WRN_C08_$tmp_count)"
logtext "Suggestion: $(loadtext TXT_SUG_C08_$tmp_count)"
Display --indent 2 --text "- $i's property is not safe... " --result WARNING --color RED
AddHP 0 1
else
logtext "$i is safe, checking ok"
Display --indent 2 --text "- Check $i property... " --result OK --color GREEN
AddHP 1 1
fi
fi
tmp_count=$(expr ${tmp_count} + 1)
done
fi
##------------------------------------------------
####750-----9
IS_EXIST=`egrep -v '^#|^$' ${PROFILE} | grep chmod_750_file |wc -l`
if [ "${IS_EXIST}" = "1" ];then
for i in $CHMOD_750_FILE
do
if [ -e $i ];then
property_value=`stat -c %a $i`
if [ "${property_value}" != "750" ];then
echo "c08" >> $RESULT_FILE
echo "" >> $RESULT_FILE
logtext ""
logtext "WRN_C08_$tmp_count: $(loadtext TXT_WRN_C08_$tmp_count)"
logtext "Suggestion: $(loadtext TXT_SUG_C08_$tmp_count)"
Display --indent 2 --text "- $i's property is not safe... " --result WARNING --color RED
AddHP 0 1
else
logtext "$i is safe, checking ok"
Display --indent 2 --text "- Check $i property... " --result OK --color GREEN
AddHP 1 1
fi
fi
tmp_count=$(expr ${tmp_count} + 1)
done
fi