Oracle Peoplesoft DBA (Prasanth Bhaskaran): 2024

Friday, November 22, 2024

How to change PeopleSoft Home Page from Fluid to Classic

How to change PC Home Page from Fluid to Classic

Click OK and Save.

Sunday, November 17, 2024

Imp scripts

Below SQL to alert us 10 days before for PSAPPS password is about to expire.

select OPRID,LASTPSWDCHANGE from sysadm.psoprdefn where oprid='PSAPPS' and sysdate-LASTPSWDCHANGE>=80;

To Find the PeopleSoft concurrent users:

SELECT OPRID, (to_char (LOGINDTTM, 'yyyy-mm-dd hh24:mi:ss.ff3')) AS "LOGINDTTM",

to_char(LOGINDTTM, 'D') as DAY

FROM PSACCESSLOG

WHERE OPRID NOT IN ('PSADMIN', 'PRCS', 'PSLDAP', 'PUBUSER', 'RUNCONTROLHR', 'RUNCONTROLTIMS', 'RUNCONTROLPAT', 'RUNCONTROLSEC')

AND LOGINDTTM >'18-JUL-19' AND LOGINDTTM <'19-JUL-19'

AND LOGIPADDRESS !='UNKNOWN'

ORDER BY LOGINDTTM ASC;

Database Size :

SQL> select round((sum(bytes)/1048576/1024),2) from v$datafile;

Tablespace Utilization :

#####################################################################################

## CHECK TABLESPACE SIZE ##

####################################################################################

#!/bin/ksh

sqlplus -s <<!

oracle/$1@$2

set feed off

set linesize 100

set pagesize 200

spool tablespace.alert

SELECT F.TABLESPACE_NAME,

TO_CHAR ((T.TOTAL_SPACE - F.FREE_SPACE),'999,999') "USED (MB)",

TO_CHAR (F.FREE_SPACE, '999,999') "FREE (MB)",

TO_CHAR (T.TOTAL_SPACE, '999,999') "TOTAL (MB)",

TO_CHAR ((ROUND ((F.FREE_SPACE/T.TOTAL_SPACE)*100)),'999')||' %' PER_FREE

FROM (

SELECT TABLESPACE_NAME,

ROUND (SUM (BLOCKS*(SELECT VALUE/1024

FROM V\$PARAMETER

WHERE NAME = 'db_block_size')/1024)

) FREE_SPACE

FROM DBA_FREE_SPACE

GROUP BY TABLESPACE_NAMEa

) F,

(

SELECT TABLESPACE_NAME,

ROUND (SUM (BYTES/1048576)) TOTAL_SPACE

FROM DBA_DATA_FILES

GROUP BY TABLESPACE_NAMEa

) T

WHERE F.TABLESPACE_NAME = T.TABLESPACE_NAME

AND (ROUND ((F.FREE_SPACE/T.TOTAL_SPACE)*100)) < 10;

spool off

exit

if [ `cat tablespace.alert|wc -l` -gt 0 ]

then

cat tablespace.alert -l tablespace.alert > tablespace.tmp

mailx -s "TABLESPACE ALERT for ${2}" PBhaskaran@xfg.com < tablespace.tmp

===================================================================

Script to create the synonyms :

-- Run Dynamic SQL to create synonym script

SET HEA OFF;

SET PAGESIZE 0;

SET LINES 150;

SPOOL SYNONYM.SQL

select 'create public synonym '||object_name||' for '||owner||'.'||object_name||';'

from sys.dba_objects where owner = 'SYSADM' and object_type in ('TABLE', 'VIEW');

SPOOL OFF;

-- Run Dynamic SQL to create grant scripts

SET HEA OFF;

SET PAGESIZE 0;

SET LINES 150

SPOOL GRANT.SQL

select 'grant select, update, insert, delete on '||object_name||' to VOLT_SUID;'

from sys.dba_objects where owner = 'SYSADM' and object_type in ('TABLE', 'VIEW');

SPOOL OFF;

prompt

prompt Manually run synonym script

prompt Enable spool to generate log

prompt @SYNONYM.SQL

prompt

prompt Manually run grant scripts

prompt Enable spool to generate log

prompt @GRANT.SQL

Kill PSQUERY Automatically after 60mints

The SELECT below is being run for PSQUERY kill job

SELECT

'alter system kill session ''' ||sid ||',' ||serial# ||', @' ||inst_id ||''';'

FROM gv$session a

WHERE a.process IN

(SELECT ltrim(TO_CHAR(q.sessionidnum))

FROM psprcsque q,

psprcsrqst t

WHERE q.prcsinstance=t.prcsinstance

AND t.prcsname ='PSQUERY'

AND q.rqstdttm =

(SELECT DISTINCT MAX(rqstdttm)

FROM psprcsque q1

WHERE q1.sessionidnum=q.sessionidnum

)

AND t.runstatus IN (7,14,16)

)

and a.last_call_et > 3600

Percentage of process completed

SELECT s.SID,

s.serial#,

s.machine,

ROUND(sl.elapsed_seconds/60) || ':' ||

MOD(sl.elapsed_seconds,60) elapsed,

ROUND(sl.time_remaining/60) || ':' ||

MOD(sl.time_remaining,60) remaining,

ROUND(sl.sofar/sl.totalwork*100, 2) progress_pct

FROM v$session s,

v$session_longops sl

WHERE s.SID = sl.SID

AND s.serial# = sl.serial#

ORDER BY 4 DESC;

Check tablespace size

#####################################################################################

## CHECK TABLESPACE SIZE ##

####################################################################################

#!/bin/ksh

sqlplus -s <<!

