From c27cb81b57fce267134e549cc23b6c4e2ca3fefb Mon Sep 17 00:00:00 2001 From: Brice Waegeneire Date: Mon, 8 Feb 2021 11:12:57 +0100 Subject: [PATCH] bkctld-check-incs: Protect jail_config_epoch Test if `incs_policy_file` exists before using it. Fixes #43. --- CHANGELOG.md | 1 + lib/bkctld-check-incs | 6 +++--- 2 files changed, 4 insertions(+), 3 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 0c7d87b..0da34b4 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -19,6 +19,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0 ### Fixed * tests: clean jail configuration after each test +* bkctld-check-incs: Protect `jail_config_epoch` ### Security diff --git a/lib/bkctld-check-incs b/lib/bkctld-check-incs index 1a1f5c3..3a420df 100755 --- a/lib/bkctld-check-incs +++ b/lib/bkctld-check-incs @@ -20,10 +20,10 @@ for jail_name in $("${LIBDIR}/bkctld-list"); do # Today in ISO format today_iso=$(date +"%Y-%m-%d") - # get jail last configuration date - jail_config_epoch=$(date --date "$(stat -c %y ${incs_policy_file})" +"%s") - if [ -n "${incs_policy_file}" ]; then + # get jail last configuration date + jail_config_epoch=$(date --date "$(stat -c %y ${incs_policy_file})" +"%s") + # loop for each line in jail configuration for line in $(cat ${incs_policy_file}); do # inc date in ISO format