OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Short /etc/security addition
From: Garrett Wollman (wollmankhavrinen.lcs.mit.edu)
Date: Fri Feb 04 2000 - 11:24:52 CST

We found this useful:

--- /usr/src/etc/security Tue Dec 21 04:46:02 1999
+++ /etc/security Fri Jan 28 21:25:32 2000
-56,6 +56,10
 echo "checking for passwordless accounts:"
 awk -F: 'NF > 1 && $1 !~ /^[#+]/ && $2=="" {print $0}' /etc/master.passwd
 
+separator
+echo "checking for su usage:"
+zcat /var/log/messages.0.gz | fgrep ' su: ' | sed -e 's,^, ,'
+
 # show denied packets
 if ipfw -a l 2>/dev/null | egrep "deny|reset|unreach" > $TMP; then
         if [ ! -f $LOG/ipfw.today ] ; then

A sed expert could easily simplify that pipeline....

-GAWollman 

--
Garrett A. Wollman   | O Siem / We are all family / O Siem / We're all the same
wollmanlcs.mit.edu  | O Siem / The fires of freedom 
Opinions not those of| Dance in the burning flame
MIT, LCS, CRS, or NSA|                     - Susan Aglukark and Chad Irschick

To Unsubscribe: send mail to majordomoFreeBSD.org
with "unsubscribe freebsd-security" in the body of the message