diff --git a/usr/local/share/bastille/limits.sh b/usr/local/share/bastille/limits.sh index e771e514..90df5707 100644 --- a/usr/local/share/bastille/limits.sh +++ b/usr/local/share/bastille/limits.sh @@ -165,30 +165,29 @@ for _jail in ${JAILS}; do else # Add rctl rule to rctl.conf _rctl_rule="jail:${_jail}:${OPTION}:deny=${VALUE}/jail" - _rctl_rule_log="jail:${_jail}:${OPTION}:log=${VALUE}/jail" - + _rctl_rule_log="jail:${_jail}:${OPTION}:log=${VALUE}/jail" # Check whether the entry already exists and, if so, update it. -- cwells if grep -qs "jail:${_jail}:${OPTION}:deny" "${bastille_jailsdir}/${_jail}/rctl.conf"; then _escaped_option=$(echo "${OPTION}" | sed 's/\//\\\//g') _escaped_rctl_rule=$(echo "${_rctl_rule}" | sed 's/\//\\\//g') - _escaped_rctl_rule_log=$(echo "${_rctl_rule_log}" | sed 's/\//\\\//g') sed -i '' -E "s/jail:${_jail}:${_escaped_option}:deny.+/${_escaped_rctl_rule}/" "${bastille_jailsdir}/${_jail}/rctl.conf" - if [ "${OPT_LOG}" -eq 1 ]; then - sed -i '' -E "s/jail:${_jail}:${_escaped_option}:log.+/${_escaped_rctl_rule_log}/" "${bastille_jailsdir}/${_jail}/rctl.conf" - fi else # Just append the entry. -- cwells echo "${_rctl_rule}" >> "${bastille_jailsdir}/${_jail}/rctl.conf" - if [ "${OPT_LOG}" -eq 1 ]; then - echo "${_rctl_rule_log}" >> "${bastille_jailsdir}/${_jail}/rctl.conf" - fi + echo -e "${OPTION} ${VALUE}" + rctl -a "${_rctl_rule}" fi - echo -e "${OPTION} ${VALUE}" - rctl -a "${_rctl_rule}" if [ "${OPT_LOG}" -eq 1 ]; then + if grep -qs "jail:${_jail}:${OPTION}:deny" "${bastille_jailsdir}/${_jail}/rctl.conf"; then + _escaped_option=$(echo "${OPTION}" | sed 's/\//\\\//g') + _escaped_rctl_rule_log=$(echo "${_rctl_rule_log}" | sed 's/\//\\\//g') + sed -i '' -E "s/jail:${_jail}:${_escaped_option}:log.+/${_escaped_rctl_rule_log}/" "${bastille_jailsdir}/${_jail}/rctl.conf" + else # Just append the entry. -- cwells + echo "${_rctl_rule_log}" >> "${bastille_jailsdir}/${_jail}/rctl.conf" + fi + echo -e "[LOGGING]: ${OPTION} ${VALUE}" rctl -a "${_rctl_rule_log}" fi - fi ;; remove) @@ -231,7 +230,7 @@ for _jail in ${JAILS}; do done < "${bastille_jailsdir}/${_jail}/rctl.conf" echo "RCTL limits cleared." fi - ;; + ;; list|show)