digital-forensics-labs/SecGen
1
0
Fork 0
mirror of https://github.com/cliffe/SecGen.git synced 2026-02-23 04:08:02 +00:00
Code Issues Packages Projects Releases Wiki Activity

Should fix all errors in branch 'Access control vulnerability, allows less to run as root for any user'.

Browse Source 
required:
/access_control_misconfigurations/uid_less_root/manifests/change_uid_permissions.pp:4: Comments removed.
/access_control_misconfigurations/uid_less_root/manifests/change_uid_permissions.pp:10-15: Comments removed.

optional / suggested:
/access_control_misconfigurations/uid_less_root/manifests/change_uid_permissions.pp:1: $user parameter kept, module should be able to be copied and used for other modules (changing user permissions or different files) to ensure that all code is the same and checked <-- this was my thinking anyway.
/access_control_misconfigurations/uid_less_root/manifests/change_uid_permissions.pp:2: Removed the 'String' from before the block parameter definitions.
/access_control_misconfigurations/uid_less_root/manifests/change_uid_permissions.pp:3-8(post comment removal): Indented the block by two spaces.
This commit is contained in:
Jjk422
2016-09-01 16:36:13 +01:00
parent d49cb521cc
commit 51bbf5c7c3
1 changed files with 6 additions and 14 deletions
Download Patch File Download Diff File Expand all files Collapse all files

20
modules/vulnerabilities/unix/access_control_misconfigurations/uid_less_root/manifests/change_uid_permissions.pp
View File

@@ -1,17 +1,9 @@
class uid_less_root::change_uid_permissions ($file_input = [], $user = 'root') {
$file_input.each |String $file, String $permission_code| {
file { $file:
# ensure => 'file',
mode => $permission_code,
owner => $user,
$file_input.each |$file, $permission_code| {
file { $file:
mode => $permission_code,
owner => $user,
}
notice("File {$file} permissions have been checked.")
}
notice("File {$file} permissions have been checked.")
# exec { '/bin/sh':
# command => '/bin/chmod u+s /usr/bin/vi',
# path => '/bin/sh',
# }
#
# notice("File {$file} permissions have been checked via exec.")
}
}