free
/
freedomboneeee
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Fixing tripwire policy

This commit is contained in:
Bob Mottram 2017-08-05 16:13:43 +01:00
parent b7f63f6ff1
commit b432410716
1 changed files with 3 additions and 37 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

40
src/freedombone-base-tripwire
View File

@ -120,43 +120,9 @@ function install_tripwire {
if ! grep -q '!/etc/share/tt-rss/lock' /etc/tripwire/twpol.txt; then
sed -i '\|/etc\t\t->.*|a\ !/etc/share/tt-rss/lock ;' /etc/tripwire/twpol.txt
fi
# Ignore additional install files
if ! grep -q '!/usr/local/bin/freedombone' /etc/tripwire/twpol.txt; then
sed -i '\|/usr/local/sbin.*|a\ !/usr/local/bin/freedombone* ;' /etc/tripwire/twpol.txt
fi
if ! grep -q '!=/usr/local/bin' /etc/tripwire/twpol.txt; then
sed -i '\|/usr/local/sbin.*|a\ !=/usr/local/bin ;' /etc/tripwire/twpol.txt
fi
if ! grep -q '!/usr/local/bin/addremove' /etc/tripwire/twpol.txt; then
sed -i '\|/usr/local/sbin.*|a\ !/usr/local/bin/addremove ;' /etc/tripwire/twpol.txt
fi
if ! grep -q '!/usr/local/bin/backup' /etc/tripwire/twpol.txt; then
sed -i '\|/usr/local/sbin.*|a\ !/usr/local/bin/backup ;' /etc/tripwire/twpol.txt
fi
if ! grep -q '!/usr/local/bin/backup2friends' /etc/tripwire/twpol.txt; then
sed -i '\|/usr/local/sbin.*|a\ !/usr/local/bin/backup2friends ;' /etc/tripwire/twpol.txt
fi
if ! grep -q '!/usr/local/bin/batman' /etc/tripwire/twpol.txt; then
sed -i '\|/usr/local/sbin.*|a\ !/usr/local/bin/batman ;' /etc/tripwire/twpol.txt
fi
if ! grep -q '!/usr/local/bin/control' /etc/tripwire/twpol.txt; then
sed -i '\|/usr/local/sbin.*|a\ !/usr/local/bin/control ;' /etc/tripwire/twpol.txt
fi
if ! grep -q '!/usr/local/bin/controluser' /etc/tripwire/twpol.txt; then
sed -i '\|/usr/local/sbin.*|a\ !/usr/local/bin/controluser ;' /etc/tripwire/twpol.txt
fi
if ! grep -q '!/usr/local/bin/cronic' /etc/tripwire/twpol.txt; then
sed -i '\|/usr/local/sbin.*|a\ !/usr/local/bin/cronic ;' /etc/tripwire/twpol.txt
fi
if ! grep -q '!/usr/local/bin/meshavahi' /etc/tripwire/twpol.txt; then
sed -i '\|/usr/local/sbin.*|a\ !/usr/local/bin/meshavahi ;' /etc/tripwire/twpol.txt
fi
if ! grep -q '!/usr/local/bin/restore' /etc/tripwire/twpol.txt; then
sed -i '\|/usr/local/sbin.*|a\ !/usr/local/bin/restore ;' /etc/tripwire/twpol.txt
fi
if ! grep -q '!/usr/local/bin/restorefromfriend' /etc/tripwire/twpol.txt; then
sed -i '\|/usr/local/sbin.*|a\ !/usr/local/bin/restorefromfriend ;' /etc/tripwire/twpol.txt
fi
# Not much is in /usr/local/bin other than project commands and avoiding it removes
# problems with updates. This is a tradeoff, but not by much.
sed -i '/\/usr\/local\/bin/d' /etc/tripwire/twpol.txt
# Avoid logging the changed database
sed -i 's|$(TWETC)/tw.pol.*||g' /etc/tripwire/twpol.txt