| #!/usr/bin/python | |
| # coding: utf-8 | |
| # ------------------------------------------------------------------- | |
| # 宝塔Linux面板 | |
| # ------------------------------------------------------------------- | |
| # Copyright (c) 2015-2099 宝塔软件(http://bt.cn) All rights reserved. | |
| # ------------------------------------------------------------------- | |
| # Author: hwliang <hwl@bt.cn> | |
| # ------------------------------------------------------------------- | |
| # ------------------------------------------------------------------- | |
| # 用户缺省权限检查 | |
| # ------------------------------------------------------------------- | |
| # import sys, os | |
| # os.chdir('/www/server/panel') | |
| # sys.path.append("class/") | |
| import os, sys, re, public | |
| _title = '/etc/bashrc用户缺省权限检查' | |
| _version = 1.0 # 版本 | |
| _ps = "/etc/bashrc用户缺省权限检查" # 描述 | |
| _level = 2 # 风险级别： 1.提示(低) 2.警告(中) 3.危险(高) | |
| _date = '2022-08-10' # 最后更新时间 | |
| _ignore = os.path.exists("data/warning/ignore/sw_bashrc.pl") | |
| _tips = [ | |
| "【/etc/bashrc】 文件中所所设置的umask为002,不符合要求，建议设置为027", | |
| "操作如下：打开【/etc/bashrc】文件，修改 umask值 为027" | |
| ] | |
| _help = '' | |
| _remind = '此方案可以加强对系统用户权限的保护，但是可能会影响原有的操作习惯。' | |
| def check_run(): | |
| # 判断是否存在/etc/profile文件 | |
| if os.path.exists("/etc/bashrc"): | |
| # 读取文件内容 | |
| profile = public.ReadFile("/etc/bashrc") | |
| # 判断是否存在umask设置 | |
| if re.search("umask 0",profile): | |
| # 判断是否设置为027 | |
| if re.search("umask 027",profile): | |
| return True,"无风险" | |
| else: | |
| return True,"无风险" | |
| # return False,"未设置umask为027" | |
| else: | |
| return True,"无风险" |