8 lines
502 B
Bash
8 lines
502 B
Bash
#!/usr/bin/env bash
|
|
{
|
|
for PARTITION in $(findmnt -n -l -k -it $(awk '/nodev/ { print $2 }' /proc/filesystems | paste -sd,) | grep -Pv "noexec|nosuid" | awk '{print $1}'); do
|
|
for PRIVILEGED in $(find "${PARTITION}" -xdev -perm /6000 -type f); do
|
|
grep -qr "${PRIVILEGED}" /etc/audit/rules.d && printf "OK: '${PRIVILEGED}' found in auditing rules.\n" || printf "Warning: '${PRIVILEGED}' not found in on disk configuration.\n"
|
|
done
|
|
done
|
|
} |