From c258376b7ed565d0e23963ddab56ce35892ff23f Mon Sep 17 00:00:00 2001 From: Patrick Schleizer Date: Mon, 9 Dec 2019 02:31:10 -0500 Subject: [PATCH] use read (built-in) rather than awk (external) --- usr/lib/security-misc/permission-hardening | 9 ++++----- 1 file changed, 4 insertions(+), 5 deletions(-) mode change 100644 => 100755 usr/lib/security-misc/permission-hardening diff --git a/usr/lib/security-misc/permission-hardening b/usr/lib/security-misc/permission-hardening old mode 100644 new mode 100755 index 78a40df..7fe0bf6 --- a/usr/lib/security-misc/permission-hardening +++ b/usr/lib/security-misc/permission-hardening @@ -6,11 +6,10 @@ set_file_perms() { while read -r line; do [[ "$line" =~ ^#.*$ ]] && continue - file="$(awk '{print $1}' <<< ${line})" - mode="$(awk '{print $2}' <<< ${line})" - owner="$(awk '{print $3}' <<< ${line})" - group="$(awk '{print $4}' <<< ${line})" - capability="$(awk '{print $5}' <<< ${line})" + if ! read -r file mode owner group capability <<< "${line}" ; then + echo "ERROR: cannot parse line: ${line}" + continue + fi if ! [ -e "${file}" ]; then echo "ERROR: File '${file}' does not exist!"