1 files changed, 73 insertions, 0 deletions
diff --git a/cron-sh/security.sh b/cron-sh/security.sh
new file mode 100755
index 0000000..a12d46c
--- /dev/null
+++ b/cron-sh/security.sh
@@ -0,0 +1,73 @@
+#!/bin/sh
+
+if [[ ! -f /etc/security/msec/security.conf ]]; then
+    echo "Can't access /etc/security/msec/security.conf."
+    exit 1
+fi
+
+. /etc/security/msec/security.conf
+
+# Modified filters coming from debian security scripts.
+
+CS_NFSAFS='(nfs|afs|xfs|coda)'
+CS_TYPES=' type (devpts|auto|proc|msdos|fat|vfat|iso9660|ncpfs|smbfs|'$CS_NFSAFS')'
+CS_DEVS='^/dev/fd'
+CS_DIRS='on /mnt'
+FILTERS="$CS_TYPES|$CS_DEVS|$CS_DIRS"
+DIR=`mount | grep -vE "$FILTERS" | cut -d ' ' -f3`
+PRINT="%h/%f\n"
+#PRINT="%8i %5m %3n %-10u %-10g %9s %t %h/%f\n"
+
+if [[ ! -d /var/log/security ]]; then
+    mkdir /var/log/security
+fi
+
+if [[ -s ${SUID_ROOT_TODAY} ]]; then
+    mv ${SUID_ROOT_TODAY} ${SUID_ROOT_YESTERDAY};
+fi
+
+if [[ -s ${SUID_GROUP_TODAY} ]]; then
+    mv ${SUID_GROUP_TODAY} ${SUID_GROUP_YESTERDAY};
+fi
+
+if [[ -s ${WRITEABLE_TODAY} ]]; then
+    mv ${WRITEABLE_TODAY} ${WRITEABLE_YESTERDAY};
+fi
+
+if [[ -s ${UNOWNED_USER_TODAY} ]]; then
+    mv ${UNOWNED_USER_TODAY} ${UNOWNED_USER_YESTERDAY};
+fi
+
+if [[ -s ${UNOWNED_GROUP_TODAY} ]]; then
+    mv ${UNOWNED_GROUP_TODAY} ${UNOWNED_GROUP_YESTERDAY};
+fi
+
+if [[ -s ${OPEN_PORT_TODAY} ]]; then
+    mv -f ${OPEN_PORT_TODAY} ${OPEN_PORT_YESTERDAY}
+fi
+
+if [[ -s ${SUID_MD5_TODAY} ]]; then
+    mv ${SUID_MD5_TODAY} ${SUID_MD5_YESTERDAY};
+fi
+
+netstat -pvlA inet > ${OPEN_PORT_TODAY};
+find ${DIR} -xdev -type f -perm +04000 -user root -printf "${PRINT}"  | sort > ${SUID_ROOT_TODAY}
+find ${DIR} -xdev -type f -perm +02000 -printf "${PRINT}" | sort > ${SUID_GROUP_TODAY}
+find ${DIR} -xdev -type f -perm -2 -printf "${PRINT}" | sort > ${WRITEABLE_TODAY}
+find ${DIR} -xdev -nouser -printf "${PRINT}" | sort > ${UNOWNED_USER_TODAY}
+find ${DIR} -xdev -nogroup -printf "${PRINT}" | sort > ${UNOWNED_GROUP_TODAY}
+
+cat ${SUID_ROOT_TODAY} | while read line; do 
+    md5sum ${line}
+done > ${SUID_MD5_TODAY}
+
+
+
+
+
+
+
+
+
+
+