Shell script batch modify file directory permissions

background ： Through security scanning, it is found that the permissions of many files and directories do not meet the requirements , And put the unqualified files and directories into one file . Now you need to change the permissions of the corresponding files and directories according to the contents of the files

Log in and copy

      
      

       
       #!/bin/bash
       
       

       
       # vim:et:ts=4:sw=4:
       
       

       
       #DATE:2021-08-29
       
       

       
       #DESCRIBE: Modify file and directory permissions , Store operation log in file_permission.log
       
       

       
       #MODIFY:
       
       

       
       
[ 
       
       "
       
       $#
       
       " 
       
       -ne 
       
       1 ] && 
       
       echo 
       
       "eg: bash file_permission.sh /root/scan_file.txt" && 
       
       exit 
       
       1
       
       

       
       FILE_PATH
       
       =
       
       $1                                                
       
       # Security scan result file path 
       
       
[ ! 
       
       -f 
       
       ${FILE_PATH} ] && 
       
       echo 
       
       "error: 
       
       ${FILE_PATH}
       
        non-existent " && 
       
       exit 
       
       1
       
       
[ ! 
       
       -f 
       
       ${FILE_PATH}.bak ] && 
       
       cp 
       
       ${FILE_PATH} 
       
       ${FILE_PATH}.bak
       
       
dos2unix 
       
       ${FILE_PATH}
       
       

       
       

       
       WORKDIR
       
       =
       
       $(cd `dirname 
       
       $0
       
       `;pwd)                                                   
       
       # Script path 
       
       
[ 
       
       -f 
       
       ${WORKDIR}/file_permission.log ] && > 
       
       ${WORKDIR}/file_permission.log        
       
       # Store the operation log 
       
       
[ 
       
       -f 
       
       ${WORKDIR}/parent_dir.txt ] && > 
       
       ${WORKDIR}/parent_dir.txt
       
       

       
       

       
       SUFFIX_NAME
       
       =(h 
       
       sh py jar log)   
       
       # Found file suffix , omitted “.” Symbol ,grep Will be added when 
       
       

       
       

       
       # Modify the permissions 
       
       
Modify_Permission()
       
       
{
       
       
    local 
       
       suffix_name
       
       =
       
       $1            
       
       # file extension 
       
       
    local 
       
       file_permission
       
       =
       
       $2        
       
       # File permissions 
       
       
    local 
       
       dir_permission
       
       =
       
       $3         
       
       # The directory permissions 
       
       
    local 
       
       file_name
       
       =
       
       $(cat 
       
       ${FILE_PATH}
       
        |grep 
       
       "^-.*\.
       
       ${suffix_name}
       
       $"
       
        |awk 
       
       '{print $NF}'
       
       )
       
       

       
       
    
       
       if [ 
       
       -n 
       
       "
       
       ${file_name}
       
       " ];then
       
       
        
       
       # Modify file permissions 
       
       
        
       
       for file 
       
       in 
       
       ${file_name}
       
       
        
       
       do
       
       
            
       
       if [ 
       
       -f 
       
       "
       
       ${file}
       
       " ];then
       
       
                
       
       echo 
       
       "chmod 
       
       ${file_permission}
       
        
       
       ${file}
       
       " >> 
       
       ${WORKDIR}/file_permission.log
       
       
                
       
       chmod 
       
       ${file_permission} 
       
       ${file}
       
       
            
       
       fi
       
       
        
       
       done
       
       

       
       
        
       
       # Modify the permissions of the directory above the file 
       
       
        
       
       for parent_dir 
       
       in 
       
       ${file_name}
       
       
        
       
       do
       
       
            
       
       echo 
       
       ${parent_dir%/*} >> 
       
       ${WORKDIR}/file_tmp.txt
       
       
        
       
       done
       
       
        
       
       sort 
       
       -r 
       
       ${WORKDIR}/file_tmp.txt | 
       
       sort 
       
       -u >> 
       
       ${WORKDIR}/parent_dir.txt         
       
       # Delete the same directory and save it to parent_dir.txt
       
       
        [ 
       
       -f 
       
       ${WORKDIR}/file_tmp.txt ] && 
       
       rm 
       
       -rf 
       
       ${WORKDIR}/file_tmp.txt
       
       

       
       
        
       
       for parent_dir 
       
       in 
       
       $(cat parent_dir.txt)
       
       
        
       
       do
       
       
            
       
       if [ 
       
       -d 
       
       "
       
       ${parent_dir}
       
       " 
       
       -a 
       
       "
       
       ${parent_dir}
       
       " !
       
