|
|
1.1 root 1: #!/bin/sh -
2: #
3: # @(#)security 5.1 (Berkeley) 5/24/90
4: #
5: PATH=/sbin:/bin:/usr/bin
6:
7: host=`hostname -s`
8: echo "Subject: $host security check output"
9:
10: LOG=/var/log
11: TMP=/tmp/_secure.$$
12:
13: echo "checking setuid files and devices:"
14: MP=`mount -t ufs | sed 's;/dev/;&r;' | awk '{ print $1 " " $3 }'`
15: set $MP
16: ls -l `while test $# -ge 2; do
17: device=$1
18: shift
19: mount=$1
20: shift
21: ncheck -s $device | sed -e "/:$/d" -e "/\/dev\//d" \
22: -e "s;[^/]*;$mount;" -e "s;//;/;g" | sort
23: done` > $TMP
24:
25: if cmp $LOG/setuid.today $TMP >/dev/null; then :; else
26: echo "$host setuid/device diffs:"
27: diff $LOG/setuid.today $TMP
28: mv $LOG/setuid.today $LOG/setuid.yesterday
29: mv $TMP $LOG/setuid.today
30: fi
31: rm -f $TMP
32:
33: echo ""
34: echo ""
35: echo "checking for uids of 0:"
36: awk 'BEGIN {FS=":"} $3=="0" {print $1,$3}' /etc/master.passwd
This archive runs on limited infrastructure. Preserving old code on modern bandwidth. Automated agents are requested to crawl responsibly.