Analyzing grub

core/config.py

@@ -13,6 +13,7 @@ AUDIT_SYSTEM = [
     "postfix",
     "apache",
     "localaccount",
+    "grub",
 ]
 
 AUDIT_APPLICATION = [
@@ -31,6 +32,7 @@ def generateConfig() -> dict:
     config["system"]["sysctl"] = dict()
     config["system"]["sysctl"]["sysctl_file"] = "/etc/sysctl.conf"
     config['system']['localaccount'] = dict()
+    config['system']['grub'] = dict()
     config["system"]["exclude_plugins"] = list()
     # Application
     config["application"] = dict()

core/main.py

@@ -5,6 +5,7 @@ from core.plugins.sysctl import Sysctl
 from core.plugins.postfix import Postfix
 from core.plugins.apache import Apache
 from core.plugins.localaccount import LocalAccount
+from core.plugins.grub import Grub
 from core.report import generateHtmlReport
 from core.config import AUDIT_SYSTEM, AUDIT_APPLICATION, generateConfig, parsingConfigFile
 from core.dispatcher import Dispatcher
@@ -70,7 +71,6 @@ def main():
                     audit,
                     configs["system"][audit]
                 )
-
     if args.audit == "application":
         print("Auditing the application...")
         pass
@@ -102,5 +102,11 @@ def localaccount(*args) -> dict:
     account.runAudit()
     return account.getReports()
 
+@Dispatcher.register_plugins
+def grub(*args) -> dict:
+    grub = Grub(args[1])
+    grub.runAudit()
+    return grub.getReports()
+
 if __name__ == "__main__":
     main()

core/plugins/grub.py

@@ -0,0 +1,85 @@
+#!/usr/bin/env python3
+
+from os import stat
+from os.path import isfile
+from audit.system.plugins.grub import grub
+
+
+class Grub:
+    def __init__(self, arguments):
+        self._object = grub()
+        self._reports = dict()
+
+        # Create the report
+        self._constructReports()
+
+    def runAudit(self):
+        print("Running test for Grub")
+        self._analyzingGrub()
+
+    def getReports(self) -> dict:
+        return self._reports
+
+    def _analyzingGrub(self):
+        # Check if the file exist
+        path = self._object['filename']
+        try:
+            if isfile(path):
+                permission = self._check_permission(path)
+
+                if permission != oct(self._object['value']):
+                    self._reports['result'] = 'failed'
+                else:
+                    self._reports['result'] = 'success'
+                self._reports['description'] = self._object['description']
+                self._reports['recommand_value'] = self._object['value']
+        except FileNotFoundError:
+            self._reports['grub']['error'] = \
+                f'File {path} not found' 
+   
+    def _check_permission(self, path) -> oct:
+        """
+            In this function, we get the permission of the file
+        """
+        permission = stat(path).st_mode
+
+        octal = 0o000
+        # Check user permission
+        if permission & 0o400: # Read
+            octal += 0o400
+        if permission & 0o200: # Write
+            octal += 0o200
+        if permission & 0o100: # Execute
+            octal += 0o100
+
+        # Check group permission
+        if permission & 0o040:
+            octal += 0o040
+        if permission & 0o020:
+            octal += 0o020
+        if permission & 0o010:
+            octal += 0o010
+
+        # Check other permission
+        if permission & 0o004:
+            octal += 0o004
+        if permission & 0o002:
+            octal += 0o002
+        if permission & 0o001:
+            octal += 0o001
+
+        return oct(octal)
+
+    def _constructReports(self):
+        """
+            Construct dictionary for result of the tests
+            Each entry contains:
+            Key:
+              - filename: filename of the test
+              - line: line of the test
+              - parse: Display the line where the vulnerabilites has been found
+              - description: description of the vulnerability
+              - level: high, medium or low
+        """
+        self._reports = dict()
+        self._reports['filename'] = self._object['filename']

core/report.py

@@ -50,6 +50,11 @@ def generateHtmlReport(data):
             _generateAccordion(dataJinja2['profile']['vulnerabilities'], 'profile')
         if 'pwd_quality' in data['system']['localaccount']:
             pass
+    if 'grub' in data['system']:
+        dataJinja2['grub'] = data['system']['grub']
+        dataJinja2['grub']['accordion-id'] = f"accordion-grub-1"
+        #_generateAccordion(dataJinja2['grub'], 'grub')
+        print(dataJinja2['grub'])
 
     dataJinja2['year'] = '2023'
     dataJinja2['hostname'] = data['hostname']