linux系统中的列出敏感用户的脚本代码

linux  /  管理员 发布于 7年前   175

此处的敏感用户是指这个用户属于多个组，或者这个用户属于的组名跟这个用户名不一样

#! /bin/bash #list user who belong to more than one group #and list user who belong to the group which isn't the same as the username #w is whitelist,we will not think user in this whitelist is special or dangerous w=("root" "adm" "games" "operator" "halt" "shutdown" "sync" "daemon" "bin" "operator") function WhiteList() {     for i in ${w[@]}     do        if [ "$i" == "$1" ];thenreturn 1         fi    done    return 0 } IFS=" " for LINE in `cat /etc/passwd|awk -F: '{print $1}'` do    WhiteList $LINE;     #if $? equal 1,means it is in the whitelist     if [ $? -eq 0 ];then        a=`groups $LINE|awk -F: '{print $2}'`         b=`echo $a`         if [ "$b" != "$LINE" ];then#echo $LINE echo `groups $LINE`         fi    fi done