From 7cb6055af5b81e5eb1779ee3270b473dfd784690 Mon Sep 17 00:00:00 2001 From: Jeremy Dubois Date: Fri, 9 Oct 2020 14:09:21 +0200 Subject: [PATCH] Fix check_cronpath Do not check PATH=XXX but only XXX because XXX can also be in quotes (PATH="XXX" would not be matched) --- CHANGELOG | 6 ++++++ evocheck.sh | 4 ++-- 2 files changed, 8 insertions(+), 2 deletions(-) diff --git a/CHANGELOG b/CHANGELOG index 26b1de4..8ed1ae8 100644 --- a/CHANGELOG +++ b/CHANGELOG @@ -7,6 +7,12 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0 ## [Unreleased] +## [6.7.5] - 2020-10-09 + +### Fixed + +- Fix check_cronpath - Do not check PATH=XXX but only XXX because XXX can also be in quotes (PATH="XXX" would not be matched) + ## [6.7.4] - 2020-08-04 ### Added diff --git a/evocheck.sh b/evocheck.sh index dfbad68..3bde7ac 100755 --- a/evocheck.sh +++ b/evocheck.sh @@ -3,7 +3,7 @@ # EvoCheck # Script to verify compliance of an OpenBSD server powered by Evolix -readonly VERSION="6.7.4" +readonly VERSION="6.7.5" # Disable LANG* @@ -262,7 +262,7 @@ check_rsync(){ } check_cronpath(){ - grep -q "PATH=/bin:/sbin:/usr/bin:/usr/sbin:/usr/local/bin:/usr/local/sbin:/usr/share/scripts" /var/cron/tabs/root || failed "IS_CRONPATH" "" + grep -q "/bin:/sbin:/usr/bin:/usr/sbin:/usr/local/bin:/usr/local/sbin:/usr/share/scripts" /var/cron/tabs/root || failed "IS_CRONPATH" "" } check_tmp1777(){