From 195ec744e0071bb035175df35b11bcb27d0dd890 Mon Sep 17 00:00:00 2001
From: Samson-w <samson@hardenedlinux.org>
Date: Sat, 17 Jun 2023 13:57:38 +0800
Subject: [PATCH] Fix #40: Shadow utils checks are not possible to maintain
 with current requirements.

---
 bin/hardening/12.12_etc_group_backup_permissions.sh   | 4 ++--
 bin/hardening/12.13_etc_gshadow_backup_permissions.sh | 4 ++--
 bin/hardening/12.5_etc_passwd_backup_permissions.sh   | 4 ++--
 bin/hardening/12.6_etc_shadow_backup_permissions.sh   | 2 +-
 4 files changed, 7 insertions(+), 7 deletions(-)

diff --git a/bin/hardening/12.12_etc_group_backup_permissions.sh b/bin/hardening/12.12_etc_group_backup_permissions.sh
index 258cd8f..aa3ccda 100755
--- a/bin/hardening/12.12_etc_group_backup_permissions.sh
+++ b/bin/hardening/12.12_etc_group_backup_permissions.sh
@@ -1,7 +1,7 @@
 #!/bin/bash
 
 #
-# harbian-audit for Debian GNU/Linux 7/8/9 or CentOS 8 Hardening
+# harbian-audit for Debian GNU/Linux 7/8/9/10/11/12 or CentOS 8 Hardening
 #
 
 #
@@ -15,7 +15,7 @@ set -u # One variable unset, it's over
 HARDENING_LEVEL=1
 
 FILE='/etc/group-'
-PERMISSIONS='600'
+PERMISSIONS='644'
 USER='root'
 GROUP='root'
 
diff --git a/bin/hardening/12.13_etc_gshadow_backup_permissions.sh b/bin/hardening/12.13_etc_gshadow_backup_permissions.sh
index 75ad596..5c87ca8 100755
--- a/bin/hardening/12.13_etc_gshadow_backup_permissions.sh
+++ b/bin/hardening/12.13_etc_gshadow_backup_permissions.sh
@@ -1,7 +1,7 @@
 #!/bin/bash
 
 #
-# harbian-audit for Debian GNU/Linux 7/8/9 or CentOS 8 Hardening
+# harbian-audit for Debian GNU/Linux 7/8/9/10/11/12 or CentOS 8 Hardening
 #
 
 #
@@ -15,7 +15,7 @@ set -u # One variable unset, it's over
 HARDENING_LEVEL=1
 
 FILE='/etc/gshadow-'
-PERMISSIONS='600'
+PERMISSIONS='640'
 PERMISSIONS_CENTOS='0'
 USER='root'
 GROUP='shadow'
diff --git a/bin/hardening/12.5_etc_passwd_backup_permissions.sh b/bin/hardening/12.5_etc_passwd_backup_permissions.sh
index 64bd950..567d1de 100755
--- a/bin/hardening/12.5_etc_passwd_backup_permissions.sh
+++ b/bin/hardening/12.5_etc_passwd_backup_permissions.sh
@@ -1,7 +1,7 @@
 #!/bin/bash
 
 #
-# harbian-audit for Debian GNU/Linux 7/8/9 or CentOS 8 Hardening
+# harbian-audit for Debian GNU/Linux 7/8/9/10/11/12 or CentOS 8 Hardening
 #
 
 #
@@ -15,7 +15,7 @@ set -u # One variable unset, it's over
 HARDENING_LEVEL=1
 
 FILE='/etc/passwd-'
-PERMISSIONS='600'
+PERMISSIONS='644'
 USER='root'
 GROUP='root'
 
diff --git a/bin/hardening/12.6_etc_shadow_backup_permissions.sh b/bin/hardening/12.6_etc_shadow_backup_permissions.sh
index 39b95b7..2b882d6 100755
--- a/bin/hardening/12.6_etc_shadow_backup_permissions.sh
+++ b/bin/hardening/12.6_etc_shadow_backup_permissions.sh
@@ -15,7 +15,7 @@ set -u # One variable unset, it's over
 HARDENING_LEVEL=1
 
 FILE='/etc/shadow-'
-PERMISSIONS='600'
+PERMISSIONS='640'
 PERMISSIONS_CENTOS='0'
 USER='root'
 GROUP='shadow'