oracle/$1@$2

set feed off

set linesize 100

set pagesize 200

spool tablespace.alert

SELECT F.TABLESPACE_NAME,

TO_CHAR ((T.TOTAL_SPACE - F.FREE_SPACE),'999,999') "USED (MB)",

TO_CHAR (F.FREE_SPACE, '999,999') "FREE (MB)",

TO_CHAR (T.TOTAL_SPACE, '999,999') "TOTAL (MB)",

TO_CHAR ((ROUND ((F.FREE_SPACE/T.TOTAL_SPACE)*100)),'999')||' %' PER_FREE

FROM (

SELECT TABLESPACE_NAME,

ROUND (SUM (BLOCKS*(SELECT VALUE/1024

FROM V\$PARAMETER

WHERE NAME = 'db_block_size')/1024)

) FREE_SPACE

FROM DBA_FREE_SPACE

GROUP BY TABLESPACE_NAME

) F,

(

SELECT TABLESPACE_NAME,

ROUND (SUM (BYTES/1048576)) TOTAL_SPACE

FROM DBA_DATA_FILES

GROUP BY TABLESPACE_NAMEa

) T

WHERE F.TABLESPACE_NAME = T.TABLESPACE_NAME

AND (ROUND ((F.FREE_SPACE/T.TOTAL_SPACE)*100)) < 10;

spool off

exit

if [ `cat tablespace.alert|wc -l` -gt 0 ]

then

cat tablespace.alert -l tablespace.alert > tablespace.tmp

mailx -s "TABLESPACE ALERT for ${2}" PBhaskaran@volt.com < tablespace.tmp

Find the Tax upgrade status

SYS@HCM92DMO>SELECT * FROM SYSADM.PSPROJECTITEM WHERE PROJECTNAME LIKE 'TAX_UPDATE_18A%';

no rows selected

SYS@HCM92DMO>SELECT * FROM sysadm.PS_TAX_UPDATE ORDER BY DT_ENTERED DESC;

Sunday, September 15, 2024

Find HWM and Tunning

Action Plan :

============

Kill session

select owner,table_name,num_rows,blocks from dba_tables where table_name='PS_CA_BI_PC_TA14';

result 0 and blocks above xxxx then have issue

alter table sysadm.PS_CA_BI_PC_TA14 enable row movement;

alter table sysadm.PS_CA_BI_PC_TA14 shrink space;

alter table sysadm.PS_CA_BI_PC_TA14 DISABLE row movement;

alter index sysadm.PSVIZCA_BI_PC_TA14 rebuild online;

alter index sysadm.PS_CA_BI_PC_TA14 rebuild online;

exec DBMS_STATS.GATHER_TABLE_STATS (ownname=> 'SYSADM', tabname=>'PS_CA_BI_PC_TA14', estimate_percent=>100, method_opt=> 'FOR ALL COLUMNS SIZE 254', DEGREE=> 8, cascade=>TRUE);

Email ID Masking in PeopleSOft and step to collect stats

Email ID Masking in PeopleSOft :

UPDATE PSUSEREMAIL SET EMAILID = '<DB_NAME>@abcd.com';

UPDATE PS_ROLEXLATOPR SET EMAILID = '<DB_NAME>@abcd.com';

UPDATE PSOPRDEFN SET EMAILID = '<DB_NAME>@abcd.com';

UPDATE PS_EMAIL_ADDRESSES SET EMAIL_ADDR = '<DB_NAME>@abcd.com';

Steps to collect the stats :

2. Delete the table statistics & Collect the Table statistics with histograms for the table PS_CA_SUM_IN_USE

SQL > exec DBMS_STATS.DELETE_TABLE_STATS('<owner>','PS_CA_SUM_IN_USE');

SQL > exec DBMS_STATS.GATHER_TABLE_STATS (ownname=> <owner>, tabname=>'PS_CA_SUM_IN_USE', estimate_percent=>100, method_opt=> 'FOR ALL COLUMNS SIZE 254',DEGREE=> 6,cascade=>TRUE);

3. Execute the Batch process

4. Collect the PeopleSoft trace with same trace settings as last time and SQLT trace for the SQL CA_SUM_RFSH.ReCalc1.CalcNew.

Unix server audit report script

#!/bin/csh

############################################################

#!/bin/csh

# -------------------------------------

# UNIX Audit Script

# -------------------------------------

# 10/04 - Header and text objects defined - LV / BR / PM / CW - eyversion 1.0.0

# 12/04 - Header refined - BR - eyversion 1.1.0

# 01/05 - Header refined - BR - eyversion 1.2.0

# 05/05 - HTML Definitions Addedd - PM - eyversion 1.3.0

# 06/06 - Header refined - MT - eyversion 1.4.0

# 02/07 - Header refined to create unique output folders - MT - eyversion 1.5.0

# 09/07 - Corrected footer to fix Sybase output problems. - JW - eyversion 1.6.0

# =============================================================

#set -x

onintr quit

set prompt="Press <Return> to continue"

set eyversion=1.6.0

set UNAMEa=`uname -a`

set basedir=/tmp/eyscan

set HOSTNAME=`hostname`

set INDEXF=index.html

#set SYSTEMF=system.out.txt

set SYSTEMF=system.html

#set SPECIFICF=specific.out.txt

set SPECIFICF=specific.html

main:

while (1)

clear

echo " ---------------------------------------------------"

echo " Ernst & Young LLP "

echo " Copyright - 2006 "

echo " ---------------------------------------------------"

echo " Please make your selection from the options below: "

echo ""

echo " 1) Run the script on this host "

echo " 2) Copyright Information "

echo " 3) Exit "

echo ""

echo -n " Enter Selection: "

set OUTPUTTYPE=$<

switch ($OUTPUTTYPE)

case 1:

goto systemtype

case 2:

goto CopyRight

case 3:

exit

default:

clear

echo "Invalid selection"

echo -n "$prompt"

tmp=$<

goto main

endsw

end

clear

echo ""

echo " ---------------------------------------------------"

echo " This script is privileged and/or confidential, and the developers do not"

echo " waive any related rights. Any distribution, use, or copying of this"

echo " script or the information it contains by other than the intended"

echo " user is unauthorized. If you received this script in error, please advise"

echo " Ernst & Young LLP immediately."

