security.d/chk_plussigns

Thu, 06 Dec 2012 15:08:01 +0100

author
Michiel Broek <mbse@mbse.eu>
date
Thu, 06 Dec 2012 15:08:01 +0100
changeset 14
59e07bba67cc
parent 5
fe3130d22800
child 17
65656789da08
permissions
-rw-r--r--

Fixed spelling error, updated address

5
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
1 #!/bin/bash
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
2 #
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
3 #############################################################################
14
59e07bba67cc Fixed spelling error, updated address
Michiel Broek <mbse@mbse.eu>
parents: 5
diff changeset
4 # Copyright (C) 2005-2012
5
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
5 #
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
6 # Michiel Broek <mbse@mbse.dds.nl>
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
7 # the Netherlands
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
8 #
14
59e07bba67cc Fixed spelling error, updated address
Michiel Broek <mbse@mbse.eu>
parents: 5
diff changeset
9 # This file is part of SlackSecCheckScripts.
5
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
10 #
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
11 # This package is free software; you can redistribute it and/or modify it
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
12 # under the terms of the GNU General Public License as published by the
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
13 # Free Software Foundation; either version 2, or (at your option) any
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
14 # later version.
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
15 #
14
59e07bba67cc Fixed spelling error, updated address
Michiel Broek <mbse@mbse.eu>
parents: 5
diff changeset
16 # SlackSecCheckScripts is distributed in the hope that it will be useful, but
5
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
17 # WITHOUT ANY WARRANTY; without even the implied warranty of
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
18 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
19 # General Public License for more details.
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
20 #
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
21 # You should have received a copy of the GNU General Public License
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
22 # along with MBSE BBS; see the file COPYING. If not, write to the Free
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
23 # Software Foundation, 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA.
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
24 #############################################################################
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
25
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
26
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
27 PATH=/sbin:/usr/sbin:/bin:/usr/bin
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
28
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
29 umask 077
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
30 TZ=UTC; export TZ
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
31 LANG=C; export LANG
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
32
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
33 MP=/etc/passwd
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
34 SP=/etc/shadow
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
35
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
36 SECUREDIR=`mktemp -d /tmp/_securedir.XXXXXX` || exit 1
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
37
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
38 trap "/bin/rm -rf $SECUREDIR ; exit 0" EXIT INT QUIT PIPE
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
39
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
40 if ! cd "$SECUREDIR"; then
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
41 echo "Can not cd to $SECUREDIR".
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
42 exit 1
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
43 fi
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
44
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
45 MPBYPATH=secure1.$$
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
46 OUTPUT=secure2.$$
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
47
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
48 # These are used several times.
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
49 #
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
50 awk -F: '{ print $1 " " $6 }' $MP | sort -k2 > $MPBYPATH
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
51
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
52
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
53 # Files that should not have + signs.
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
54 #
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
55 list="/etc/hosts.equiv /etc/hosts.lpd"
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
56 for f in $list ; do
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
57 if [ -f $f ] && egrep '\+' $f > /dev/null ; then
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
58 printf "\nPlus sign in $f file.\n"
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
59 fi
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
60 done
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
61
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
62 # Check for special users with .rhosts files. Only root and toor should
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
63 # have .rhosts files. Also, .rhosts files should not have plus signs.
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
64 awk -F: '$1 != "root" && $1 != "toor" && ($3 < 100 || $1 == "ftp" || $1 == "uucp") \
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
65 { print $1 " " $6 }' $MP |
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
66 sort -k2 |
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
67 while read uid homedir; do
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
68 if [ -f ${homedir}/.rhosts ] ; then
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
69 rhost=`/bin/ls -ldg ${homedir}/.rhosts`
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
70 printf -- "$uid: $rhost\n"
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
71 fi
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
72 done > $OUTPUT
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
73 if [ -s $OUTPUT ] ; then
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
74 printf "\nChecking for special users with .rhosts files.\n"
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
75 cat $OUTPUT
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
76 fi
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
77 while read uid homedir; do
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
78 if [ -f ${homedir}/.rhosts -a -r ${homedir}/.rhosts ] && \
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
79 cat ${homedir}/.rhosts | egrep '\+' > /dev/null ; then
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
80 printf -- "$uid: + in .rhosts file.\n"
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
81 fi
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
82 done < $MPBYPATH > $OUTPUT
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
83 if [ -s $OUTPUT ] ; then
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
84 printf "\nChecking .rhosts files syntax.\n"
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
85 cat $OUTPUT
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
86 fi
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
87
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
88

mercurial