beenull/PhyrePanel-mirror
1
0
Fork 0
mirror of https://github.com/PhyreApps/PhyrePanel.git synced 2024-11-22 07:30:25 +00:00
Code Issues Projects Releases Packages Wiki Activity

update

Browse source
This commit is contained in:
Bozhidar 2024-04-24 16:44:19 +03:00
parent 1bd2c78dec
commit 4aeff50187
2 changed files with 23 additions and 12 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
web/app/Actions/CreateLinuxWebUser.php
View file

@ -38,6 +38,12 @@ class CreateLinuxWebUser
$command = 'sudo echo '.$username.':'.$password.' | chpasswd -e'; $command = 'sudo echo '.$username.':'.$password.' | chpasswd -e';
$output .= shell_exec($command); $output .= shell_exec($command);
$homeDir = '/home';
if (substr(sprintf('%o', fileperms($homeDir)), -4) !== '0711') {
$command = 'sudo chmod 711 /home';
$output .= shell_exec($command);
}
$command = 'sudo chmod 711 /home/'.$username; $command = 'sudo chmod 711 /home/'.$username;
$output .= shell_exec($command); $output .= shell_exec($command);

29
web/tests/Unit/SecurityTest.php
View file

@ -77,6 +77,11 @@ class SecurityTest extends ActionTestCase
$hostingSubscription = $callHostingSubscriptionStoreResponse['data']['hostingSubscription']; $hostingSubscription = $callHostingSubscriptionStoreResponse['data']['hostingSubscription'];
// Check user home dir permissions // Check user home dir permissions
$homeDir = '/home';
$this->assertDirectoryExists($homeDir);
$getHomeDirPermission = substr(sprintf('%o', fileperms($homeDir)), -4);
$this->assertSame('0711', $getHomeDirPermission);
$userHomeDir = '/home/' . $hostingSubscription['system_username']; $userHomeDir = '/home/' . $hostingSubscription['system_username'];
$this->assertDirectoryExists($userHomeDir); $this->assertDirectoryExists($userHomeDir);
$getUserHomeDirPermission = substr(sprintf('%o', fileperms($userHomeDir)), -4); $getUserHomeDirPermission = substr(sprintf('%o', fileperms($userHomeDir)), -4);
@ -109,18 +114,18 @@ class SecurityTest extends ActionTestCase
$this->assertTrue($callHostingSubscriptionStoreResponse['status'] == 'ok'); $this->assertTrue($callHostingSubscriptionStoreResponse['status'] == 'ok');
$secondHostingSubscription = $callHostingSubscriptionStoreResponse['data']['hostingSubscription']; $secondHostingSubscription = $callHostingSubscriptionStoreResponse['data']['hostingSubscription'];
// // Try to open /home directory with linux user // Try to open /home directory with linux user
// $output = shell_exec("sudo -H -u ".$hostingSubscription['system_username']." bash -c 'ls -la /home'"); $output = shell_exec("sudo -H -u ".$hostingSubscription['system_username']." bash -c 'ls -la /home'");
// $this->assertSame($output, null); $this->assertSame($output, null);
//
// // Try to open /home/$user with linux user // Try to open /home/$user with linux user
// $output = shell_exec("sudo -H -u ".$hostingSubscription['system_username']." bash -c 'ls -la /home/".$hostingSubscription['system_username']."'"); $output = shell_exec("sudo -H -u ".$hostingSubscription['system_username']." bash -c 'ls -la /home/".$hostingSubscription['system_username']."'");
// $this->assertTrue(str_contains($output, 'public_html')); $this->assertTrue(str_contains($output, 'public_html'));
// $this->assertTrue(str_contains($output, $hostingSubscription['system_username'])); $this->assertTrue(str_contains($output, $hostingSubscription['system_username']));
//
// // Try to open /home/$user directory with another linux user // Try to open /home/$user directory with another linux user
// $output = shell_exec("sudo -H -u ".$secondHostingSubscription['system_username']." bash -c 'ls -la /home/".$hostingSubscription['system_username']."'"); $output = shell_exec("sudo -H -u ".$secondHostingSubscription['system_username']." bash -c 'ls -la /home/".$hostingSubscription['system_username']."'");
// $this->assertSame($output, null); $this->assertSame($output, null);
} }