| 1 | #!/bin/sh
|
|---|
| 2 | #
|
|---|
| 3 | # checkhier 2.7 - check the directory hierarchy Author: Kees J. Bot
|
|---|
| 4 | # 7 May 1995
|
|---|
| 5 |
|
|---|
| 6 | case "`id`" in
|
|---|
| 7 | 'uid=0('*) ;;
|
|---|
| 8 | *) echo "$0: must be run by root" >&2
|
|---|
| 9 | exit 1
|
|---|
| 10 | esac
|
|---|
| 11 |
|
|---|
| 12 | # List of all interesting top level files and directories, with mode,
|
|---|
| 13 | # owner and group. Only the key files are listed, the rest is owned
|
|---|
| 14 | # by bin, has mode 755 or 644, and is not critical to the operation of
|
|---|
| 15 | # the system.
|
|---|
| 16 | {
|
|---|
| 17 | cat <<'EOF'
|
|---|
| 18 | drwxr-xr-x root operator /
|
|---|
| 19 | drwxr-xr-x bin operator /bin
|
|---|
| 20 | drwxr-xr-x root operator /dev
|
|---|
| 21 | drwxr-xr-x root operator /etc
|
|---|
| 22 | -rw-r--r-- root operator /etc/fstab
|
|---|
| 23 | -rw-r--r-- root operator /etc/group
|
|---|
| 24 | -rw-r--r-- root operator /etc/hostname.file
|
|---|
| 25 | -rw-r--r-- root operator /etc/inet.conf
|
|---|
| 26 | -rw-r--r-- root operator /etc/motd
|
|---|
| 27 | -rw-r--r-- root operator /etc/mtab
|
|---|
| 28 | -rw-r--r-- root operator /etc/passwd
|
|---|
| 29 | -rw-r--r-- root operator /etc/profile
|
|---|
| 30 | -rw-r--r-- root operator /etc/protocols
|
|---|
| 31 | -rw-r--r-- root operator /etc/rc
|
|---|
| 32 | -rw-r--r-- root operator /etc/services
|
|---|
| 33 | -rw------- root operator /etc/shadow
|
|---|
| 34 | -rw-r--r-- root operator /etc/termcap
|
|---|
| 35 | -rw-r--r-- root operator /etc/ttytab
|
|---|
| 36 | -rw-r--r-- root operator /etc/utmp
|
|---|
| 37 | dr-xr-xr-x root operator /mnt
|
|---|
| 38 | dr-xr-xr-x root operator /root
|
|---|
| 39 | drwxrwxrwx root operator /tmp
|
|---|
| 40 | drwxr-xr-x root operator /usr
|
|---|
| 41 | drwxr-xr-x root operator /usr/adm
|
|---|
| 42 | -rw-r--r-- root operator /usr/adm/lastlog
|
|---|
| 43 | -rw-r--r-- root operator /usr/adm/wtmp
|
|---|
| 44 | drwxr-xr-x ast other /usr/ast
|
|---|
| 45 | drwxr-xr-x bin operator /usr/bin
|
|---|
| 46 | drwxr-xr-x root operator /usr/etc
|
|---|
| 47 | drwxr-xr-x bin operator /usr/include
|
|---|
| 48 | drwxr-xr-x bin operator /usr/lib
|
|---|
| 49 | drwxrwxr-x root operator /usr/local
|
|---|
| 50 | drwxrwxr-x bin operator /usr/local/bin
|
|---|
| 51 | drwxrwxr-x bin operator /usr/local/include
|
|---|
| 52 | drwxrwxr-x bin operator /usr/local/lib
|
|---|
| 53 | drwxrwxr-x bin operator /usr/local/man
|
|---|
| 54 | drwxrwxr-x bin operator /usr/local/src
|
|---|
| 55 | drwxr-xr-x bin operator /usr/man
|
|---|
| 56 | drwxr-xr-x bin operator /usr/mdec
|
|---|
| 57 | drwx------ root operator /usr/preserve
|
|---|
| 58 | drwxr-xr-x root operator /usr/run
|
|---|
| 59 | drwxr-xr-x root operator /usr/spool
|
|---|
| 60 | drwx--x--x root operator /usr/spool/at
|
|---|
| 61 | drwx--x--x root operator /usr/spool/at/past
|
|---|
| 62 | drwx------ root operator /usr/spool/crontabs
|
|---|
| 63 | drwxrwxr-x root uucp /usr/spool/locks
|
|---|
| 64 | drwx------ daemon daemon /usr/spool/lpd
|
|---|
| 65 | drwxr-xr-x bin operator /usr/src
|
|---|
| 66 | drwxrwxrwx root operator /usr/tmp
|
|---|
| 67 | -rwsr-xr-x root ? /usr/bin/at
|
|---|
| 68 | -rwsr-xr-x root ? /usr/bin/chfn
|
|---|
| 69 | -rwsr-xr-x root ? /usr/bin/chsh
|
|---|
| 70 | -rwsr-xr-x root ? /usr/bin/df
|
|---|
| 71 | -rwsr-xr-x root ? /usr/bin/elvprsv
|
|---|
| 72 | -rwsr-xr-x root ? /usr/bin/elvrec
|
|---|
| 73 | -rwsr-xr-x root ? /usr/bin/format
|
|---|
| 74 | -rwsr-xr-x root ? /usr/bin/hostaddr
|
|---|
| 75 | -rwsr-xr-x root ? /usr/bin/install
|
|---|
| 76 | -rwsr-xr-x daemon ? /usr/bin/lpd
|
|---|
| 77 | -rwsr-xr-x root ? /usr/bin/mail
|
|---|
| 78 | -rwsr-xr-x root ? /usr/bin/mount
|
|---|
| 79 | -rwsr-xr-x root ? /usr/bin/passwd
|
|---|
| 80 | -rwsr-xr-x root ? /usr/bin/ping
|
|---|
| 81 | -rwxr-sr-x ? kmem /usr/bin/ps
|
|---|
| 82 | -rwsr-xr-- root ? /usr/bin/shutdown
|
|---|
| 83 | -rwsr-xr-x root ? /usr/bin/su
|
|---|
| 84 | -rwxr-sr-x ? uucp /usr/bin/term
|
|---|
| 85 | -rwsr-xr-x root ? /usr/bin/umount
|
|---|
| 86 | -rwxr-sr-x ? tty /usr/bin/write
|
|---|
| 87 | EOF
|
|---|
| 88 |
|
|---|
| 89 | } | {
|
|---|
| 90 | # Check if each file has the proper attributes. Offer a correction
|
|---|
| 91 | # if not.
