You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
167 lines
4.7 KiB
167 lines
4.7 KiB
#!/bin/sh
|
|
|
|
ACTION=$1
|
|
|
|
# all filenames concerning permission
|
|
# check must not include a colon `:'
|
|
|
|
# ensure the command "which" is available
|
|
PATH="${PATH}:/bin:/usr/bin:/sbin:/usr/sbin:/usr/local/bin:/usr/local/sbin:/opt/bin:/opt/sbin:/opt/local/bin:/opt/local/sbin"
|
|
CHMOD=`which chmod`
|
|
COPY=`which cp`
|
|
MKDIR=`which mkdir`
|
|
|
|
# compare with permissioncheck/usecases.inc.php
|
|
|
|
WORK_DIR="permissioncheck"
|
|
LIST_OF_FILES="${WORK_DIR}/list-of-files.txt"
|
|
LIST_OF_SUBDIRS="${WORK_DIR}/list-of-subdirs.txt"
|
|
#
|
|
INDEX_FILE="index.php"
|
|
DEFAULT_FILE_NAME="check.php"
|
|
#USECASES_FILE="${WORK_DIR}/usecases.txt"
|
|
USECASES_FILE="${WORK_DIR}/usecases.bin"
|
|
GRANT="${WORK_DIR}/permission_granted.bin"
|
|
NO="${WORK_DIR}/no.bin"
|
|
YES="${WORK_DIR}/yes.bin"
|
|
HTACCESS="${WORK_DIR}/.htaccess"
|
|
|
|
# quick 'n dirty
|
|
# none of those permissions are critical
|
|
#
|
|
if [ -d ${WORK_DIR} ] ; then
|
|
${CHMOD} 755 "${WORK_DIR}"
|
|
else
|
|
echo "${WORK_DIR} does not exist"
|
|
exit 1
|
|
fi
|
|
if [ -f ${LIST_OF_FILES} ] ; then
|
|
${CHMOD} 644 "${LIST_OF_FILES}"
|
|
else
|
|
echo "${LIST_OF_FILES} does not exist"
|
|
exit 1
|
|
fi
|
|
# the next may be redundant, because it could be done in ${LIST_OF_FILES}
|
|
if [ -f ${LIST_OF_SUBDIRS} ] ; then
|
|
${CHMOD} 644 "${LIST_OF_SUBDIRS}"
|
|
else
|
|
echo "${LIST_OF_SUBDIRS} does not exist"
|
|
exit 1
|
|
fi
|
|
|
|
# hardcoded permissions are supposed to be
|
|
# removed and replaced by list of files
|
|
hardcoded_perms() {
|
|
${CHMOD} 644 "${GRANT}"
|
|
${CHMOD} 444 "${NO}"
|
|
${CHMOD} 444 "${YES}"
|
|
#
|
|
${CHMOD} 644 "${WORK_DIR}/${DEFAULT_FILE_NAME}"
|
|
${CHMOD} 644 "${WORK_DIR}/functions.inc.php"
|
|
if [ -f ${HTACCESS} ] ; then
|
|
${CHMOD} 644 ${HTACCESS}
|
|
fi
|
|
${CHMOD} 600 "${WORK_DIR}/_htaccess"
|
|
${CHMOD} 600 "${WORK_DIR}/.htpasswd"
|
|
${CHMOD} 644 "${WORK_DIR}/${INDEX_FILE}"
|
|
${CHMOD} 644 "${WORK_DIR}/permission_granted.inc.php"
|
|
${CHMOD} 644 "${WORK_DIR}/usecases.inc.php"
|
|
#${CHMOD} 644 "${WORK_DIR}/usecases.bin"
|
|
#${CHMOD} 644 "${WORK_DIR}/usecases.txt"
|
|
${CHMOD} 644 "${USECASES_FILE}"
|
|
}
|
|
hardcoded_perms
|
|
|
|
dynamic_perms_files() {
|
|
echo ' dynamic_perms_files'
|
|
while read line_of_file_orig ; do
|
|
static_file_name="permissioncheck/"`echo $line_of_file_orig | cut -d: -f1`
|
|
#echo $static_file_name
|
|
static_file_perm=`echo $line_of_file_orig | cut -d: -f2`
