Skip to content

Fix permission value in check #70

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
texasaggie97 wants to merge 3 commits into from
Closed

Fix permission value in check #70

Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
858ea0a
Enhance USBGuard verification by adding checks for group ownership, p…
texasaggie97 Aug 19, 2025
e81d478
/etc/usbguard/rules.conf actually has permission 0600
texasaggie97 Sep 2, 2025
5aabc6d
Merge branch 'master' into dev/texasaggie97/add-usbguard-config-perm-…
texasaggie97 Sep 3, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 2 additions & 2 deletions nilrt_snac/_configs/_usbguard_config.py
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -46,8 +46,8 @@ def verify(self, args: argparse.Namespace) -> bool:
if not _check_group_ownership(str(rules_file), "root"):
logger.error(f"ERROR: {rules_file} is not owned by the 'root' group.")
return False
if not _check_permissions(str(rules_file), 0o640):
logger.error(f"ERROR: {rules_file} does not have 640 permissions.")
if not _check_permissions(str(rules_file), 0o600):
logger.error(f"ERROR: {rules_file} does not have 600 permissions.")
return False
if not _check_owner(str(rules_file), "root"):
logger.error(f"ERROR: {rules_file} is not owned by 'root'.")
Expand Down
Loading