security.d/chk_exports

Sat, 18 Jul 2020 15:55:11 +0200

author
Michiel Broek <mbroek@mbse.eu>
date
Sat, 18 Jul 2020 15:55:11 +0200
changeset 23
b66522a5726e
parent 17
65656789da08
permissions
-rw-r--r--

Version 0.23 some fixes for newer awk versions.

5
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
1 #!/bin/bash
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
2 #
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
3 #############################################################################
23
b66522a5726e Version 0.23 some fixes for newer awk versions.
Michiel Broek <mbroek@mbse.eu>
parents: 17
diff changeset
4 # Copyright (C) 2005-2020
5
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
5 #
17
65656789da08 Removed uptime script, changed passwd test, minimized sensors output, bumped to version 0.18
Michiel Broek <mbroek@mbse.eu>
parents: 14
diff changeset
6 # Michiel Broek <mbse at mbse.eu>
5
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
7 #
14
59e07bba67cc Fixed spelling error, updated address
Michiel Broek <mbse@mbse.eu>
parents: 5
diff changeset
8 # This file is part of SlackSecCheckScripts.
5
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
9 #
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
10 # This package is free software; you can redistribute it and/or modify it
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
11 # under the terms of the GNU General Public License as published by the
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
12 # Free Software Foundation; either version 2, or (at your option) any
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
13 # later version.
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
14 #
14
59e07bba67cc Fixed spelling error, updated address
Michiel Broek <mbse@mbse.eu>
parents: 5
diff changeset
15 # SlackSecCheckScripts is distributed in the hope that it will be useful, but
5
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
16 # WITHOUT ANY WARRANTY; without even the implied warranty of
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
17 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
18 # General Public License for more details.
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
19 #
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
20 # You should have received a copy of the GNU General Public License
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
21 # along with MBSE BBS; see the file COPYING. If not, write to the Free
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
22 # Software Foundation, 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA.
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
23 #############################################################################
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
24
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
25
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
26 PATH=/sbin:/usr/sbin:/bin:/usr/bin
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
27
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
28 umask 077
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
29 TZ=UTC; export TZ
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
30 LANG=C; export LANG
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
31
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
32 SECUREDIR=`mktemp -d /tmp/_securedir.XXXXXX` || exit 1
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
33
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
34 trap "/bin/rm -rf $SECUREDIR ; exit 0" EXIT INT QUIT PIPE
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
35
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
36 if ! cd "$SECUREDIR"; then
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
37 echo "Can not cd to $SECUREDIR".
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
38 exit 1
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
39 fi
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
40
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
41 OUTPUT=secure1.$$
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
42
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
43 # NFS exports shouldn't be globally exported
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
44 #
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
45 if [ -f /etc/exports ]; then
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
46 cat /etc/exports | awk '{
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
47 # ignore comments and blank lines
23
b66522a5726e Version 0.23 some fixes for newer awk versions.
Michiel Broek <mbroek@mbse.eu>
parents: 17
diff changeset
48 if ($0 ~ /^#/ || $0 ~ /^$/ )
5
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
49 next;
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
50 readwrite = 0;
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
51 global = 0;
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
52 for (i = 2; i <= NF; ++i) {
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
53 if ($i ~ /*/)
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
54 global = 1;
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
55 if ($i ~ /rw/)
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
56 readwrite = 1;
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
57 }
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
58 if (global) {
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
59 if (readwrite)
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
60 printf "\tFile system %s globally exported, read-write.\n", $1
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
61 else
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
62 printf "\tFile system %s globally exported, read-only.\n", $1
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
63 }
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
64 }' > $OUTPUT
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
65
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
66 if [ -s $OUTPUT ] ; then
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
67 printf "\nChecking for globally exported file nfs systems.\n"
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
68 cat $OUTPUT
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
69 fi
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
70 fi
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
71
fe3130d22800 Conversion from CVS
Mercurial Repos
parents:
diff changeset
72

mercurial