File size: 1,831 Bytes
08c964e | 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 | #!/usr/bin/python
# coding: utf-8
# -------------------------------------------------------------------
# 宝塔Linux面板
# -------------------------------------------------------------------
# Copyright (c) 2015-2099 宝塔软件(http://bt.cn) All rights reserved.
# -------------------------------------------------------------------
# Author: hwliang <hwl@bt.cn>
# -------------------------------------------------------------------
# -------------------------------------------------------------------
# 用户缺省权限检查
# -------------------------------------------------------------------
# import sys, os
# os.chdir('/www/server/panel')
# sys.path.append("class/")
import os, sys, re, public
_title = '/etc/csh.cshrc用户缺省权限检查'
_version = 1.0 # 版本
_ps = "/etc/csh.cshrc用户缺省权限检查" # 描述
_level = 2 # 风险级别： 1.提示(低) 2.警告(中) 3.危险(高)
_date = '2022-08-10' # 最后更新时间
_ignore = os.path.exists("data/warning/ignore/sw_cshrc.pl")
_tips = [
"【/etc/csh.cshrc】 文件中所设置的umask为002,不符合要求，建议设置为027",
"操作如下：打开【/etc/csh.cshrc】文件，修改 umask值为027"
]
_help = ''
_remind = '此方案可以加强对系统用户权限的防护。'
def check_run():
# 判断是否存在/etc/profile文件
if os.path.exists("/etc/csh.cshrc"):
# 读取文件内容
profile = public.ReadFile("/etc/csh.cshrc")
# 判断是否存在umask设置
if re.search("umask 0",profile):
# 判断是否设置为027
if re.search("umask 027",profile):
return True,"无风险"
else:
return True,"无风险"
# return False,"未设置umask为027"
else:
return True,"无风险" |