此处的敏感用户是指这个用户属于多个组，或者这个用户属于的组名跟这个用户名不一样
|
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
|
#! /bin/bash #list user who belong to more than one group #and list user who belong to the group which isn't the same as the username #w is whitelist,we will not think user in this whitelist is special or dangerous w=("root" "adm" "games" "operator" "halt" "shutdown" "sync" "daemon" "bin" "operator") function WhiteList() { for i in ${w[@]} do if [ "$i" == "$1" ];then return 1 fi done return 0 } IFS=" " for LINE in `cat /etc/passwd|awk -F: '{print $1}'` do WhiteList $LINE; #if $? equal 1,means it is in the whitelist if [ $? -eq 0 ];then a=`groups $LINE|awk -F: '{print $2}'` b=`echo $a` if [ "$b" != "$LINE" ];then #echo $LINE echo `groups $LINE` fi fi done |