|
|
#echo $static_file_perm
|
|
if [ -f $static_file_name ] ; then
|
|
#echo ${CHMOD} $static_file_perm $static_file_name
|
|
${CHMOD} $static_file_perm $static_file_name
|
|
else
|
|
echo "$static_file_name $static_file_perm does not exist"
|
|
echo exit 1 recommended
|
|
fi
|
|
done < ${LIST_OF_FILES}
|
|
}
|
|
|
|
dynamic_perms_subdirs() {
|
|
echo ' dynamic_perms_subdirs'
|
|
while read line_of_file_orig ; do
|
|
static_subdir_name="permissioncheck/"`echo $line_of_file_orig | cut -d: -f1`
|
|
#echo $static_file_name
|
|
static_subdir_perm=`echo $line_of_file_orig | cut -d: -f2`
|
|
#echo $static_file_perm
|
|
if [ -d $static_subdir_name ] ; then
|
|
#echo ${CHMOD} $static_subdir_perm $static_subdir_name
|
|
${CHMOD} $static_subdir_perm $static_subdir_name
|
|
else
|
|
echo "$static_subdir_name $static_subdir_perm does not exist"
|
|
echo ${MKDIR} $static_subdir_name '#' recommended
|
|
#echo exit 1 recommended
|
|
fi
|
|
done < ${LIST_OF_SUBDIRS}
|
|
}
|
|
|
|
dynamic_perms() {
|
|
dynamic_perms_files
|
|
dynamic_perms_subdirs
|
|
}
|
|
|
|
disable_perm_check() {
|
|
while read line_of_file_orig ; do
|
|
${COPY} ${NO} ${GRANT}
|
|
#echo $line_of_file_orig
|
|
usecase=`echo $line_of_file_orig | cut -d: -f1`
|
|
#echo $usecase
|
|
uc_perms_subdir=`echo $line_of_file_orig | cut -d: -f2`
|
|
#echo $uc_perms_subdir
|
|
uc_perms_file=`echo $line_of_file_orig | cut -d: -f3`
|
|
#echo $uc_perms_file
|
|
${CHMOD} 700 ${WORK_DIR}/${usecase}
|
|
#ls -ld ${WORK_DIR}/${usecase}
|
|
${CHMOD} 600 ${WORK_DIR}/${usecase}/${DEFAULT_FILE_NAME}
|
|
#ls -l ${WORK_DIR}/${usecase}/${DEFAULT_FILE_NAME}
|
|
#echo
|
|
done < ${USECASES_FILE}
|
|
}
|
|
|
|
enable_perm_check() {
|
|
while read line_of_file_orig ; do
|
|
${COPY} ${YES} ${GRANT}
|
|
#echo $line_of_file_orig
|
|
usecase=`echo $line_of_file_orig | cut -d: -f1`
|
|
#echo $usecase
|
|
uc_perms_subdir=`echo $line_of_file_orig | cut -d: -f2`
|
|
#echo $uc_perms_subdir
|
|
uc_perms_file=`echo $line_of_file_orig | cut -d: -f3`
|
|
#echo $uc_perms_file
|
|
${CHMOD} ${uc_perms_subdir} ${WORK_DIR}/${usecase}
|
|
#ls -ld ${WORK_DIR}/${usecase}
|
|
${CHMOD} ${uc_perms_file} ${WORK_DIR}/${usecase}/${DEFAULT_FILE_NAME}
|
|
#ls -l ${WORK_DIR}/${usecase}/${DEFAULT_FILE_NAME}
|
|
#echo
|
|
done < ${USECASES_FILE}
|
|
}
|
|
|
|
|
|
case ${ACTION} in
|
|
disable)
|
|
disable_perm_check
|
|
;;
|
|
enable)
|
|
enable_perm_check
|
|
;;
|
|
test)
|
|
dynamic_perms
|
|
;;
|
|
*)
|
|
echo "Usage: sh prepare_permissioncheck.sh {disable|enable}"
|
|
;;
|
|
esac
|
|
|
|
# EOF
|