echo " "

echo " ---------------------------------------------------"

sleep 5

goto main

systemtype:

clear

echo " ---------------------------------------------------"

echo " Ernst & Young LLP "

echo " Copyright - 2006 "

echo " ---------------------------------------------------"

echo " Please select the system type: "

echo ""

echo " 1) Linux "

echo " 2) All other Unix flavors "

echo " 3) Sybase Database "

echo ""

echo -n " Enter Selection: "

set OUTPUTTYPE=$<

switch ($OUTPUTTYPE)

case 1:

set case=1

goto systeminfo1

case 2:

set case=2

goto systeminfo2

case 3:

set case=3

goto dbinfo

default:

clear

echo "Invalid selection"

echo -n "$prompt"

tmp=$<

goto systemtype

endsw

end

systeminfo1:

clear

echo ""

echo " ---------------------------------------------------"

echo " Ernst & Young LLP "

echo " Copyright - 2006 "

echo " ---------------------------------------------------"

echo " Please enter some of the system specifics "

echo ""

echo -n " 1) Please enter a unique output folder name : "

set outfolder = `head -1`

set outdir = ${basedir}/${outfolder}

echo -n " 2) What is the Operating System Version?: "

set version = `head -1`

echo -n " 3) What is the System Hostname?: "

set sysname = `head -1`

echo -n " 4) What is the Administrator's Name?: "

set adminname = `head -1`

echo -n " 5) What is the Client's Name?: "

set clientname = `head -1`

echo -n " 6) Enter Auditor's Full Name: "

set auditorname = `head -1`

echo -n " 7) Enter Server Information / Note To Auditor: "

set servinfo = `head -1`

clear

echo ""

echo " ---------------------------------------------------"

echo " Ernst & Young LLP Script - ${eyversion} "

echo " Copyright - 2006 "

echo " ---------------------------------------------------"

echo " System specifics "

echo " "

echo " 1) Output directory: ${outdir}"

echo " 2) OS Version Number: ${version}"

echo " 3) System Name: ${sysname}"

echo " 4) Administrator's Name: ${adminname}"

echo " 5) Client's Name: ${clientname}"

echo " 6) Auditor's Full Name: ${auditorname}"

echo " 7) Server Information / Note To Auditor: ${servinfo}"

echo ""

echo -n " Is the above information correct? [y/n]: "

set ans=$<

if (!(($ans == "y") || ($ans == "Y"))) then

clear

goto systeminfo1

else

clear

goto Query

endif

systeminfo2:

clear

echo ""

echo " ---------------------------------------------------"

echo " Ernst & Young LLP "

echo " Copyright - 2006 "

echo " ---------------------------------------------------"

echo " Please enter some of the system specifics "

echo " "

echo -n " 1) Please enter a unique output folder name: "

set outfolder = $<

set outdir = ${basedir}/${outfolder}

echo -n " 2) What is the Operating System Version?: "

set version = $<

echo -n " 3) What is the System Hostname?: "

set sysname = $<

echo -n " 4) What is the Administrator's Name?: "

set adminname = $<

echo -n " 5) What is the Client's Name?: "

set clientname = $<

echo -n " 6) Enter Auditor's Full Name: "

set auditorname = $<

echo -n " 7) Enter Server Information / Note To Auditor: "

set servinfo = $<

clear

echo ""

echo " ---------------------------------------------------"

echo " Ernst & Young LLP Script - ${eyversion} "

echo " Copyright - 2006 "

echo " ---------------------------------------------------"

echo " System specifics "

echo " "

echo " 1) Output directory: ${outdir}"

echo " 2) OS Version Number: ${version}"

echo " 3) System Name: ${sysname}"

echo " 4) Administrator's Name: ${adminname}"

echo " 5) Client's Name: ${clientname}"

echo " 6) Auditor's Full Name: ${auditorname}"

echo " 7) Server Information / Note To Auditor: ${servinfo}"

echo ""

echo -n " Is the above information correct? [y/n]: "

set ans=$<

if (!(($ans == "y") || ($ans == "Y"))) then

clear

goto systeminfo2

else

clear

goto Query

endif

dbinfo:

clear

echo ""

echo " ---------------------------------------------------"

echo " Ernst & Young LLP "

echo " Copyright - 2006 "

echo " ---------------------------------------------------"

echo " Please enter the database connection information "

echo " ---------------------------------------------------"

echo " Please enter the database connection information "

echo " "

echo " THIS INFORMATION WILL NOT BE SAVED! "

echo ""

echo -n " 1) Please enter a unique output folder name: "

set outfolder = `head -1`

set outdir = ${basedir}/${outfolder}

echo -n " 2) What is the Database Administrator username?: "

set admin_name = `head -1`

echo -n " 3) What is the Database Administrator password?: "

set admin_pword = `head -1`

echo -n " 4) What is the Database Name?: "

set db_name = `head -1`

clear

echo ""

echo " ---------------------------------------------------"

echo " Ernst & Young LLP Script - ${eyversion} "

echo " Copyright - 2006 "

echo " ---------------------------------------------------"

echo " Database connection information "

echo " "

echo " 1) Output directory: ${outdir}"

echo " 2) Administrator Name: ${admin_name}"

echo " 3) Administrator Password: ${admin_pword}"

echo " 4) Database Name: ${db_name}"

echo ""

echo -n " Is the above information correct? [y/n]: "

set ans=$<

if (!(($ans == "y") || ($ans == "Y"))) then

clear

goto dbinfo

else

clear

goto Query

endif

Query:

echo ""

echo " ---------------------------------------------------"

echo " Ernst & Young LLP Script - ${eyversion} "

echo " Copyright - 2006 "

echo " ---------------------------------------------------"

echo " The query script is now running. Please wait..."

echo ""

sleep 3

#*** Set up output formatting.

