|
1 #!/bin/bash |
|
2 # |
|
3 # $Id$ |
|
4 # |
|
5 ############################################################################# |
|
6 # Copyright (C) 2005-2007 |
|
7 # |
|
8 # Michiel Broek <mbse@mbse.eu> |
|
9 # Beekmansbos 10 |
|
10 # 1971 BV IJmuiden |
|
11 # the Netherlands |
|
12 # |
|
13 # This file is part of SlackSecCheckSripts. |
|
14 # |
|
15 # This package is free software; you can redistribute it and/or modify it |
|
16 # under the terms of the GNU General Public License as published by the |
|
17 # Free Software Foundation; either version 2, or (at your option) any |
|
18 # later version. |
|
19 # |
|
20 # SlackSecCheckSripts is distributed in the hope that it will be useful, but |
|
21 # WITHOUT ANY WARRANTY; without even the implied warranty of |
|
22 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU |
|
23 # General Public License for more details. |
|
24 # |
|
25 # You should have received a copy of the GNU General Public License |
|
26 # along with MBSE BBS; see the file COPYING. If not, write to the Free |
|
27 # Software Foundation, 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA. |
|
28 ############################################################################# |
|
29 |
|
30 PATH=/sbin:/usr/sbin:/bin:/usr/bin |
|
31 |
|
32 umask 077 |
|
33 TZ=UTC; export TZ |
|
34 LANG=C; export LANG |
|
35 |
|
36 SECUREDIR=`mktemp -d /tmp/_securedir.XXXXXX` || exit 1 |
|
37 |
|
38 trap "/bin/rm -rf $SECUREDIR ; exit 0" EXIT INT QUIT PIPE |
|
39 |
|
40 if ! cd "$SECUREDIR"; then |
|
41 echo "Can not cd to $SECUREDIR". |
|
42 exit 1 |
|
43 fi |
|
44 |
|
45 backup_dir=/var/cache/sscs |
|
46 mkdir -p "$backup_dir" |
|
47 |
|
48 CURR=${backup_dir}/setid.current |
|
49 BACK=${backup_dir}/setid.backup |
|
50 TMP1=$SECUREDIR/tmp1 |
|
51 TMP2=$SECUREDIR/tmp2 |
|
52 TMP3=$SECUREDIR/tmp3 |
|
53 FSS=`egrep ^\/dev\/ /etc/mtab | awk '{ print $2 }'` |
|
54 |
|
55 |
|
56 if [ ! -f $CURR ]; then |
|
57 # No database, install new database |
|
58 find $FSS \( -mount \( -perm -u+s -a ! -type d \) -o \( -perm -g+s -a ! -type d \) \) -print0 | \ |
|
59 xargs -0 /bin/ls -ld --full-time | sort -k9 > $CURR |
|
60 exit |
|
61 fi |
|
62 |
|
63 # Database is present, create temp database |
|
64 # |
|
65 find $FSS \( -mount \( -perm -u+s -a ! -type d \) -o \( -perm -g+s -a ! -type d \) \) -print0 | \ |
|
66 xargs -0 /bin/ls -ld --full-time | sort -k9 > $TMP1 |
|
67 changed=0 |
|
68 |
|
69 diff $TMP1 $CURR > $TMP2 |
|
70 if [ -s $TMP2 ]; then |
|
71 egrep '>' $TMP2 > $TMP3 |
|
72 if [ -s $TMP3 ]; then |
|
73 printf "\nOld or updated setuid or setgid files:\n" |
|
74 cat $TMP3 | tr '>' ' ' |
|
75 fi |
|
76 egrep '<' $TMP2 > $TMP3 |
|
77 if [ -s $TMP3 ]; then |
|
78 printf "\nNew or updated setuid or setgid files:\n" |
|
79 cat $TMP3 | tr '<' ' ' |
|
80 fi |
|
81 changed=1 |
|
82 fi |
|
83 |
|
84 |
|
85 # If changes were seen, update the database |
|
86 # |
|
87 if [ "$changed" == "1" ]; then |
|
88 cat $CURR > $BACK |
|
89 cat $TMP1 > $CURR |
|
90 fi |
|
91 |