=========================================================== .___ __ __ _________________ __ __ __| _/|__|/ |_ / ___\_` __ \__ \ | | \/ __ | | \\_ __\ / /_/ > | \// __ \| | / /_/ | | || | \___ /|__| (____ /____/\____ | |__||__| /_____/ \/ \/ grep rough audit - static analysis tool v2.8 written by @Wireghoul =================================[justanotherhacker.com]=== checksecurity-2.0.16+nmu1/plugins/check-setuid-57- nfssys=`mount | grep -E 'type (nfs|afs)' | grep -vE '\(.*(nosuid|noexec).*nodev.*\)'` checksecurity-2.0.16+nmu1/plugins/check-setuid:58: nfssyscnt=`echo $nfssys |grep "[a-z]"| wc -l` checksecurity-2.0.16+nmu1/plugins/check-setuid-59- set -e ############################################## checksecurity-2.0.16+nmu1/plugins/check-setuid-99-ionice -t -c3 \ checksecurity-2.0.16+nmu1/plugins/check-setuid:100:find `mount | grep -vE "$CHECKSECURITY_FILTER" | cut -d ' ' -f 3` \ checksecurity-2.0.16+nmu1/plugins/check-setuid-101- -ignore_readdir_race \ ############################################## checksecurity-2.0.16+nmu1/plugins/check-setuid-124- checksecurity-2.0.16+nmu1/plugins/check-setuid:125: if [ `cat $TMPDIFF | wc -l` -gt 0 -a ! -z "$CHECKSECURITY_EMAIL" ]; then checksecurity-2.0.16+nmu1/plugins/check-setuid-126- /usr/bin/mail -s "Setuid changes for `hostname -f` on `date '+%D %T'`" $CHECKSECURITY_EMAIL < $TMPDIFF ############################################## checksecurity-2.0.16+nmu1/plugins/check-sockets-99- checksecurity-2.0.16+nmu1/plugins/check-sockets:100: if [ `cat $TMPDIFF | wc -l` -gt 0 -a ! -z "$CHECKSECURITY_EMAIL" ]; then checksecurity-2.0.16+nmu1/plugins/check-sockets-101- /usr/bin/mail -s "Socket changes for `hostname -f` on `date '+%D %T'`" $CHECKSECURITY_EMAIL < $TMPDIFF ############################################## checksecurity-2.0.16+nmu1/plugins/check-passwd-40- # Count of UID 0 accounts checksecurity-2.0.16+nmu1/plugins/check-passwd:41: NROOT=`awk -F: '{if (0 == $3) print;}' /etc/passwd | wc -l` checksecurity-2.0.16+nmu1/plugins/check-passwd-42- ############################################## checksecurity-2.0.16+nmu1/bin/checksecurity-144- print "Executing plugin $name ($file)\n" if $opt_debug; checksecurity-2.0.16+nmu1/bin/checksecurity:145: system( $file ); checksecurity-2.0.16+nmu1/bin/checksecurity-146- }