# This component of the script ensures that the output directory and files are resident on the system being reviewed.

if (!(-d ${basedir})) then

mkdir -p ${basedir}

chmod 700 ${basedir}

mkdir -p ${outdir}

chmod 700 ${outdir}

else

mkdir -p ${outdir}

chmod 700 ${outdir}

endif

if $case != 3 then

set INDEXO=${outdir}/${INDEXF}

set SYSTEMO=${outdir}/${SYSTEMF}

set SPECIFICO=${outdir}/${SPECIFICF}

set TEXTO=${outdir}/ey-${HOSTNAME}.txt

touch ${INDEXO}

touch ${SPECIFICO}

touch ${SYSTEMO}

# Add new html output files to the list here:

echo "<html><head><title>specific.out</title></head><body><h1>Specific to this flavor of UNIX</h1><pre>" > ${SPECIFICO}

echo "<html><head><title>system.out</title></head><body><h1>System files</h1><pre>" > ${SYSTEMO}

echo "<html><head><title>UNIX Script</title></head><body><h1>EY UNIX Script</h1>" > ${INDEXO}

# End of new html output files

# System specifics to include on index page

echo "${UNAMEa}<br>" >>& ${INDEXO}

echo "<b>OS Version:</b> ${version}<br>">>& ${INDEXO}

echo "<b>Adminstrator:</b> ${adminname}<br>">>& ${INDEXO}

echo "<b>Client:</b> ${clientname}<br>">>& ${INDEXO}

echo "<b>Auditor's Full Name:</b> ${auditorname}<br>">>& ${INDEXO}

echo "<b>EY Script Version Number:</b> ${eyversion}<br>">>& ${INDEXO}

echo "<b>Server Information / Note To Auditor:</b> ${servinfo}<br><br><ul>">>& ${INDEXO}

echo '<a name=TopOfIndex>' >>& ${INDEXO}

endif

# Script finds and displays .hushlogin files

echo '<a name=Hush>' >>& ${SYSTEMO}

echo "Displaying .hushlogin files" >>& ${SYSTEMO}

echo '**************************' >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

find / $ -fstype nfs -prune $ -o -name '.hushlogin' -exec ls -dal {} \; >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

# Script finds all .netrc files

echo '<a name=Netrc>' >>& ${SYSTEMO}

echo "Displaying .netrc files" >>& ${SYSTEMO}

echo '***********************' >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

find / $ -fstype nfs -prune $ -o -name '*.netrc' -exec /usr/bin/ls -al {} \; -exec cat {} \; >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

# Script finds and displays .rhost files

echo '<a name=Rhost>' >>& ${SYSTEMO}

echo "Displaying .rhosts files" >>& ${SYSTEMO}

echo '************************' >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

find / $ -fstype nfs -prune $ -o -name '*.rhosts' -print -exec ls -al {} \; -exec cat {} \; >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

# Script finds and displays unauthorized device files

echo '<a name=DeviceFiles>' >>& ${SYSTEMO}

echo "Displaying all device files" >>& ${SYSTEMO}

echo '************************************' >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

find / $ -fstype nfs -prune $ -o $ -type c -o -type b $ -exec ls -al {} \; >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

# Script shows all executable files

echo '<a name=ExecutableFiles>' >>& ${SYSTEMO}

echo "Displaying executable files" >>& ${SYSTEMO}

echo '***************************' >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

find / $ -fstype nfs -prune $ -o -type f $ -perm -100 -o -perm -010 -o -perm -001 $ -exec ls -al {} \; >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

# Script displays existence of SUID and SGID files

echo '<a name=SUID>' >>& ${SYSTEMO}

echo "Displaying SUID files" >>& ${SYSTEMO}

echo '*********************' >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

find / $ -fstype nfs -prune $ -o -type f -perm -4000 -exec ls -dal {} \; >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

echo "Displaying SGID files" >>& ${SYSTEMO}

echo '*********************' >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

find / $ -fstype nfs -prune $ -o -type f -perm -2000 -exec ls -dal {} \; >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

# Script displays files that are both world-writable and executable

echo '<a name=WorldWriteableFiles>' >>& ${SYSTEMO}

echo "Displaying files that are both world-writeable and executable" >>& ${SYSTEMO}

echo '*************************************************************' >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

find / $ -fstype nfs -prune $ -o -type f -perm -00003 -exec ls -al {} \; >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

# Script displays all world writable directories

echo '<a name=WorldWriteableDirs>' >>& ${SYSTEMO}

echo "Displaying world writable directories" >>& ${SYSTEMO}

echo '*************************************' >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

find / $ -fstype nfs -prune $ -o -type d -perm -2 -exec ls -dlL {} \; >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

# Script displays all world writable files

echo '<a name=WorldWriteableFiles2>' >>& ${SYSTEMO}

echo "Displaying world writable files" >>& ${SYSTEMO}

echo '*******************************' >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

find / $ -fstype nfs -prune $ -o -type f -perm -2 -exec ls -dlL {} \; >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

# Script displays open ports and open port numbers

echo '<a name=OpenPorts>' >>& ${SYSTEMO}

echo "Open ports" >>& ${SYSTEMO}

echo "Displaying netstat -a" >>& ${SYSTEMO}

echo '*********************' >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

netstat -a >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

echo "Open port numbers" >>& ${SYSTEMO}

echo "Displaying netstat -an" >>& ${SYSTEMO}

echo '**********************' >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

netstat -an >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

# Script displays file permissions of /dev

echo '<a name=PermissionsDev>' >>& ${SYSTEMO}

echo "Displaying file permissions of /dev" >>& ${SYSTEMO}

echo '***********************************' >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

if ( -d /dev) then

ls -al /dev >>& ${SYSTEMO}

else

echo "No /dev directory found" >>& ${SYSTEMO}

endif

echo '' >>& ${SYSTEMO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

# Script displays /etc/group file

echo '<a name=Group>' >>& ${SYSTEMO}

echo "Displaying /etc/group" >>& ${SYSTEMO}

echo '*********************' >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

