Report for grub

audit/system/plugins/grub.py

@@ -5,4 +5,5 @@ def grub() -> dict:
     grub['description'] = 'Change boot permission'
     grub['filename'] = '/boot/grub/grub.cfg'
     grub['value'] = 0o600
+    grub['resolve'] = 'chmod 600 /boot/grub/grub.cfg'
     return grub

core/plugins/grub.py

@@ -29,10 +29,11 @@ class Grub:
 
                 if permission != oct(self._object['value']):
                     self._reports['result'] = 'failed'
+                    self._reports['resolve'] = self._object['resolve']
                 else:
                     self._reports['result'] = 'success'
                 self._reports['description'] = self._object['description']
-                self._reports['recommand_value'] = self._object['value']
+                self._reports['current_value'] = permission[2:]
         except FileNotFoundError:
             self._reports['grub']['error'] = \
                 f'File {path} not found' 

core/report.py

@@ -53,8 +53,6 @@ def generateHtmlReport(data):
     if 'grub' in data['system']:
         dataJinja2['grub'] = data['system']['grub']
         dataJinja2['grub']['accordion-id'] = f"accordion-grub-1"
-        #_generateAccordion(dataJinja2['grub'], 'grub')
-        print(dataJinja2['grub'])
 
     dataJinja2['year'] = '2023'
     dataJinja2['hostname'] = data['hostname']

reports/templates/grub.html.j2

@@ -16,19 +16,20 @@
       <div class="accordion-body">
         {{ data['grub']['description'] }}. <br />
         {% if data['grub']['result'] == 'success' %}
-	        <div class="bd-example-snippet bd-code-snippet">
+        Your current permission of this file:
-	          <div class="highlight">
-	            <pre tabindex="0" class="chroma"><code class="language-shell">
-                {{ data['grub']['recommand_value'] }}
-	            </pre></code>
-	          </div>
-	        </div>
-        {% else %}
-	    For resolving the issue, add this line in the <strong>{{ data['filename'] }}</strong> profile:
 	    <div class="bd-example-snippet bd-code-snippet">
 	      <div class="highlight">
 	        <pre tabindex="0" class="chroma"><code class="language-shell">
- 	        {{ data['grub']['recommand_value'] }}
+            {{ data['grub']['current_value'] }}
+	        </pre></code>
+	      </div>
+	    </div>
+        {% else %}
+	    For resolving the issue, change the permission of the file:
+	    <div class="bd-example-snippet bd-code-snippet">
+	      <div class="highlight">
+	        <pre tabindex="0" class="chroma"><code class="language-shell">
+ 	        {{ data['grub']['resolve'] }}
 	        </pre></code>
 	      </div>
 	    </div>