mirror of
https://github.com/aquasecurity/linux-bench.git
synced 2025-02-23 22:55:34 +01:00
33 lines
1,020 B
Bash
33 lines
1,020 B
Bash
|
#!/bin/bash
|
||
|
|
|
||
|
|
grep -E -v '^(root|halt|sync|shutdown)' /etc/passwd | awk -F: '($7 !=
|
||
|
|
"'"$(which nologin)"'" && $7 != "/bin/false") { print $1 " " $6 }' | while
|
||
|
|
read user dir; do
|
||
|
|
if [ ! -d "$dir" ]; then
|
||
|
|
echo "The home directory ($dir) of user $user does not exist."
|
||
|
|
else
|
||
|
|
for file in $dir/.netrc; do
|
||
|
|
if [ ! -h "$file" -a -f "$file" ]; then
|
||
|
|
fileperm=$(ls -ld $file | cut -f1 -d" ")
|
||
|
|
if [ $(echo $fileperm | cut -c5) != "-" ]; then
|
||
|
|
echo "Group Read set on $file"
|
||
|
|
fi
|
||
|
|
if [ $(echo $fileperm | cut -c6) != "-" ]; then
|
||
|
|
echo "Group Write set on $file"
|
||
|
|
fi
|
||
|
|
if [ $(echo $fileperm | cut -c7) != "-" ]; then
|
||
|
|
echo "Group Execute set on $file"
|
||
|
|
fi
|
||
|
|
if [ $(echo $fileperm | cut -c8) != "-" ]; then
|
||
|
|
echo "Other Read set on $file"
|
||
|
|
fi
|
||
|
|
if [ $(echo $fileperm | cut -c9) != "-" ]; then
|
||
|
|
echo "Other Write set on $file"
|
||
|
|
fi
|
||
|
|
if [ $(echo $fileperm | cut -c10) != "-" ]; then
|
||
|
|
echo "Other Execute set on $file"
|
||
|
|
fi
|
||
|
|
fi
|
||
|
|
done
|
||
|
|
fi
|
||
|
|
done
|