if ( -f /etc/group) then

cat /etc/group >>& ${SYSTEMO}

else

echo "No /etc/group file found" >>& ${SYSTEMO}

endif

echo '' >>& ${SYSTEMO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

# Script shows user account information

echo '<a name=LoginDefs>' >>& ${SYSTEMO}

echo "Displaying /etc/login.defs" >>& ${SYSTEMO}

echo '**************************' >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

cat /etc/login.defs >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

# Displays sendmail configuration info

echo '<a name=SendmailConf>' >>& ${SYSTEMO}

echo "Displaying /etc/mail/sendmail.cf" >>& ${SYSTEMO}

echo '********************************' >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

if ( -f /etc/mail/sendmail.cf ) then

cat /etc/mail/sendmail.cf >>& ${SYSTEMO}

else

echo "No /etc/mail/sendmail.cf file found" >>& ${SYSTEMO}

endif

echo '' >>& ${SYSTEMO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

# Script displays /etc/named.conf file

echo '<a name=NamedConf>' >>& ${SYSTEMO}

echo "Displaying /etc/named.conf" >>& ${SYSTEMO}

echo '**************************' >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

if ( -f /etc/named.conf) then

cat /etc/named.conf >>& ${SYSTEMO}

else

echo "No /etc/named.conf file found" >>& ${SYSTEMO}

endif

echo '' >>& ${SYSTEMO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

# Script displays /etc/pam.d/system-auth file

echo '<a name=PamdSys>' >>& ${SYSTEMO}

echo "Displaying etc/pam.d/system-auth" >>& ${SYSTEMO}

echo '********************************' >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

if ( -f /etc/pam.d/system-auth ) then

cat /etc/pam.d/system-auth >>& ${SYSTEMO}

else

echo "No /etc/pam.d/system-auth file found" >>& ${SYSTEMO}

endif

echo '' >>& ${SYSTEMO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

# Script displays /etc/passwd file

echo '<a name=DisplayPasswdFile>' >>& ${SYSTEMO}

echo "Displaying /etc/passwd" >>& ${SYSTEMO}

echo '**********************' >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

if ( -f /etc/passwd) then

cat /etc/passwd >>& ${SYSTEMO}

else

echo "No /etc/passwd file found" >>& ${SYSTEMO}

endif

echo '' >>& ${SYSTEMO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

# Script displays /etc/profile file

echo '<a name=Profile>' >>& ${SYSTEMO}

echo "Displaying /etc/profile" >>& ${SYSTEMO}

echo '***********************' >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

if ( -f /etc/profile) then

cat /etc/profile >>& ${SYSTEMO}

else

echo "No /etc/profile file found" >>& ${SYSTEMO}

endif

echo '' >>& ${SYSTEMO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

# Script displays /etc/shadow file

echo '<a name=Shadow>' >>& ${SYSTEMO}

echo "Displaying /etc/shadow" >>& ${SYSTEMO}

echo '**********************' >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

if ( -f /etc/shadow) then

cat /etc/shadow >>& ${SYSTEMO}

else

echo "No /etc/shadow file found" >>& ${SYSTEMO}

endif

echo '' >>& ${SYSTEMO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

# Script displays /etc/shells file

echo '<a name=Shells>' >>& ${SYSTEMO}

echo "Displaying /etc/shells" >>& ${SYSTEMO}

echo '**********************' >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

if ( -f /etc/shells) then

cat /etc/shells >>& ${SYSTEMO}

else

echo "No /etc/shells file found" >>& ${SYSTEMO}

endif

echo '' >>& ${SYSTEMO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

# Script displays /etc/syslog.conf file

echo '<a name=Syslog>' >>& ${SYSTEMO}

echo "Displaying /etc/syslog.conf" >>& ${SYSTEMO}

echo '***************************' >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

if ( -f /etc/syslog.conf) then

cat /etc/syslog.conf >>& ${SYSTEMO}

else

echo "No /etc/syslog.conf file found" >>& ${SYSTEMO}

endif

echo '' >>& ${SYSTEMO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

# Script displays vsftpd.conf file

echo '<a name=VsftpdConf>' >>& ${SYSTEMO}

echo "Displaying /etc/vsftpd/vsftpd.conf" >>& ${SYSTEMO}

echo '************************************' >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

if ( -f /etc/vsftpd/vsftpd.conf) then

cat /etc/vsftpd/vsftpd.conf >>& ${SYSTEMO}

else

echo "No /etc/vsftpd/vsftpd.conf file found" >>& ${SYSTEMO}

endif

echo '' >>& ${SYSTEMO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

# Script displays /ftpusers file

echo '<a name=Ftpusers>' >>& ${SYSTEMO}

echo "Displaying contents of /ftpusers" >>& ${SYSTEMO}

echo '********************************' >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

find /etc $ -fstype nfs -prune $ -o -name ftpusers -exec cat {} \; >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

# Script checks for services

echo '<a name=ChkConfig>' >>& ${SYSTEMO}

echo "Displaying /sbin/chkconfig --list" >>& ${SYSTEMO}

echo '*********************************' >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

