comparison: security.d/chk_mailbox
security.d/chk_mailbox
- changeset 5
- fe3130d22800
- child 14
- 59e07bba67cc
equal
deleted
inserted
replaced
| -1:000000000000 | 5:fe3130d22800 |
|---|---|
| 1 #!/bin/bash | |
| 2 # | |
| 3 # $Id$ | |
| 4 # | |
| 5 ############################################################################# | |
| 6 # Copyright (C) 2005-2007 | |
| 7 # | |
| 8 # Michiel Broek <mbse@mbse.eu> | |
| 9 # Beekmansbos 10 | |
| 10 # 1971 BV IJmuiden | |
| 11 # the Netherlands | |
| 12 # | |
| 13 # This file is part of SlackSecCheckSripts. | |
| 14 # | |
| 15 # This package is free software; you can redistribute it and/or modify it | |
| 16 # under the terms of the GNU General Public License as published by the | |
| 17 # Free Software Foundation; either version 2, or (at your option) any | |
| 18 # later version. | |
| 19 # | |
| 20 # SlackSecCheckSripts is distributed in the hope that it will be useful, but | |
| 21 # WITHOUT ANY WARRANTY; without even the implied warranty of | |
| 22 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU | |
| 23 # General Public License for more details. | |
| 24 # | |
| 25 # You should have received a copy of the GNU General Public License | |
| 26 # along with MBSE BBS; see the file COPYING. If not, write to the Free | |
| 27 # Software Foundation, 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA. | |
| 28 ############################################################################# | |
| 29 | |
| 30 | |
| 31 PATH=/sbin:/usr/sbin:/bin:/usr/bin | |
| 32 | |
| 33 umask 077 | |
| 34 TZ=UTC; export TZ | |
| 35 LANG=C; export LANG | |
| 36 | |
| 37 SECUREDIR=`mktemp -d /tmp/_securedir.XXXXXX` || exit 1 | |
| 38 | |
| 39 trap "/bin/rm -rf $SECUREDIR ; exit 0" EXIT INT QUIT PIPE | |
| 40 | |
| 41 if ! cd "$SECUREDIR"; then | |
| 42 echo "Can not cd to $SECUREDIR". | |
| 43 exit 1 | |
| 44 fi | |
| 45 | |
| 46 OUTPUT=secure1.$$ | |
| 47 | |
| 48 | |
| 49 # Mailboxes should be owned by user and unreadable. | |
| 50 # | |
| 51 /bin/ls -l /var/spool/mail | \ | |
| 52 awk ' NR == 1 { next; } | |
| 53 $3 != $9 { | |
| 54 printf "\tUser %s mailbox is owned by %s.\n", $9, $3 | |
| 55 } | |
| 56 $1 != "-rw-rw----" || $4 != "mail" { | |
| 57 printf "\tUser %s mailbox is %s, group %s.\n", $9, $1, $4 | |
| 58 }' > $OUTPUT | |
| 59 if [ -s $OUTPUT ] ; then | |
| 60 printf "\nChecking mailbox ownership.\n" | |
| 61 cat $OUTPUT | |
| 62 fi | |
| 63 | |
| 64 |