       = 
       
       "/tmp" 
       
       -a 
       
       "
       
       ${parent_dir}
       
       " !
       
       = 
       
       "/" ];then
       
       
                
       
       echo 
       
       "chmod 
       
       ${dir_permission}
       
        
       
       $parent_dir
       
       " >> 
       
       ${WORKDIR}/file_permission.log
       
       
                
       
       chmod 
       
       ${dir_permission} 
       
       ${parent_dir}
       
       
                local 
       
       line
       
       =
       
       $(grep -nw 
       
       "
       
       ${parent_dir}
       
       $"
       
        
       
       ${FILE_PATH}
       
        |awk -F
       
       ':'
       
        
       
       '{print $1}'
       
       )     
       
       # Extract the number of rows where the directory path to delete is located 
       
       
                [[ 
       
       "
       
       ${line}
       
       " 
       
       -gt 
       
       0 ]] && 
       
       sed 
       
       -i 
       
       "
       
       ${line}
       
       d" 
       
       ${FILE_PATH}
       
       
            
       
       fi
       
       
        
       
       done
       
       
        
       
       
        
       
       # Delete the processed file in the security scan result file 
       
       
        
       
       sed 
       
       -i 
       
       "/\.
       
       ${suffix_name}
       
       
       
       $/d
       
       " 
       
       ${FILE_PATH}
       
       
        
       
       echo 
       
       "INFO: .
       
       ${suffix_name}
       
        File modification completed "
       
       
    
       
       else
       
       
        
       
       echo 
       
       "debug:  There is no match for .
       
       ${suffix_name}
       
        file "
       
       
    
       
       fi
       
       
}
       
       

       
       

       
       ###################### The main program ######################
       
       

       
       for suffix 
       
       in 
       
       ${SUFFIX_NAME[@]}
       
       

       
       do
       
       
    case 
       
       $suffix 
       
       in
       
       
    h|sh|py|jar)
       
       
        Modify_Permission 
       
       "
       
       ${suffix}
       
       " 
       
       "550" 
       
       "550";;         
       
       # first 550 Indicates file permissions , the second 550 Indicates the permission of the directory above the file 
       
       
    log)
       
       
        Modify_Permission 
       
       "
       
       ${suffix}
       
       " 
       
       "640" 
       
       "750";;   
       
       
    
       
       esac
       
       

       
       done
      
      
      
      

       
       
1.
       
       
2.
       
       
3.
       
       
4.
       
       
5.
       
       
6.
       
       
7.
       
       
8.
       
       
9.
       
       
10.
       
       
11.
       
       
12.
       
       
13.
       
       
14.
       
       
15.
       
       
16.
       
       
17.
       
       
18.
       
       
19.
       
       
20.
       
       
21.
       
       
22.
       
       
23.
       
       
24.
       
       
25.
       
       
26.
       
       
27.
       
       
28.
       
       
29.
       
       
30.
       
       
31.
       
       
32.
       
       
33.
       
       
34.
       
       
35.
       
       
36.
       
       
37.
       
       
38.
       
       
39.
       
       
40.
       
       
41.
       
       
42.
       
       
43.
       
       
44.
       
       
45.
       
       
46.
       
       
47.
       
       
48.
       
       
49.
       
       
50.
       
       
51.
       
       
52.
       
       
53.
       
       
54.
       
       
55.
       
       
56.
       
       
57.
       
       
58.
       
       
59.
       
       
60.
       
       
61.
       
       
62.
       
       
63.
       
       
64.
       
       
65.
       
       
66.
       
       
67.
       
       
68.
       
       
69.
       
       
70.
       
       
71.
       
       
72.