mirror of
https://github.com/aaPanel/aaPanel.git
synced 2026-09-23 09:54:53 +02:00
Jack
a24f2e23c6
1. Added Mail Marketing Automation trigger tasks 2. Added Mail Marketing Groups Import, Export, Merge 3. Added Mail Marketing Subscribers to support paste import 4. Added Mail Marketing Template Import Export Duplicate 5. Added Mail server add timed automatic reply 6. Added HTTPS Protection function for Website (disables automatic HTTP to HTTPS redirection when enabled) 7. Optimize Website Interface Button Integration 8. Optimize the response speed of WP Toolkit interface
58 lines
2.4 KiB
Python
58 lines
2.4 KiB
Python
#!/usr/bin/python
|
|
# coding: utf-8
|
|
# -------------------------------------------------------------------
|
|
# aapanel
|
|
# -------------------------------------------------------------------
|
|
# Copyright (c) 2015-2099 aapanel(http://www.aapanel.com) All rights reserved.
|
|
# -------------------------------------------------------------------
|
|
# Author: linxiao
|
|
# -------------------------------------------------------------------
|
|
|
|
# -------------------------------------------------------------------
|
|
# 数据库备份权限检测
|
|
# -------------------------------------------------------------------
|
|
|
|
import os, re, public, panelMysql
|
|
|
|
_title = 'Database backup permission detection'
|
|
_version = 1.0 # 版本
|
|
_ps = "Check whether the MySQL root user has database backup privileges" # 描述
|
|
_level = 3 # 风险级别： 1.提示(低) 2.警告(中) 3.危险(高)
|
|
_date = '2020-09-19' # 最后更新时间
|
|
_ignore = os.path.exists("data/warning/ignore/sw_database_priv.pl")
|
|
_tips = [
|
|
"To temporarily enter the database without authorization, it is recommended to restore all permissions of the root user.",
|
|
]
|
|
|
|
_help = ''
|
|
_remind = 'This scheme ensures that the root user has the permission to backup the database and ensures that the database backup work is carried out. '
|
|
|
|
def check_run():
|
|
"""检测root用户是否具备数据库备份权限
|
|
|
|
@author linxiao<2020-9-18>
|
|
@return (bool, msg)
|
|
"""
|
|
mycnf_file = '/etc/my.cnf'
|
|
if not os.path.exists(mycnf_file):
|
|
return True, 'Risk-free'
|
|
mycnf = public.readFile(mycnf_file)
|
|
port_tmp = re.findall(r"port\s*=\s*(\d+)", mycnf)
|
|
if not port_tmp:
|
|
return True, 'Risk-free'
|
|
if not public.ExecShell("lsof -i :{}".format(port_tmp[0]))[0]:
|
|
return True, 'Risk-free'
|
|
|
|
base_backup_privs = ["Lock_tables_priv", "Select_priv"]
|
|
select_sql = "Select {} FROM mysql.user WHERE user='root' and " \
|
|
"host=SUBSTRING_INDEX((select current_user()),'@', " \
|
|
"-1);".format(",".join(base_backup_privs))
|
|
select_result = panelMysql.panelMysql().query(select_sql)
|
|
if not select_result:
|
|
return False, "The root user has insufficient privileges to perform mysqldump backups."
|
|
select_result = select_result[0]
|
|
for priv in select_result:
|
|
if priv.lower() != "y":
|
|
return False, "The root user has insufficient privileges to perform mysqldump backups."
|
|
return True, 'Risk-free'
|