mirror of
https://github.com/aaPanel/aaPanel.git
synced 2026-08-24 16:42:25 +02:00
jose
3ac20e08ce
1. Add disk IO information to the homepage 2. Add a clear list button in the upload window 3. Optimize the background task overhead of the panel 4. Optimize the disk information caching mechanism 5. Panel Pro edition is online 6. Optimize panel resource usage 7. Optimize SSL certificate renewal 8. Fix the problem of reporting an error when the security entrance is empty 9. Fix the problem of infinite recursion when copying directories in extreme cases
58 lines
2.2 KiB
Python
58 lines
2.2 KiB
Python
#!/usr/bin/python
|
|
# coding: utf-8
|
|
# -------------------------------------------------------------------
|
|
# 宝塔Linux面板
|
|
# -------------------------------------------------------------------
|
|
# Copyright (c) 2015-2099 宝塔软件(http://bt.cn) All rights reserved.
|
|
# -------------------------------------------------------------------
|
|
# Author: linxiao
|
|
# -------------------------------------------------------------------
|
|
|
|
# -------------------------------------------------------------------
|
|
# 数据库备份权限检测
|
|
# -------------------------------------------------------------------
|
|
|
|
import os, re, public, panelMysql
|
|
|
|
_title = 'Database backup permission detection'
|
|
_version = 1.0 # 版本
|
|
_ps = "Check whether the MySQL root user has database backup permissions" # 描述
|
|
_level = 3 # 风险级别： 1.提示(低) 2.警告(中) 3.危险(高)
|
|
_date = '2020-09-19' # 最后更新时间
|
|
_ignore = os.path.exists("data/warning/ignore/sw_database_priv.pl")
|
|
_tips = [
|
|
"To temporarily access the database without authorization, it is recommended to restore all permissions of the root user.",
|
|
]
|
|
|
|
_help = ''
|
|
|
|
|
|
def check_run():
|
|
"""检测root用户是否具备数据库备份权限
|
|
|
|
@author linxiao<2020-9-18>
|
|
@return (bool, msg)
|
|
"""
|
|
mycnf_file = '/etc/my.cnf'
|
|
if not os.path.exists(mycnf_file):
|
|
return True, 'Risk-free'
|
|
mycnf = public.readFile(mycnf_file)
|
|
port_tmp = re.findall(r"port\s*=\s*(\d+)", mycnf)
|
|
if not port_tmp:
|
|
return True, 'Risk-free'
|
|
if not public.ExecShell("lsof -i :{}".format(port_tmp[0]))[0]:
|
|
return True, 'Risk-free'
|
|
|
|
base_backup_privs = ["Lock_tables_priv", "Select_priv"]
|
|
select_sql = "Select {} FROM mysql.user WHERE user='root' and " \
|
|
"host=SUBSTRING_INDEX((select current_user()),'@', " \
|
|
"-1);".format(",".join(base_backup_privs))
|
|
select_result = panelMysql.panelMysql().query(select_sql)
|
|
if not select_result:
|
|
return False, "The root user has insufficient authority to execute mysqldump backup."
|
|
select_result = select_result[0]
|
|
for priv in select_result:
|
|
if priv.lower() != "y":
|
|
return False, "The root user has insufficient authority to execute mysqldump backup."
|
|
return True, 'Risk-free'
|