ItsDrike/dotfiles
1
0
Fork 0
mirror of https://github.com/ItsDrike/dotfiles.git synced 2024-12-26 13:14:35 +00:00
Code Issues Packages Projects Releases Wiki Activity

Add read permission check

Browse source
This commit is contained in:
ItsDrike 2021-05-15 01:38:34 +02:00
parent 544bf87c04
commit 3fe92abc2b
No known key found for this signature in database
GPG key ID: B5F6B41F708C3ADD
1 changed files with 8 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

10
root/usr/local/bin/tamper-check
View file

@ -10,7 +10,7 @@ files = {
'/etc/pam.d/sudo': 'd1738818070684a5d2c9b26224906aad69a4fea77aabd960fc2675aee2df1fa2', '/etc/pam.d/sudo': 'd1738818070684a5d2c9b26224906aad69a4fea77aabd960fc2675aee2df1fa2',
'/etc/passwd': '28d6bec52ac5b4957a2c30dfcd15008dc1a39665c27abce97408489f3dbf02c9', '/etc/passwd': '28d6bec52ac5b4957a2c30dfcd15008dc1a39665c27abce97408489f3dbf02c9',
'/etc/shadow': 'a24f72cba4cbc6b0a8433da2f4b011f31345068e3e5d6bebed6fb6a35769bd59', '/etc/shadow': 'a24f72cba4cbc6b0a8433da2f4b011f31345068e3e5d6bebed6fb6a35769bd59',
'/etc/ssh/sshd_config': '515db2484625122b425447f7e673649e3d89b57577eaa29395017676735907b', '/etc/ssh/sshd_config': '515db2484625122b4254472f7e673649e3d89b57577eaa29395017676735907b',
'/bin/sudo': '0ffaf9e93a080ca1698837729641c283d24500d6cdd2cb4eb8e42427566a230e', '/bin/sudo': '0ffaf9e93a080ca1698837729641c283d24500d6cdd2cb4eb8e42427566a230e',
'/bin/su': '3101438405d98e71e9eb68fbc5a33536f1ad0dad5a1c8aacd6da6c95ef082194', '/bin/su': '3101438405d98e71e9eb68fbc5a33536f1ad0dad5a1c8aacd6da6c95ef082194',
'/usr/bin/passwd': 'd4df1659159737bb4c08a430d493d257d75cdd93e18427946265ae5862a714c7', '/usr/bin/passwd': 'd4df1659159737bb4c08a430d493d257d75cdd93e18427946265ae5862a714c7',
@ -150,6 +150,8 @@ def _get_checksum(file):
"check the 'files' dictionary on the top of the program and remove this entry." "check the 'files' dictionary on the top of the program and remove this entry."
) )
exit(2) exit(2)
elif "Permission denied" in proc_stdout:
raise PermissionError(f"PermissionError: Unable to read file '{file}'")
return proc_stdout.replace(f' {file}\n', '') return proc_stdout.replace(f' {file}\n', '')
@ -183,7 +185,11 @@ def run_editor():
def run_check(): def run_check():
not_matched = [] not_matched = []
for file, checksum in files.items(): for file, checksum in files.items():
sha256_sum = _get_checksum(file) try:
sha256_sum = _get_checksum(file)
except PermissionError as e:
print(f'{e} -- skipping file...')
continue
if sha256_sum != checksum: if sha256_sum != checksum:
print(f"WARNING: {file} doesn't match the checksum") print(f"WARNING: {file} doesn't match the checksum")
print(f" -> detected: {sha256_sum}") print(f" -> detected: {sha256_sum}")