From ec29c6acad2370c5aed10c94b431d7bf6e421a90 Mon Sep 17 00:00:00 2001 From: netblue30 Date: Sun, 24 Jan 2021 11:49:48 -0500 Subject: profstats --- src/profstats/main.c | 20 ++++++++++++++++++++ 1 file changed, 20 insertions(+) (limited to 'src/profstats') diff --git a/src/profstats/main.c b/src/profstats/main.c index 4c1221464..1380c87f7 100644 --- a/src/profstats/main.c +++ b/src/profstats/main.c @@ -30,6 +30,8 @@ static int cnt_seccomp = 0; static int cnt_caps = 0; static int cnt_dbus_system_none = 0; static int cnt_dbus_user_none = 0; +static int cnt_dbus_system_filter = 0; +static int cnt_dbus_user_filter = 0; static int cnt_dotlocal = 0; static int cnt_globalsdotlocal = 0; static int cnt_netnone = 0; @@ -152,8 +154,12 @@ void process_file(const char *fname) { cnt_privateetc++; else if (strncmp(ptr, "dbus-system none", 16) == 0) cnt_dbus_system_none++; + else if (strncmp(ptr, "dbus-system", 11) == 0) + cnt_dbus_system_filter++; else if (strncmp(ptr, "dbus-user none", 14) == 0) cnt_dbus_user_none++; + else if (strncmp(ptr, "dbus-user", 9) == 0) + cnt_dbus_user_filter++; else if (strncmp(ptr, "include ", 8) == 0) { // not processing .local files if (strstr(ptr, ".local")) { @@ -257,7 +263,9 @@ int main(int argc, char **argv) { int whitelistrunuser = cnt_whitelistrunuser; int whitelistusrshare = cnt_whitelistusrshare; int dbussystemnone = cnt_dbus_system_none; + int dbussystemfilter = cnt_dbus_system_filter; int dbususernone = cnt_dbus_user_none; + int dbususerfilter = cnt_dbus_user_filter; int ssh = cnt_ssh; int mdwx = cnt_mdwx; @@ -278,6 +286,16 @@ int main(int argc, char **argv) { cnt_globalsdotlocal = globalsdotlocal + 1; if (cnt_whitelistrunuser > (whitelistrunuser + 1)) cnt_whitelistrunuser = whitelistrunuser + 1; + if (cnt_seccomp > (seccomp + 1)) + cnt_seccomp = seccomp + 1; + if (cnt_dbus_user_none > (dbususernone + 1)) + cnt_dbus_user_none = dbususernone + 1; + if (cnt_dbus_user_filter > (dbususerfilter + 1)) + cnt_dbus_user_filter = dbususerfilter + 1; + if (cnt_dbus_system_none > (dbussystemnone + 1)) + cnt_dbus_system_none = dbussystemnone + 1; + if (cnt_dbus_system_filter > (dbussystemfilter + 1)) + cnt_dbus_system_filter = dbussystemfilter + 1; if (arg_dbus_system_none && dbussystemnone == cnt_dbus_system_none) printf("No dbus-system none found in %s\n", argv[i]); @@ -337,7 +355,9 @@ int main(int argc, char **argv) { printf(" whitelist usr/share\t\t%d (include whitelist-usr-share-common.inc\n", cnt_whitelistusrshare); printf(" net none\t\t\t%d\n", cnt_netnone); printf(" dbus-user none \t\t%d\n", cnt_dbus_user_none); + printf(" dbus-user filter \t\t%d\n", cnt_dbus_user_filter); printf(" dbus-system none \t\t%d\n", cnt_dbus_system_none); + printf(" dbus-system filter \t\t%d\n", cnt_dbus_system_filter); printf("\n"); return 0; } -- cgit v1.2.3-54-g00ecf