mirror of
				https://gitea.blesmrt.net/mikaela/shell-things.git
				synced 2025-11-04 03:17:34 +01:00 
			
		
		
		
	
		
			
				
	
	
		
			60 lines
		
	
	
		
			1.6 KiB
		
	
	
	
		
			Bash
		
	
	
		
			Executable File
		
	
	
	
	
			
		
		
	
	
			60 lines
		
	
	
		
			1.6 KiB
		
	
	
	
		
			Bash
		
	
	
		
			Executable File
		
	
	
	
	
#!/usr/bin/env bash
 | 
						|
# This script removes permissions from other people than the owner to 
 | 
						|
# files/folders that they don't have access to and where they don't need
 | 
						|
# access.
 | 
						|
## THIS SCRIPT HAS MOVED TO SHELL-THINGS AS "chmod"!
 | 
						|
## https://raw.github.com/Mkaysi/shell-things/master/chmod
 | 
						|
 | 
						|
GROUP=`id -gn`
 | 
						|
 | 
						|
wwwdata=`head -n1 wwwuser`
 | 
						|
 | 
						|
echo "Denying Reading, Writing and eXecuting from other users in"
 | 
						|
echo "your home directory $HOME ."
 | 
						|
echo ""
 | 
						|
chmod g-rwx,o-rwx $HOME -R
 | 
						|
 | 
						|
echo "Creating empty oidentd user configuration file, if it doesn't"
 | 
						|
echo "already exist."
 | 
						|
echo ""
 | 
						|
touch ~/.oidentd.conf
 | 
						|
 | 
						|
echo "Allowing other users to read oidentd configuration file."
 | 
						|
chmod u+rw,g-wx+r,o-wx+r ~/.oidentd.conf
 | 
						|
echo ""
 | 
						|
 | 
						|
echo "Denying directory listing from other users and allowing them to"
 | 
						|
echo "access files/folders where they have permissions."
 | 
						|
touch ~/.ICEauthority
 | 
						|
chmod o-rw+x,g-rw+x ~
 | 
						|
echo ""
 | 
						|
 | 
						|
echo "Creating apache2 UserDir..."
 | 
						|
mkdir -p ~/public_html/
 | 
						|
echo ""
 | 
						|
echo "Allowing everyone to Read and eXecute everything in your apache2"
 | 
						|
echo "userdir and hoping that we are the only user in group $GROUP..."
 | 
						|
chmod o+rx-w,g+rxw ~/public_html/ -R
 | 
						|
echo ""
 | 
						|
 | 
						|
echo "Setting corret permissions to other files which others should access."
 | 
						|
touch ~/.face
 | 
						|
touch ~/.forward
 | 
						|
echo ""
 | 
						|
chmod a+r-wx,u+rw ~/.face
 | 
						|
chmod a+r-wx,u+rw ~/.forward
 | 
						|
 | 
						|
echo "Setting access lists. This requires package acl to be installed"
 | 
						|
echo "and kernel support for it and mount point being mounted with option"
 | 
						|
echo "acl"
 | 
						|
echo ""
 | 
						|
 | 
						|
setfacl -R -m u:$wwwdata:rwx ~/public_html 
 | 
						|
setfacl -R -m d:u:$wwwdata:rwx ~/public_html 
 | 
						|
 | 
						|
if [ -f chmod.2 ]; then
 | 
						|
    ./chmod.2
 | 
						|
    fi
 | 
						|
 | 
						|
echo "Everything is now done :)"
 |