mirror of
https://github.com/aquasecurity/linux-bench.git
synced 2025-02-23 14:45:33 +01:00
31 lines
1,009 B
Bash
31 lines
1,009 B
Bash
|
#!/bin/bash
|
||
|
|
|
||
|
|
cat /etc/passwd | egrep -v '^(root|halt|sync|shutdown)' | awk -F: '($7 != "/sbin/nologin" && $7 != "/bin/false") { print $1 " " $6 }' | while read user dir; do
|
||
|
|
if [ ! -d "$dir" ]; then
|
||
|
|
echo "The home directory ($dir) of user $user does not exist."
|
||
|
|
else
|
||
|
|
for file in $dir/.netrc; do
|
||
|
|
if [ ! -h "$file" -a -f "$file" ]; then
|
||
|
|
fileperm=`ls -ld $file | cut -f1 -d" "`
|
||
|
|
if [ `echo $fileperm | cut -c5` != "-" ]; then
|
||
|
|
echo "Group Read set on $file"
|
||
|
|
fi
|
||
|
|
if [ `echo $fileperm | cut -c6` != "-" ]; then
|
||
|
|
echo "Group Write set on $file"
|
||
|
|
fi
|
||
|
|
if [ `echo $fileperm | cut -c7` != "-" ]; then
|
||
|
|
echo "Group Execute set on $file"
|
||
|
|
fi
|
||
|
|
if [ `echo $fileperm | cut -c8` != "-" ]; then
|
||
|
|
echo "Other Read set on $file"
|
||
|
|
fi
|
||
|
|
if [ `echo $fileperm | cut -c9` != "-" ]; then
|
||
|
|
echo "Other Write set on $file"
|
||
|
|
fi
|
||
|
|
if [ `echo $fileperm | cut -c10` != "-" ]; then
|
||
|
|
echo "Other Execute set on $file"
|
||
|
|
fi
|
||
|
|
fi
|
||
|
|
done
|
||
|
|
fi
|
||
|
|
done
|