16 lines
513 B
Bash
16 lines
513 B
Bash
#!/bin/sh
|
||
# Audit: code execution control (docs/Контроль_выполнения_кода)
|
||
set -eu
|
||
|
||
REPORT="${REPORT:-/reports/audit.log}"
|
||
|
||
{
|
||
echo ""
|
||
echo "=== Code execution control audit $(date -Iseconds) ==="
|
||
nginx -T 2>/dev/null | grep -E 'fastcgi_pass|uwsgi_pass|scgi_pass|grpc_pass|perl|js_import|internal|^\s*root\s|alias' || true
|
||
echo "--- SCRIPT_FILENAME ---"
|
||
nginx -T 2>/dev/null | grep SCRIPT_FILENAME || echo "(no fastcgi)"
|
||
} >> "$REPORT"
|
||
|
||
echo "Code control audit appended -> $REPORT"
|