How to write script code that lists sensitive users in linux system
This article mainly explains "how to write the script code for listing sensitive users in linux system". The explanation in this article is simple and clear, easy to learn and understand. Please follow the ideas of Xiaobian slowly and deeply to study and learn "how to write the script code for listing sensitive users in linux system" together!
Sensitive user here means that this user belongs to multiple groups, or the group name of this user is different from this user name.
#! /bin/bash #list user who belong to more than one group #and list user who belong to the group which isn't the same as the username #w is whitelist,we will not think user in this whitelist is special or dangerous w=("root" "adm" "games" "operator" "halt" "shutdown" "sync" "daemon" "bin" "operator") function WhiteList() { for i in ${w[@]} do if [ "$i" == "$1" ];then return 1 fi done return 0 } IFS=" " for LINE in `cat /etc/passwd|awk -F: '{print $1}'` do WhiteList $LINE; #if $? equal 1,means it is in the whitelist if [ $? -eq 0 ];then a=`groups $LINE|awk -F: '{print $2}'` b=`echo $a` if [ "$b" != "$LINE" ];then #echo $LINE echo `groups $LINE` fi fi done thank you for reading, the above is "how to write linux system to list sensitive user script code" content, after the study of this article, I believe we have a deeper understanding of how to write linux system to list sensitive user script code, the specific use of the need for everyone to practice verification. Here is, Xiaobian will push more articles related to knowledge points for everyone, welcome to pay attention!