/sbin/chkconfig --list >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

# Displays 'ifconfig -a' to check for a promiscuous mode NIC

echo '<a name=Ifconfig>' >>& ${SYSTEMO}

echo "Displaying 'ifconfig -a'" >>& ${SYSTEMO}

echo '************************' >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

ifconfig -a >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

# Script displays /usr/bin/last file

echo '<a name=Last>' >>& ${SYSTEMO}

echo "Displaying /usr/bin/last" >>& ${SYSTEMO}

echo '************************' >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

last >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

echo "Displaying previous /usr/bin/last files" >>& ${SYSTEMO}

echo '***************************************' >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

if ( -f /var/log/wtmp.1 ) then

last -f /var/log/wtmp.* >>& ${SYSTEMO}

else

echo "No previous '/usr/bin/last' file found" >>& ${SYSTEMO}

endif

echo '' >>& ${SYSTEMO}

# Script displays ypcat passwd file

echo '<a name=Ypcat>' >>& ${SYSTEMO}

echo "Displaying ypcat passwd" >>& ${SYSTEMO}

echo '***********************' >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

ypcat passwd >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

# Script displays /var/log/messages

echo '<a name=Messages>' >>& ${SYSTEMO}

echo "Displaying /var/log/messages" >>& ${SYSTEMO}

echo '****************************' >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

if ( -f /var/log/messages ) then

cat /var/log/messages >>& ${SYSTEMO}

else

echo "No /var/log/messages file found" >>& ${SYSTEMO}

endif

echo '' >>& ${SYSTEMO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

# Script displays /var/log/secure file

echo '<a name=Secure>' >>& ${SYSTEMO}

echo "Displaying /var/log/secure" >>& ${SYSTEMO}

echo '**************************' >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

if ( -f /var/log/secure) then

cat /var/log/secure >>& ${SYSTEMO}

else

echo "No /var/log/secure file found" >>& ${SYSTEMO}

endif

echo '' >>& ${SYSTEMO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

# Script displays ftp configuration files

echo '<a name=Vsftpd>' >>& ${SYSTEMO}

echo "Displaying /etc/vsftpd.ftpusers" >>& ${SYSTEMO}

echo '*******************************' >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

if ( -f /etc/vsftpd.ftpusers ) then

cat /etc/vsftpd.ftpusers >>& ${SYSTEMO}

else

echo "No /etc/vsftpd.ftpusers file found" >>& ${SYSTEMO}

endif

echo '' >>& ${SYSTEMO}

echo "Displaying /etc/ftpaccess" >>& ${SYSTEMO}

echo '*************************' >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

if ( -f /etc/ftpaccess ) then

cat /etc/ftpaccess >>& ${SYSTEMO}

else

echo "No /etc/ftpaccess file found" >>& ${SYSTEMO}

endif

echo '' >>& ${SYSTEMO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

# Script finds all executable files and shows group permissions

# Access to Administration Tools and System Utilities Step 1

echo '<li><a href=specific.html#AdminTools2>Access to Administration Tools and System Utilities</a>' >>& ${INDEXO}

echo '<a name=AdminTools2>' >>& ${SPECIFICO}

echo "Access to Administration Tools and System Utilities Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#ExecutableFiles>executable</a>' files in Section 2" >>& ${SPECIFICO}

echo '***********************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Access to Administration Tools and System Utilities Step 3

echo "Access to Administration Tools and System Utilities Step 3" >>& ${SPECIFICO}

echo "See '<a href=system.html#Group>/etc/group</a>' file in Section 2" >>& ${SPECIFICO}

echo '**********************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Script checks the BIND service and configuration file

# Access to DNS Queries Step 1

echo '<li><a href=specific.html#DnsQueries4>Access to DNS Queries</a>' >>& ${INDEXO}

echo '<a name=DnsQueries4>' >>& ${SPECIFICO}

echo "Access to DNS Queries Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#OpenPorts>netstat -an</a>' file in Section 2" >>& ${SPECIFICO}

echo '***********************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Access to DNS Queries Step 2

echo "Access to DNS Queries Step 2" >>& ${SPECIFICO}

echo "See '<a href=system.html#NamedConf>/etc/named.conf</a>' file in Section 2" >>& ${SPECIFICO}

echo '***************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Script checks for FTP service

# Access to the FTP Service Step 1

echo '<li><a href=specific.html#FtpService>Access to the FTP Service</a>' >>& ${INDEXO}

echo '<a name=FtpService>' >>& ${SPECIFICO}

echo "Access to the FTP Service Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#ChkConfig>chkconfig --list</a>' in Section 2" >>& ${SPECIFICO}

echo '***********************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Access to the FTP Service Step 2

echo "Access to the FTP Service Step 2" >>& ${SPECIFICO}

echo "See '<a href=system.html#Vsftpd>vsftpd.ftpusers</a>' in Section 2" >>& ${SPECIFICO}

echo '********************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Access to the FTP Service Step 2

echo "Access to the FTP Service Step 2" >>& ${SPECIFICO}

echo "See '<a href=system.html#Vsftpd>/ftpaccess</a>' in Section 2" >>& ${SPECIFICO}

echo '**************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Access to the FTP Service Step 2

echo "Access to the FTP Service Step 2" >>& ${SPECIFICO}

echo "See '<a href=system.html#Ftpusers>/ftpusers</a>' file in Section 2" >>& ${SPECIFICO}

echo '*************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Script checks if accounts can be locked

# Account Lockout Step 1

echo '<li><a href=specific.html#AccountLockout5>Account Lockout</a>' >>& ${INDEXO}

echo '<a name=AccountLockout5>' >>& ${SPECIFICO}

echo "Account Lockout Step 1" >>& ${SPECIFICO}

echo "Displaying /var/log/faillog" >>& ${SPECIFICO}

echo '***************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

if ( -f /var/log/faillog ) then

ls -al /var/log/faillog >>& ${SPECIFICO}

else

echo "No /var/log/faillog file found" >>& ${SPECIFICO}

endif

echo '' >>& ${SPECIFICO}

# Account Lockout Step 2

echo "Account Lockout Step 2" >>& ${SPECIFICO}

echo "Displaying login configuration files in /etc/pam.d" >>& ${SPECIFICO}

echo '**************************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

ls /etc/pam.d/gdm >>& ${SPECIFICO}

cat /etc/pam.d/gdm >>& ${SPECIFICO}

ls /etc/pam.d/ftp >>& ${SPECIFICO}

cat /etc/pam.d/ftp >>& ${SPECIFICO}

ls /etc/pam.d/login >>& ${SPECIFICO}

cat /etc/pam.d/login >>& ${SPECIFICO}

ls /etc/pam.d/rlogin >>& ${SPECIFICO}

cat /etc/pam.d/rlogin >>& ${SPECIFICO}

ls /etc/pam.d/sshd >>& ${SPECIFICO}

cat /etc/pam.d/sshd >>& ${SPECIFICO}

ls /etc/pam.d/system-auth >>& ${SPECIFICO}

cat /etc/pam.d/system-auth >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Script shows user accounts on the system

