From c2353b03a53b615df5df05a9bc3bfead64d851f8 Mon Sep 17 00:00:00 2001
From: Brice Waegeneire <brice@waegenei.re>
Date: Mon, 8 Feb 2021 11:12:57 +0100
Subject: [PATCH] bkctld-check-incs: Protect jail_config_epoch

Test if `incs_policy_file` exists before using it. Fixes #43.
---
 CHANGELOG.md          | 2 ++
 lib/bkctld-check-incs | 6 +++---
 2 files changed, 5 insertions(+), 3 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index ee794f8..816b3bb 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -16,6 +16,8 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ### Fixed
 
+* bkctld-check-incs: Protect `jail_config_epoch`
+
 ### Security
 
 ## [2.8.0] - 2020-11-28
diff --git a/lib/bkctld-check-incs b/lib/bkctld-check-incs
index 1a1f5c3..3a420df 100755
--- a/lib/bkctld-check-incs
+++ b/lib/bkctld-check-incs
@@ -20,10 +20,10 @@ for jail_name in $("${LIBDIR}/bkctld-list"); do
     # Today in ISO format
     today_iso=$(date +"%Y-%m-%d")
 
-    # get jail last configuration date
-    jail_config_epoch=$(date --date "$(stat -c %y ${incs_policy_file})" +"%s")
-
     if [ -n "${incs_policy_file}" ]; then
+        # get jail last configuration date
+        jail_config_epoch=$(date --date "$(stat -c %y ${incs_policy_file})" +"%s")
+
         # loop for each line in jail configuration
         for line in $(cat ${incs_policy_file}); do
             # inc date in ISO format