security.d/chk_setid

Sat, 31 Mar 2007 13:32:06 +0200

author
mbse
date
Sat, 31 Mar 2007 13:32:06 +0200
changeset 0
8ba6a0e2d2ca
child 11
a1f9231336f2
permissions
-rw-r--r--

Initial revision

0
8ba6a0e2d2ca Initial revision
mbse
parents:
diff changeset
1 #!/bin/bash
8ba6a0e2d2ca Initial revision
mbse
parents:
diff changeset
2 #
8ba6a0e2d2ca Initial revision
mbse
parents:
diff changeset
3 # $Id$
8ba6a0e2d2ca Initial revision
mbse
parents:
diff changeset
4 #
8ba6a0e2d2ca Initial revision
mbse
parents:
diff changeset
5 #############################################################################
8ba6a0e2d2ca Initial revision
mbse
parents:
diff changeset
6 # Copyright (C) 2005-2007
8ba6a0e2d2ca Initial revision
mbse
parents:
diff changeset
7 #
8ba6a0e2d2ca Initial revision
mbse
parents:
diff changeset
8 # Michiel Broek <mbse@mbse.eu>
8ba6a0e2d2ca Initial revision
mbse
parents:
diff changeset
9 # Beekmansbos 10
8ba6a0e2d2ca Initial revision
mbse
parents:
diff changeset
10 # 1971 BV IJmuiden
8ba6a0e2d2ca Initial revision
mbse
parents:
diff changeset
11 # the Netherlands
8ba6a0e2d2ca Initial revision
mbse
parents:
diff changeset
12 #
8ba6a0e2d2ca Initial revision
mbse
parents:
diff changeset
13 # This file is part of SlackSecCheckSripts.
8ba6a0e2d2ca Initial revision
mbse
parents:
diff changeset
14 #
8ba6a0e2d2ca Initial revision
mbse
parents:
diff changeset
15 # This package is free software; you can redistribute it and/or modify it
8ba6a0e2d2ca Initial revision
mbse
parents:
diff changeset
16 # under the terms of the GNU General Public License as published by the
8ba6a0e2d2ca Initial revision
mbse
parents:
diff changeset
17 # Free Software Foundation; either version 2, or (at your option) any
8ba6a0e2d2ca Initial revision
mbse
parents:
diff changeset
18 # later version.
8ba6a0e2d2ca Initial revision
mbse
parents:
diff changeset
19 #
8ba6a0e2d2ca Initial revision
mbse
parents:
diff changeset
20 # SlackSecCheckSripts is distributed in the hope that it will be useful, but
8ba6a0e2d2ca Initial revision
mbse
parents:
diff changeset
21 # WITHOUT ANY WARRANTY; without even the implied warranty of
8ba6a0e2d2ca Initial revision
mbse
parents:
diff changeset
22 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
8ba6a0e2d2ca Initial revision
mbse
parents:
diff changeset
23 # General Public License for more details.
8ba6a0e2d2ca Initial revision
mbse
parents:
diff changeset
24 #
8ba6a0e2d2ca Initial revision
mbse
parents:
diff changeset
25 # You should have received a copy of the GNU General Public License
8ba6a0e2d2ca Initial revision
mbse
parents:
diff changeset
26 # along with MBSE BBS; see the file COPYING. If not, write to the Free
8ba6a0e2d2ca Initial revision
mbse
parents:
diff changeset
27 # Software Foundation, 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA.
8ba6a0e2d2ca Initial revision
mbse
parents:
diff changeset
28 #############################################################################
8ba6a0e2d2ca Initial revision
mbse
parents:
diff changeset
29
8ba6a0e2d2ca Initial revision
mbse
parents:
diff changeset
30 PATH=/sbin:/usr/sbin:/bin:/usr/bin
8ba6a0e2d2ca Initial revision
mbse
parents:
diff changeset
31
8ba6a0e2d2ca Initial revision
mbse
parents:
diff changeset
32 umask 077
8ba6a0e2d2ca Initial revision
mbse
parents:
diff changeset
33 TZ=UTC; export TZ
8ba6a0e2d2ca Initial revision
mbse
parents:
diff changeset
34 LANG=C; export LANG
8ba6a0e2d2ca Initial revision
mbse
parents:
diff changeset
35
8ba6a0e2d2ca Initial revision
mbse
parents:
diff changeset
36 SECUREDIR=`mktemp -d /tmp/_securedir.XXXXXX` || exit 1
8ba6a0e2d2ca Initial revision
mbse
parents:
diff changeset
37
8ba6a0e2d2ca Initial revision
mbse
parents:
diff changeset
38 trap "/bin/rm -rf $SECUREDIR ; exit 0" EXIT INT QUIT PIPE
8ba6a0e2d2ca Initial revision
mbse
parents:
diff changeset
39
8ba6a0e2d2ca Initial revision
mbse
parents:
diff changeset
40 if ! cd "$SECUREDIR"; then
8ba6a0e2d2ca Initial revision
mbse
parents:
diff changeset
41 echo "Can not cd to $SECUREDIR".
8ba6a0e2d2ca Initial revision
mbse
parents:
diff changeset
42 exit 1
8ba6a0e2d2ca Initial revision