# Administration Roles Step 1

echo '<li><a href=specific.html#AdministrationRoles>Administration Roles</a>' >>& ${INDEXO}

echo '<a name=AdministrationRoles>' >>& ${SPECIFICO}

echo "Administration Roles Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#DisplayPasswdFile>/etc/passwd</a>' file in Section 2" >>& ${SPECIFICO}

echo '***********************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Script checks for administrator remote login

# Administrator Login Over the Network Step 1

echo "Administrator Login Over the Network Step 1" >>& ${SPECIFICO}

echo "Displaying /etc/security/access.conf" >>& ${SPECIFICO}

echo '************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

if ( -f /etc/security/access.conf ) then

cat /etc/security/access.conf >>& ${SPECIFICO}

else

echo "No /etc/security/access.conf file found" >>& ${SPECIFICO}

endif

echo '' >>& ${SPECIFICO}

# Administrator Login Over the Network Step 2

echo "Administrator Login Over the Network Step 2" >>& ${SPECIFICO}

echo "See '<a href=system.html#Group>/etc/group</a>' file in Section 2" >>& ${SPECIFICO}

echo '**********************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Administrator Login Over the Network Step 3

echo "Administrator Login Over the Network Step 3" >>& ${SPECIFICO}

echo "See '<a href=system.html#Secure>/var/log/secure</a>' file in Section 2" >>& ${SPECIFICO}

echo '***************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

# Script checks for FTP service

# Anonymous Login to FTP Step 1

echo '<li><a href=specific.html#AnonymousLoginFTP2>Anonymous Login to FTP</a>' >>& ${INDEXO}

echo '<a name=AnonymousLoginFTP2>' >>& ${SPECIFICO}

echo "Anonymous Login to FTP Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#ChkConfig>chkconfig --list</a>' in Section 2" >>& ${SPECIFICO}

echo '**********************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Anonymous Login to FTP Step 2

echo "Anonymous Login to FTP Step 2" >>& ${SPECIFICO}

echo "See '<a href=system.html#Vsftpd>vsftpd.ftpusers</a>' in Section 2" >>& ${SPECIFICO}

echo '********************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Anonymous Login to FTP Step 2

echo "Anonymous Login to FTP Step 2" >>& ${SPECIFICO}

echo "See '<a href=system.html#Vsftpd>/ftpaccess</a>' in Section 2" >>& ${SPECIFICO}

echo '**************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Anonymous Login to FTP Step 2

echo "Anonymous Login to FTP Step 2" >>& ${SPECIFICO}

echo "See '<a href=system.html#Ftpusers>/ftpusers</a>' file in Section 2" >>& ${SPECIFICO}

echo '*************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Script checks for scheduled cron jobs and backups

# Auditing: Backup and Restore Step 2

echo '<li><a href=specific.html#AuditBackup2>Auditing: Backup and Restore</a>' >>& ${INDEXO}

echo '<a name=AuditBackup2>' >>& ${SPECIFICO}

echo "Auditing: Backup and Restore Step 2" >>& ${SPECIFICO}

echo "Displaying /etc/crontab" >>& ${SPECIFICO}

echo '***********************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

cat /etc/crontab >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Auditing: Backup and Restore Step 3

echo "Auditing: Backup and Restore Step 3" >>& ${SPECIFICO}

echo "Displaying permissions of /var/spool/cron jobs" >>& ${SPECIFICO}

echo '**********************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

if ( -d /var/spool/cron ) then

ls -al /var/spool/cron >>& ${SPECIFICO}

else

echo "No /var/spool/cron directory found" >>& ${SPECIFICO}

endif

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Script checks permissions to the C compilers

# C Compiler Step 1

echo '<li><a href=specific.html#CCompiler>C Compiler</a>' >>& ${INDEXO}

echo '<a name=CCompiler>' >>& ${SPECIFICO}

echo "C Compiler Step 1" >>& ${SPECIFICO}

echo "Displaying permissions of /usr/bin/gcc" >>& ${SPECIFICO}

echo '**************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

if ( -f /usr/bin/gcc ) then

ls -al /usr/bin/gcc >>& ${SPECIFICO}

else

echo "No /usr/bin/gcc file found" >>& ${SPECIFICO}

endif

echo '' >>& ${SPECIFICO}

# C Compiler Step 1

echo "C Compiler Step 1" >>& ${SPECIFICO}

echo "Displaying permissions of /usr/bin/cc" >>& ${SPECIFICO}

echo '*************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

if ( -f /usr/bin/cc ) then

ls -al /usr/bin/cc >>& ${SPECIFICO}

else

echo "No /usr/bin/cc" >>& ${SPECIFICO}

endif

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Script checks log file for clock synchronization

# Clock Synchronization Step 1

echo '<li><a href=specific.html#ClockSynchornization3>Clock Synchronization</a>' >>& ${INDEXO}

echo '<a name=ClockSynchornization3>' >>& ${SPECIFICO}

echo "Clock Synchronization Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#Messages>/var/log/messages</a>' file in Section 2" >>& ${SPECIFICO}

echo '*****************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Displays account access

