From 9103886714dbea53f6d9d7c05607c237a8856e93 Mon Sep 17 00:00:00 2001 From: Eugeni Dodonov Date: Thu, 12 Mar 2009 13:37:34 +0000 Subject: Updated list of files to check for bad owner/permissions. --- cron-sh/security_check.sh | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/cron-sh/security_check.sh b/cron-sh/security_check.sh index c7bb664..2b6fea6 100755 --- a/cron-sh/security_check.sh +++ b/cron-sh/security_check.sh @@ -89,13 +89,15 @@ fi list=".bashrc .bash_profile .bash_login .bash_logout .cshrc .emacs .exrc \ .forward .klogin .login .logout .profile .tcshrc .fvwmrc .inputrc .kshrc \ .nexrc .screenrc .ssh .ssh/config .ssh/authorized_keys .ssh/environment \ -.ssh/known_hosts .ssh/rc .twmrc .xsession .xinitrc .Xdefaults" +.ssh/known_hosts .ssh/rc .twmrc .xsession .xinitrc .Xdefaults \ +.gnupg .gnupg/secring.gpg .ssh/identity .ssh/id_dsa .ssh/id_rsa \ +.Xauthority .cvspass .subversion/auth .purple/accounts.xml .config " getent passwd | awk -F: '/^[^+-]/ { print $1 ":" $3 ":" $6 }' | \ while IFS=: read username uid homedir; do if ! expr "$homedir" : "$FILTER" > /dev/null; then for f in ${list} ; do file="${homedir}/${f}" - if [[ -f "${file}" ]] ; then + if [[ -e "${file}" ]] ; then res=`ls -LldcGn "${file}" | sed 's/ \{1,\}/:/g'` printf "${uid}:${username}:${file}:${res}\n" fi -- cgit v1.2.1