100.chksetuid revision 259065
1201360Srdivacky#!/bin/sh - 2201360Srdivacky# 3201360Srdivacky# Copyright (c) 2001 The FreeBSD Project 4201360Srdivacky# All rights reserved. 5201360Srdivacky# 6201360Srdivacky# Redistribution and use in source and binary forms, with or without 7201360Srdivacky# modification, are permitted provided that the following conditions 8201360Srdivacky# are met: 9201360Srdivacky# 1. Redistributions of source code must retain the above copyright 10201360Srdivacky# notice, this list of conditions and the following disclaimer. 11201360Srdivacky# 2. Redistributions in binary form must reproduce the above copyright 12201360Srdivacky# notice, this list of conditions and the following disclaimer in the 13201360Srdivacky# documentation and/or other materials provided with the distribution. 14201360Srdivacky# 15201360Srdivacky# THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND 16201360Srdivacky# ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 17201360Srdivacky# IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 18201360Srdivacky# ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE 19201360Srdivacky# FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 20201360Srdivacky# DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 21201360Srdivacky# OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 22201360Srdivacky# HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 23201360Srdivacky# LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 24201360Srdivacky# OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 25218893Sdim# SUCH DAMAGE. 26201360Srdivacky# 27201360Srdivacky# $FreeBSD: releng/10.0/etc/periodic/security/100.chksetuid 254974 2013-08-27 21:20:28Z jlh $ 28201360Srdivacky# 29201360Srdivacky 30201360Srdivacky# If there is a global system configuration file, suck it in. 31201360Srdivacky# 32201360Srdivackyif [ -r /etc/defaults/periodic.conf ] 33221345Sdimthen 34221345Sdim . /etc/defaults/periodic.conf 35201360Srdivacky source_periodic_confs 36201360Srdivackyfi 37201360Srdivacky 38201360Srdivacky. /etc/periodic/security/security.functions 39201360Srdivacky 40201360Srdivackysecurity_daily_compat_var security_status_chksetuid_enable 41201360Srdivacky 42221345Sdimrc=0 43221345Sdim 44201360Srdivackyif check_yesno_period security_status_chksetuid_enable 45201360Srdivackythen 46201360Srdivacky echo "" 47201360Srdivacky echo 'Checking setuid files and devices:' 48201360Srdivacky MP=`mount -t ufs,zfs | awk '$0 !~ /no(suid|exec)/ { print $3 }'` 49201360Srdivacky find -sx $MP /dev/null -type f \ 50201360Srdivacky \( -perm -u+x -or -perm -g+x -or -perm -o+x \) \ 51201360Srdivacky \( -perm -u+s -or -perm -g+s \) -exec ls -liTd \{\} \+ | 52201360Srdivacky check_diff setuid - "${host} setuid diffs:" 53201360Srdivacky rc=$? 54201360Srdivackyfi 55201360Srdivacky 56221345Sdimexit $rc 57221345Sdim