mbse
parents:
diff changeset
43 fi
8ba6a0e2d2ca Initial revision
mbse
parents:
diff changeset
44
8ba6a0e2d2ca Initial revision
mbse
parents:
diff changeset
45 backup_dir=/var/cache/sscs
8ba6a0e2d2ca Initial revision
mbse
parents:
diff changeset
46 mkdir -p "$backup_dir"
8ba6a0e2d2ca Initial revision
mbse
parents:
diff changeset
47
8ba6a0e2d2ca Initial revision
mbse
parents:
diff changeset
48 CURR=${backup_dir}/setid.current
8ba6a0e2d2ca Initial revision
mbse
parents:
diff changeset
49 BACK=${backup_dir}/setid.backup
8ba6a0e2d2ca Initial revision
mbse
parents:
diff changeset
50 TMP1=$SECUREDIR/tmp1
8ba6a0e2d2ca Initial revision
mbse
parents:
diff changeset
51 TMP2=$SECUREDIR/tmp2
8ba6a0e2d2ca Initial revision
mbse
parents:
diff changeset
52 TMP3=$SECUREDIR/tmp3
8ba6a0e2d2ca Initial revision
mbse
parents:
diff changeset
53 FSS=`egrep ^\/dev\/ /etc/mtab | awk '{ print $2 }'`
8ba6a0e2d2ca Initial revision
mbse
parents:
diff changeset
54
8ba6a0e2d2ca Initial revision
mbse
parents:
diff changeset
55
8ba6a0e2d2ca Initial revision
mbse
parents:
diff changeset
56 if [ ! -f $CURR ]; then
8ba6a0e2d2ca Initial revision
mbse
parents:
diff changeset
57 # No database, install new database
8ba6a0e2d2ca Initial revision
mbse
parents:
diff changeset
58 find $FSS \( -mount \( -perm -u+s -a ! -type d \) -o \( -perm -g+s -a ! -type d \) \) -print0 | \
8ba6a0e2d2ca Initial revision
mbse
parents:
diff changeset
59 xargs -0 /bin/ls -ld --full-time | sort -k9 > $CURR
8ba6a0e2d2ca Initial revision
mbse
parents:
diff changeset
60 exit
8ba6a0e2d2ca Initial revision
mbse
parents:
diff changeset
61 fi
8ba6a0e2d2ca Initial revision
mbse
parents:
diff changeset
62
8ba6a0e2d2ca Initial revision
mbse
parents:
diff changeset
63 # Database is present, create temp database
8ba6a0e2d2ca Initial revision
mbse
parents:
diff changeset
64 #
8ba6a0e2d2ca Initial revision
mbse
parents:
diff changeset
65 find $FSS \( -mount \( -perm -u+s -a ! -type d \) -o \( -perm -g+s -a ! -type d \) \) -print0 | \
8ba6a0e2d2ca Initial revision
mbse
parents:
diff changeset
66 xargs -0 /bin/ls -ld --full-time | sort -k9 > $TMP1
8ba6a0e2d2ca Initial revision
mbse
parents:
diff changeset
67 changed=0
8ba6a0e2d2ca Initial revision
mbse
parents:
diff changeset
68
8ba6a0e2d2ca Initial revision
mbse
parents:
diff changeset
69 diff $TMP1 $CURR > $TMP2
8ba6a0e2d2ca Initial revision
mbse
parents:
diff changeset
70 if [ -s $TMP2 ]; then
8ba6a0e2d2ca Initial revision
mbse
parents:
diff changeset
71 egrep '>' $TMP2 > $TMP3
8ba6a0e2d2ca Initial revision
mbse
parents:
diff changeset
72 if [ -s $TMP3 ]; then
8ba6a0e2d2ca Initial revision
mbse
parents:
diff changeset
73 printf "\nOld or updated setuid or setgid files:\n"
8ba6a0e2d2ca Initial revision
mbse
parents:
diff changeset
74 cat $TMP3 | tr '>' ' '
8ba6a0e2d2ca Initial revision
mbse
parents:
diff changeset
75 fi
8ba6a0e2d2ca Initial revision
mbse
parents:
diff changeset
76 egrep '<' $TMP2 > $TMP3
8ba6a0e2d2ca Initial revision
mbse
parents:
diff changeset
77 if [ -s $TMP3 ]; then
8ba6a0e2d2ca Initial revision
mbse
parents:
diff changeset
78 printf "\nNew or updated setuid or setgid files:\n"
8ba6a0e2d2ca Initial revision
mbse
parents:
diff changeset
79 cat $TMP3 | tr '<' ' '
8ba6a0e2d2ca Initial revision
mbse
parents:
diff changeset
80 fi
8ba6a0e2d2ca Initial revision
mbse
parents:
diff changeset
81 changed=1
8ba6a0e2d2ca Initial revision
mbse
parents:
diff changeset
82 fi
8ba6a0e2d2ca Initial revision
mbse
parents:
diff changeset
83
8ba6a0e2d2ca Initial revision
mbse
parents:
diff changeset
84
8ba6a0e2d2ca Initial revision
mbse
parents:
diff changeset
85 # If changes were seen, update the database
8ba6a0e2d2ca Initial revision
mbse
parents:
diff changeset
86 #
8ba6a0e2d2ca Initial revision
mbse
parents:
diff changeset
87 if [ "$changed" == "1" ]; then
8ba6a0e2d2ca Initial revision
mbse
parents:
diff changeset
88 cat $CURR > $BACK
8ba6a0e2d2ca Initial revision
mbse
parents:
diff changeset
89 cat $TMP1 > $CURR
8ba6a0e2d2ca Initial revision
mbse
parents:
diff changeset
90 fi
8ba6a0e2d2ca Initial revision
mbse
parents:
diff changeset
91

mercurial