python检查目录文件权限并修改目录文件权限

该脚本主要检查和调整Linux系统中 `/var/log/nginx` 和 `/usr/local/www/var` 目录的权限,确保Nginx拥有写权限,同时其他目录具有读取权限。通过`walktree`函数遍历指定目录,收集文件和目录信息,然后根据需求使用`chown`和`chmod`命令修改权限。日志信息被记录在 `/var/log/checkDirPermission.log` 文件中。
摘要由CSDN通过智能技术生成

-- coding: utf-8 --

@author flynetcn

import sys, os, pwd, stat, datetime;

LOG_FILE = ‘/var/log/checkDirPermission.log’;

nginxWritableDirs = [
‘/var/log/nginx’,
‘/usr/local/www/var’,
];

otherReadableDirs = [
‘/var/log/nginx’,
‘/usr/local/www/var/log’,
];

dirs = [];
files = [];

def logger(level, str):
logFd = open(LOG_FILE, ‘a’);
logFd.write(datetime.datetime.now().strftime(’%Y-%m-%d %H:%M:%S.%f’)+": "+("WARNING " if level else "NOTICE ")+str);
logFd.close();

def walktree(top, callback):
for f in os.listdir(top):
pathname = os.path.join(top, f);
mode = os.stat(pathname).st_mode;
if stat.S_ISDIR(mode):
callback(pathname, True);
walktree(pathname, callback);
elif stat.S_ISREG(mode):
callback(pathname, False);
else:
logger(1, “walktree skipping %s\n” % (pathname));

def collectPath(path, isDir=False):
if isDir:
dirs.append(path);
else:
files.append(path);

def checkNginxWritableDirs(paths):
uid = pwd.getpwnam(‘nginx’).pw_uid;
gid = pwd.getpwnam(‘nginx’).pw_gid;
for d in paths:
dstat = os.stat(d);
if dstat.st_uid != uid:
try:
os.chown(d, uid, gid);
except:
logger(1, “chown(%s, nginx, nginx) failed\n” % (d));

def checkOtherReadableDirs(paths, isDir=False):
for d in paths:
dstat = os.stat(d);
if isDir:
checkMode = 5;
willBeMode = dstat.st_mode | stat.S_IROTH | stat.S_IXOTH;
else:
checkMode = 4;
willBeMode = dstat.st_mode | stat.S_IROTH;
if int(oct(dstat.st_mode)[-1:]) & checkMode != checkMode:
try:
os.chmod(d, willBeMode);
except:
logger(1, “chmod(%s, %d) failed\n” % (d, oct(willBeMode)));

if name == “main”:
for d in nginxWritableDirs:
walktree(d, collectPath)
dirs = dirs + files;
checkNginxWritableDirs(dirs);
dirs = [];
files = [];
for d in otherReadableDirs:
walktree(d, collectPath)
checkOtherReadableDirs(dirs, True);
checkOtherReadableDirs(files, False);

  • 0
    点赞
  • 0
    收藏
    觉得还不错? 一键收藏
  • 1
    评论
评论 1
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值