X-Git-Url: https://gerrit.akraino.org/r/gitweb?p=ta%2Fcaas-security.git;a=blobdiff_plain;f=ansible%2Froles%2Fhardening%2Ftemplates%2Fhardened_path.sh;fp=ansible%2Froles%2Fhardening%2Ftemplates%2Fhardened_path.sh;h=837752a17ede45f035eafb5258c13806b7e32274;hp=0000000000000000000000000000000000000000;hb=c177c44e5d4c49eeb51b44487a614b865f8bf002;hpb=f2937b9484f58be8f23ae50500f30ca0f0e16e3b

diff --git a/ansible/roles/hardening/templates/hardened_path.sh b/ansible/roles/hardening/templates/hardened_path.sh
new file mode 100644
index 0000000..837752a
--- /dev/null
+++ b/ansible/roles/hardening/templates/hardened_path.sh
@@ -0,0 +1,23 @@
+#!/bin/sh
+# Copyright 2019 Nokia
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+IFS=':' read -ra PATH_ELEMENTS <<< "$PATH"
+PATH=""
+for element in "${PATH_ELEMENTS[@]}"; do
+    if [[ ! -z "$element" ]] && [[ -d "$element" ]] && [[ ! -z "`/usr/bin/ls -A \"$element\"`" ]]; then
+        PATH=$PATH:$element
+    fi
+done
+PATH=${PATH#":"}