|
|---|
| 92 | banner="\
|
|---|
| 93 | # List of commands to fix the top level hierarchy. Do not apply these
|
|---|
| 94 | # commands blindly, but check and repair by hand.
|
|---|
| 95 | "
|
|---|
| 96 |
|
|---|
| 97 | while read mode owner group file
|
|---|
| 98 | do
|
|---|
| 99 | ( # "fix" a memory leak in set...
|
|---|
| 100 |
|
|---|
| 101 | set -$- `ls -ld $file 2>/dev/null` '' '' '' ''
|
|---|
| 102 | curmode=$1 curowner=$3 curgroup=$4
|
|---|
| 103 | test $owner = '?' && curowner=$owner
|
|---|
| 104 | test $group = '?' && curgroup=$group
|
|---|
| 105 |
|
|---|
| 106 | # File types?
|
|---|
| 107 | if [ x`expr "$mode" : '\\(.\\)'` != \
|
|---|
| 108 | x`expr "$curmode" : '\\(.\\)'` ]
|
|---|
| 109 | then
|
|---|
| 110 | case $curmode in
|
|---|
| 111 | ?*) echo "${banner}rm -r $file"
|
|---|
| 112 | banner=
|
|---|
| 113 | esac
|
|---|
| 114 | curmode= curowner= curgroup=
|
|---|
| 115 | case $mode in
|
|---|
| 116 | d*) echo "${banner}mkdir $file"
|
|---|
| 117 | ;;
|
|---|
| 118 | -*) echo "${banner}> $file"
|
|---|
| 119 | ;;
|
|---|
| 120 | *) echo "$0: $mode $file: unknown filetype" >&2
|
|---|
| 121 | exit 1
|
|---|
| 122 | esac
|
|---|
| 123 | banner=
|
|---|
| 124 | fi
|
|---|
| 125 |
|
|---|
| 126 | # Mode?
|
|---|
| 127 | if [ x$mode != x$curmode ]
|
|---|
| 128 | then
|
|---|
| 129 | octmode=
|
|---|
| 130 | m=$mode
|
|---|
| 131 | for i in u g o
|
|---|
| 132 | do
|
|---|
| 133 | r=0 w=0 x=0
|
|---|
| 134 | case $m in
|
|---|
| 135 | ?r??*) r=4
|
|---|
| 136 | esac
|
|---|
| 137 | case $m in
|
|---|
| 138 | ??w?*) w=2
|
|---|
| 139 | esac
|
|---|
| 140 | case $m in
|
|---|
| 141 | ???[xst]*) x=1
|
|---|
| 142 | esac
|
|---|
| 143 | octmode=$octmode`expr $r + $w + $x`
|
|---|
| 144 | m=`expr $m : '...\\(.*\\)'`
|
|---|
| 145 | done
|
|---|
| 146 | r=0 w=0 x=0
|
|---|
| 147 | case $mode in
|
|---|
| 148 | ???[sS=]??????) r=4
|
|---|
| 149 | esac
|
|---|
| 150 | case $mode in
|
|---|
| 151 | ??????[sS=]???) w=2
|
|---|
| 152 | esac
|
|---|
| 153 | case $mode in
|
|---|
| 154 | ?????????[tT=]) x=1
|
|---|
| 155 | esac
|
|---|
| 156 | case $r$w$x in
|
|---|
| 157 | 000) ;;
|
|---|
| 158 | *) octmode=`expr $r + $w + $x`$octmode
|
|---|
| 159 | esac
|
|---|
| 160 |
|
|---|
| 161 | echo "${banner}chmod $octmode $file"
|
|---|
| 162 | banner=
|
|---|
| 163 | fi
|
|---|
| 164 |
|
|---|
| 165 | # Ownership?
|
|---|
| 166 | if [ x$owner != x$curowner -o x$group != x$curgroup ]
|
|---|
| 167 | then
|
|---|
| 168 | echo "${banner}chown $owner:$group $file"
|
|---|
| 169 | banner=
|
|---|
| 170 | fi
|
|---|
| 171 |
|
|---|
| 172 | # The Minix shell forgets processes, so wait explicitly.
|
|---|
| 173 | wait
|
|---|
| 174 |
|
|---|
| 175 | case "$banner" in '') exit 1;; *) exit 0;; esac) || banner=
|
|---|
| 176 | done
|
|---|
| 177 | case "$banner" in
|
|---|
| 178 | '') exit 1
|
|---|
| 179 | esac
|
|---|
| 180 | exit 0
|
|---|
| 181 | }
|
|---|
