From 7b9bf9cf91727b0ff92ee902b337517f171de361 Mon Sep 17 00:00:00 2001 From: KeoOp <94304289+XHNan@users.noreply.github.com> Date: Wed, 8 Mar 2023 16:37:32 +0800 Subject: [PATCH] Fix a bug of finding readable file in sudoers.d Fix a bug of finding user readable file in /etc/sudoers.d ``` for filename in /etc/sudoers.d/*; do echo $filename # filename is a array done ``` ``` for filename in '/etc/sudoers.d/*'; do echo $filename # filename is a single long string done ``` --- linPEAS/builder/linpeas_parts/6_users_information.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/linPEAS/builder/linpeas_parts/6_users_information.sh b/linPEAS/builder/linpeas_parts/6_users_information.sh index b79a2aa..ed7127f 100644 --- a/linPEAS/builder/linpeas_parts/6_users_information.sh +++ b/linPEAS/builder/linpeas_parts/6_users_information.sh @@ -68,7 +68,7 @@ fi if ! [ "$IAMROOT" ] && [ -w '/etc/sudoers.d/' ]; then echo "You can create a file in /etc/sudoers.d/ and escalate privileges" | sed -${E} "s,.*,${SED_RED_YELLOW}," fi -for filename in '/etc/sudoers.d/*'; do +for filename in /etc/sudoers.d/*; do if [ -r "$filename" ]; then echo "Sudoers file: $filename is readable" | sed -${E} "s,.*,${SED_RED},g" grep -Iv "^$" "$filename" | grep -v "#" | sed "s,_proxy,${SED_RED},g" | sed "s,$sudoG,${SED_GREEN},g" | sed -${E} "s,$sudoVB1,${SED_RED_YELLOW}," | sed -${E} "s,$sudoVB2,${SED_RED_YELLOW}," | sed -${E} "s,$sudoB,${SED_RED},g" | sed "s,pwfeedback,${SED_RED},g"