diff options
Diffstat (limited to 'lynis')
| -rwxr-xr-x | lynis | 6 |
1 files changed, 6 insertions, 0 deletions
@@ -238,15 +238,21 @@ Make sure to execute ${PROGRAM_NAME} from untarred directory or check your insta if [ -z "${LOGFILE}" ]; then # Try creating a log file in temporary directory if [ ! -f /tmp/lynis.log ]; then + if [ -L /tmp/lynis.log ]; then echo "Log file is symlinked, which can introduce the risk of a symlink attack."; exit 1; fi touch /tmp/lynis.log if [ $? -eq 0 ]; then LOGFILE="/tmp/lynis.log"; else LOGFILE="/dev/null"; fi else LOGFILE="/tmp/lynis.log" fi + else + if [ -L "${LOGFILE}" ]; then echo "Log file is symlinked, which can introduce the risk of a symlink attack."; exit 1; fi fi if [ -z "${REPORTFILE}" ]; then touch /tmp/lynis-report.dat + if [ -L /tmp/lynis-report.dat ]; then echo "Report file is symlinked, which can introduce the risk of a symlink attack."; exit 1; fi if [ $? -eq 0 ]; then REPORTFILE="/tmp/lynis-report.dat"; else REPORTFILE="/dev/null"; fi + else + if [ -L "${REPORTFILE}" ]; then echo "Report file is symlinked, which can introduce the risk of a symlink attack."; exit 1; fi fi fi # |