#!/bin/sh
# Copyright (C) 2019 Checkmk GmbH - License: GNU General Public License v2
# This file is part of Checkmk (https://checkmk.com). It is subject to the terms and
# conditions defined in the file COPYING, which is part of this source code package.

# Reason for this no-op: shellcheck disable=... before the first command disables the error for the
# entire script.
:

# Disable unused variable error (needed to keep track of version)
# shellcheck disable=SC2034
CMK_VERSION="2.3.0p38"

# check that no users other than root that can change the file
root_owned() {
    read -r permissions _ owner group _ <<EOF
$1
EOF

    group_write_perm=$(echo "$permissions" | cut -c 6)
    other_write_perm=$(echo "$permissions" | cut -c 9)

    # the file is either owned by root user and root group and other users don't
    # have write permissions
    if [ "$owner" = "root" ] && [ "$group" = "root" ] && [ "$other_write_perm" = "-" ]; then
        true
        return
    fi

    # or it's is owned by root and neither the group nor other users have write permissions
    if [ "$owner" = "root" ] && [ "$group_write_perm" = "-" ] && [ "$other_write_perm" = "-" ]; then
        true
        return
    fi

    false
}

if [ -f /opt/Symantec/symantec_antivirus/sav ]; then

    root_owned "$(ls -l /opt/Symantec/symantec_antivirus/sav)" || exit

    echo "<<<symantec_av_updates>>>"
    /opt/Symantec/symantec_antivirus/sav info -d

    echo "<<<symantec_av_progstate>>>"
    /opt/Symantec/symantec_antivirus/sav info -a

    echo "<<<symantec_av_quarantine>>>"
    /opt/Symantec/symantec_antivirus/sav quarantine -l
fi