a

2026-05-11 09:15:08 +02:00
parent 9bec2b9e42
commit 404ee3fec4
641 changed files with 416825 additions and 0 deletions
@@ -0,0 +1,22 @@
+#!/usr/bin/env bash
+
+expected_inactive_days=45
+
+if useradd -D | grep -Eq '^\s*INACTIVE\s*=\s*'$expected_inactive_days'\b'; then
+	echo "Default inactivity period is correct."
+else
+	echo "Default inactivity period is incorrect."
+	exit 1
+fi
+
+while IFS=: read -r username password lastchg min max warn inactive_days expire; do
+	if [[ -z "$inactive_days" || "$inactive_days" == " " ]]; then
+		continue
+	fi
+
+	if [[ "$inactive_days" -gt $expected_inactive_days ]]; then
+		echo "User $username exceeds policy."
+		exit 1
+	fi
+done </etc/shadow
+exit 0