security.d/chk_setid

Mon, 20 Jan 2014 12:48:38 +0100

author
Michiel Broek <mbroek@mbse.eu>
date
Mon, 20 Jan 2014 12:48:38 +0100
changeset 19
2c0dacb26b14
parent 17
65656789da08
child 20
1d18ebb9e279
permissions
-rw-r--r--

Fixed error message when there was nothing to report.

5
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
1 #!/bin/bash
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
2 #
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
3 #############################################################################
17
65656789da08 Removed uptime script, changed passwd test, minimized sensors output, bumped to version 0.18
Michiel Broek <mbroek@mbse.eu>
parents: 14
diff changeset
4 # Copyright (C) 2005-2013
5
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
5 #
17
65656789da08 Removed uptime script, changed passwd test, minimized sensors output, bumped to version 0.18
Michiel Broek <mbroek@mbse.eu>
parents: 14
diff changeset
6 # Michiel Broek <mbse at mbse.eu>
5
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
7 #
14
59e07bba67cc Fixed spelling error, updated address
Michiel Broek <mbse@mbse.eu>
parents: 11
diff changeset
8 # This file is part of SlackSecCheckScripts.
5
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
9 #
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
10 # This package is free software; you can redistribute it and/or modify it
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
11 # under the terms of the GNU General Public License as published by the
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
12 # Free Software Foundation; either version 2, or (at your option) any
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
13 # later version.
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
14 #
14
59e07bba67cc Fixed spelling error, updated address
Michiel Broek <mbse@mbse.eu>
parents: 11
diff changeset
15 # SlackSecCheckScripts is distributed in the hope that it will be useful, but
5
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
16 # WITHOUT ANY WARRANTY; without even the implied warranty of
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
17 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
18 # General Public License for more details.
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
19 #
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
20 # You should have received a copy of the GNU General Public License
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
21 # along with MBSE BBS; see the file COPYING. If not, write to the Free
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
22 # Software Foundation, 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA.
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
23 #############################################################################
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
24
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
25 PATH=/sbin:/usr/sbin:/bin:/usr/bin
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
26
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
27 umask 077
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
28 TZ=UTC; export TZ
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
29 LANG=C; export LANG
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
30
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
31 SECUREDIR=`mktemp -d /tmp/_securedir.XXXXXX` || exit 1
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
32
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
33 trap "/bin/rm -rf $SECUREDIR ; exit 0" EXIT INT QUIT PIPE
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
34
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
35 if ! cd "$SECUREDIR"; then
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
36 echo "Can not cd to $SECUREDIR".
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
37 exit 1
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
38 fi
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
39
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
40 backup_dir=/var/cache/sscs
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
41 mkdir -p "$backup_dir"
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
42
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
43 CURR=${backup_dir}/setid.current
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
44 BACK=${backup_dir}/setid.backup
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
45 TMP1=$SECUREDIR/tmp1
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
46 TMP2=$SECUREDIR/tmp2
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
47 TMP3=$SECUREDIR/tmp3
11
a1f9231336f2 Include tmpfs filesystems
Michiel Broek <mbroek@mbse.eu>
parents: 5
diff changeset
48 FSS=$( egrep "^\/dev\/| tmpfs" /etc/mtab | awk '{ print $2 }' )
5
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
49
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
50
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
51 if [ ! -f $CURR ]; then
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
52 # No database, install new database
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
53 find $FSS \( -mount \( -perm -u+s -a ! -type d \) -o \( -perm -g+s -a ! -type d \) \) -print0 | \
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
54 xargs -0 /bin/ls -ld --full-time | sort -k9 > $CURR
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
55 exit
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
56 fi
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
57
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
58 # Database is present, create temp database
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
59 #
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
60 find $FSS \( -mount \( -perm -u+s -a ! -type d \) -o \( -perm -g+s -a ! -type d \) \) -print0 | \
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
61 xargs -0 /bin/ls -ld --full-time | sort -k9 > $TMP1
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
62 changed=0
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
63
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
64 diff $TMP1 $CURR > $TMP2
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
65 if [ -s $TMP2 ]; then
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
66 egrep '>' $TMP2 > $TMP3
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
67 if [ -s $TMP3 ]; then
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
68 printf "\nOld or updated setuid or setgid files:\n"
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
69 cat $TMP3 | tr '>' ' '
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
70 fi
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
71 egrep '<' $TMP2 > $TMP3
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
72 if [ -s $TMP3 ]; then
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
73 printf "\nNew or updated setuid or setgid files:\n"
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
74 cat $TMP3 | tr '<' ' '
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
75 fi
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
76 changed=1
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
77 fi
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
78
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
79
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
80 # If changes were seen, update the database
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
81 #
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
82 if [ "$changed" == "1" ]; then
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
83 cat $CURR > $BACK
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
84 cat $TMP1 > $CURR
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
85 fi
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
86

mercurial