2016-11-09 22:25:00 -06:00
|
|
|
#!/bin/bash
|
2016-11-16 16:23:52 -06:00
|
|
|
DEPRIV=depriv
|
2016-11-09 22:25:00 -06:00
|
|
|
if [ ! -f /usr/local/src/SharedLibraries/Bash/header ]; then
|
|
|
|
echo This script requires the SharedLibraries package.
|
|
|
|
exit 1;
|
|
|
|
fi
|
|
|
|
source /usr/local/src/SharedLibraries/Bash/header
|
|
|
|
export logfile="/var/log/silent-guardian.log"
|
|
|
|
|
|
|
|
logstatement "Started $(date)"
|
|
|
|
|
|
|
|
# Fix the Webserver permissions
|
2016-11-16 16:23:52 -06:00
|
|
|
if [ -f /srv/http ]; then
|
|
|
|
chown -R $DEPRIV:http /srv/http/*
|
2016-11-09 22:25:00 -06:00
|
|
|
find /srv/http/* -type f -exec chmod 0640 {} \;
|
|
|
|
find /srv/http/* -type d -exec chmod 0750 {} \;
|
2016-11-16 16:23:52 -06:00
|
|
|
fi;
|
2016-11-09 22:25:00 -06:00
|
|
|
|
|
|
|
# Fix the media permissions
|
2019-05-06 02:04:19 -05:00
|
|
|
/usr/local/bin/yggdrasil-lock
|
|
|
|
|
2016-11-09 22:25:00 -06:00
|
|
|
# fix the WolfPack results location
|
2016-11-16 16:23:52 -06:00
|
|
|
if [ -x /usr/local/bin/wolfpack ]; then
|
|
|
|
find /srv/wolfpack -type d -exec chmod 0755 {} \;
|
|
|
|
find /srv/wolfpack -type f -exec chmod 0644 {} \;
|
|
|
|
fi
|
2016-11-09 22:25:00 -06:00
|
|
|
|
|
|
|
# Guard root
|
|
|
|
chmod 0700 /root
|
|
|
|
chown -R root:root /root
|
|
|
|
find /root -type d -exec chmod 0700 {} \;
|
|
|
|
|
|
|
|
# Guard home directories
|
|
|
|
chmod 0750 /home/*
|
|
|
|
|
2016-11-16 16:23:52 -06:00
|
|
|
# Guard LDAP
|
|
|
|
if [ -d /etc/openldap ]; then
|
|
|
|
chown ldap:ldap /var/lib/openldap/openldap-data/*
|
|
|
|
fi
|
2016-11-09 22:25:00 -06:00
|
|
|
|
|
|
|
logstatement "Ended $(date)"
|
|
|
|
logstatement " "
|