View | Details | Raw Unified | Return to bug 48325 | Differences between
and this patch

Collapse All | Expand All

(-)etc/periodic/security/100.chksetuid (-1 / +7 lines)
Lines 45-51 Link Here
45
then
45
then
46
	echo ""
46
	echo ""
47
	echo 'Checking setuid files and devices:'
47
	echo 'Checking setuid files and devices:'
48
	MP=`mount -t ufs,zfs | awk '$0 !~ /no(suid|exec)/ { print $3 }'`
48
	IFS=$'\t\n'	# Don't split mount points with spaces
49
	MP=`mount -t ufs,zfs | awk '
50
		$0 !~ /no(suid|exec)/ {
51
			sub(/^.* on \//, "/");
52
			sub(/ \(.*\)/, "");
53
			print $0
54
		}'`
49
	find -sx $MP /dev/null \( ! -fstype local \) -prune -o -type f \
55
	find -sx $MP /dev/null \( ! -fstype local \) -prune -o -type f \
50
	    \( -perm -u+x -or -perm -g+x -or -perm -o+x \) \
56
	    \( -perm -u+x -or -perm -g+x -or -perm -o+x \) \
51
	    \( -perm -u+s -or -perm -g+s \) -exec ls -liTd \{\} \+ |
57
	    \( -perm -u+s -or -perm -g+s \) -exec ls -liTd \{\} \+ |
(-)etc/periodic/security/110.neggrpperm (-1 / +7 lines)
Lines 43-49 Link Here
43
then
43
then
44
	echo ""
44
	echo ""
45
	echo 'Checking negative group permissions:'
45
	echo 'Checking negative group permissions:'
46
	MP=`mount -t ufs,zfs | awk '$0 !~ /no(suid|exec)/ { print $3 }'`
46
	IFS=$'\t\n'	# Don't split mount points with spaces
47
	MP=`mount -t ufs,zfs | awk '
48
		$0 !~ /no(suid|exec)/ {
49
			sub(/^.* on \//, "/");
50
			sub(/ \(.*\)/, "");
51
			print $0
52
		}'`
47
	n=$(find -sx $MP /dev/null \( ! -fstype local \) -prune -o -type f \
53
	n=$(find -sx $MP /dev/null \( ! -fstype local \) -prune -o -type f \
48
	    \( \( ! -perm +010 -and -perm +001 \) -or \
54
	    \( \( ! -perm +010 -and -perm +001 \) -or \
49
	    \( ! -perm +020 -and -perm +002 \) -or \
55
	    \( ! -perm +020 -and -perm +002 \) -or \
(-)etc/periodic/security/security.functions (+1 lines)
Lines 48-53 Link Here
48
#   LABEL is the base name of the ${LOG}/${label}.{today,yesterday} files.
48
#   LABEL is the base name of the ${LOG}/${label}.{today,yesterday} files.
49
49
50
check_diff() {
50
check_diff() {
51
  unset IFS
51
  rc=0
52
  rc=0
52
  if [ "$1" = "new_only" ]; then
53
  if [ "$1" = "new_only" ]; then
53
    shift
54
    shift

Return to bug 48325