beenull/PhyrePanel-mirror
1
0
Fork 0
mirror of https://github.com/PhyreApps/PhyrePanel.git synced 2024-11-21 23:20:24 +00:00
Code Issues Projects Releases Packages Wiki Activity

update

Browse source
This commit is contained in:
Bozhidar 2024-04-24 16:44:19 +03:00
parent 1bd2c78dec
commit 4aeff50187
2 changed files with 23 additions and 12 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
web/app/Actions/CreateLinuxWebUser.php
View file

@ -38,6 +38,12 @@ class CreateLinuxWebUser
$command = 'sudo echo '.$username.':'.$password.' | chpasswd -e';
$output .= shell_exec($command);
$homeDir = '/home';
if (substr(sprintf('%o', fileperms($homeDir)), -4) !== '0711') {
$command = 'sudo chmod 711 /home';
$output .= shell_exec($command);
}
$command = 'sudo chmod 711 /home/'.$username;
$output .= shell_exec($command);

29
web/tests/Unit/SecurityTest.php
View file

@ -77,6 +77,11 @@ class SecurityTest extends ActionTestCase
$hostingSubscription = $callHostingSubscriptionStoreResponse['data']['hostingSubscription'];
// Check user home dir permissions
$homeDir = '/home';
$this->assertDirectoryExists($homeDir);
$getHomeDirPermission = substr(sprintf('%o', fileperms($homeDir)), -4);
$this->assertSame('0711', $getHomeDirPermission);
$userHomeDir = '/home/' . $hostingSubscription['system_username'];
$this->assertDirectoryExists($userHomeDir);
$getUserHomeDirPermission = substr(sprintf('%o', fileperms($userHomeDir)), -4);
@ -109,18 +114,18 @@ class SecurityTest extends ActionTestCase
$this->assertTrue($callHostingSubscriptionStoreResponse['status'] == 'ok');
$secondHostingSubscription = $callHostingSubscriptionStoreResponse['data']['hostingSubscription'];
// // Try to open /home directory with linux user
// $output = shell_exec("sudo -H -u ".$hostingSubscription['system_username']." bash -c 'ls -la /home'");
// $this->assertSame($output, null);
//
// // Try to open /home/$user with linux user
// $output = shell_exec("sudo -H -u ".$hostingSubscription['system_username']." bash -c 'ls -la /home/".$hostingSubscription['system_username']."'");
// $this->assertTrue(str_contains($output, 'public_html'));
// $this->assertTrue(str_contains($output, $hostingSubscription['system_username']));
//
// // Try to open /home/$user directory with another linux user
// $output = shell_exec("sudo -H -u ".$secondHostingSubscription['system_username']." bash -c 'ls -la /home/".$hostingSubscription['system_username']."'");
// $this->assertSame($output, null);
// Try to open /home directory with linux user
$output = shell_exec("sudo -H -u ".$hostingSubscription['system_username']." bash -c 'ls -la /home'");
$this->assertSame($output, null);
// Try to open /home/$user with linux user
$output = shell_exec("sudo -H -u ".$hostingSubscription['system_username']." bash -c 'ls -la /home/".$hostingSubscription['system_username']."'");
$this->assertTrue(str_contains($output, 'public_html'));
$this->assertTrue(str_contains($output, $hostingSubscription['system_username']));
// Try to open /home/$user directory with another linux user
$output = shell_exec("sudo -H -u ".$secondHostingSubscription['system_username']." bash -c 'ls -la /home/".$hostingSubscription['system_username']."'");
$this->assertSame($output, null);
}