# Command Line Access Step 1

echo '<li><a href=specific.html#CommandLineAccess12>Command Line Access</a>' >>& ${INDEXO}

echo '<a name=CommandLineAccess2>' >>& ${SPECIFICO}

echo "Command Line Access Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#DisplayPasswdFile>/etc/passwd</a>' file in Section 2" >>& ${SPECIFICO}

echo '***********************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Command Line Access Step 2

echo "Command Line Access Step 2" >>& ${SPECIFICO}

echo "Displaying shell files for bash users" >>& ${SPECIFICO}

echo '*************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

find /home $ -fstype nfs -prune $ -o $ -name .bash_profile -o -name .bashrc $ -print -exec ls -al {} \; -exec cat {} \; >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Command Line Access Step 3

echo "Command Line Access Step 3" >>& ${SPECIFICO}

echo "Displaying shell files for korn, shell, bourne, and trusted users" >>& ${SPECIFICO}

echo '*****************************************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

find /home $ -fstype nfs -prune $ -o -name .profile -print -exec ls -al {} \; -exec cat {} \; >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Command Line Access Step 4

echo "Command Line Access Step 4" >>& ${SPECIFICO}

echo "Displaying shell files for c-shell users" >>& ${SPECIFICO}

echo '****************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

find /home $ -fstype nfs -prune $ -o $ -name .cshrc -o -name .login -o -name .logout $ -print -exec ls -al {} \; -exec cat {} \; >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Command Line Access Step 5

echo "Command Line Access Step 5" >>& ${SPECIFICO}

echo "See '<a href=system.html#Vsftpd>vsftpd.ftpusers</a>' in Section 2" >>& ${SPECIFICO}

echo '********************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Command Line Access Step 5

echo "Command Line Access Step 5" >>& ${SPECIFICO}

echo "See '<a href=system.html#Vsftpd>/ftpaccess</a>' in Section 2" >>& ${SPECIFICO}

echo '**************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Command Line Access Step 5

echo "Command Line Access Step 5" >>& ${SPECIFICO}

echo "See '<a href=system.html#Ftpusers>/ftpusers</a>' file in Section 2" >>& ${SPECIFICO}

echo '*********************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Script checks for SUID, SGID, and world-writable file/directory information

# Configuration Checklist Step 1

echo '<li><a href=specific.html#ConfigCheck>Configuration Checklist</a>' >>& ${INDEXO}

echo '<a name=ConfigCheck>' >>& ${SPECIFICO}

echo "Configuration Checklist Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#SUID>SUID and SGID</a>' files in Section 2" >>& ${SPECIFICO}

echo '**************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Configuration Checklist Step 2

echo "Configuration Checklist Step 2" >>& ${SPECIFICO}

echo "See '<a href=system.html#WorldWriteableDirs>world writable directories</a>' in Section 2" >>& ${SPECIFICO}

echo '*********************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Configuration Checklist Step 2

echo "Configuration Checklist Step 2" >>& ${SPECIFICO}

echo "See '<a href=system.html#WorldWriteableFiles>world writable</a>' files in Section 2" >>& ${SPECIFICO}

echo '***************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Configuration Checklist Step 3

echo "Configuration Checklist Step 3" >>& ${SPECIFICO}

echo "<a href=system.html#Netstat>See 'netstat -a</a>' file in Section 2" >>& ${SPECIFICO}

echo '***********************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Script displays file permissions and contents of /etc/hosts.equiv

# Control Trust Relationships Step 1

echo '<li><a href=specific.html#ControlTrustRelationships>Control Trust Relationships</a>' >>& ${INDEXO}

echo '<a name=ControlTrustRelationships>' >>& ${SPECIFICO}

echo "Control Trust Relationships Step 1" >>& ${SPECIFICO}

echo "Displaying permissions and contents of /etc/hosts.equiv" >>& ${SPECIFICO}

echo '**********************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

if ( -f /etc/hosts.equiv ) then

ls -l /etc/hosts.equiv >>& ${SPECIFICO}

cat /etc/hosts.equiv >>& ${SPECIFICO}

else

echo "No /etc/hosts.equiv file found" >>& ${SPECIFICO}

endif

echo '' >>& ${SPECIFICO}

# Script finds all files with world writeable permissions

# Data File Permissions Step 1

echo '<li><a href=specific.html#DataFile>Data File Permissions</a>' >>& ${INDEXO}

echo '<a name=DataFile>' >>& ${SPECIFICO}

echo "Data File Permissions Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#WorldWriteableFiles>world writable</a>' files in Section 2" >>& ${SPECIFICO}

echo '***************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Script displays password status for accounts and NIS/NIS+, if applicable

# Default Accounts Step 1

echo '<li><a href=specific.html#DefaultAccounts4>Default Accounts</a>' >>& ${INDEXO}

echo '<a name=DefaultAccounts4>' >>& ${SPECIFICO}

echo "Default Accounts Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#Shadow>/etc/shadow</a>' file in Section 2" >>& ${SPECIFICO}

echo '***********************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Default Accounts Step 2

echo "Default Accounts Step 2" >>& ${SPECIFICO}

echo "See '<a href=system.html#Ypcat>/usr/bin/ypcat passwd</a>' file in Section 2" >>& ${SPECIFICO}

echo '************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Script displays system umask value and users utilizing other umask values

# Default Umask Value Step 1

echo '<li><a href=specific.html#DefaultUmaskValue5>Default Umask Value</a>' >>& ${INDEXO}

echo '<a name=DefaultUmaskValue5>' >>& ${SPECIFICO}

echo "Default Umask Value Step 1" >>& ${SPECIFICO}

echo "Displaying /etc/bashrc" >>& ${SPECIFICO}

echo '**********************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

if ( -f /etc/bashrc ) then

cat /etc/bashrc >>& ${SPECIFICO}

else

echo "No /etc/bashrc file found" >>& ${SPECIFICO}

endif

echo '' >>& ${SPECIFICO}

# Default Umask Value Step 1

echo "Default Umask Value Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#Profile>/etc/profile</a>' file in Section 2" >>& ${SPECIFICO}

echo '************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Default Umask Value Step 2

echo "Default Umask Value Step 2" >>& ${SPECIFICO}

echo "Displaying user login scripts that define umask" >>& ${SPECIFICO}

echo '***********************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

/bin/grep -r umask /home/*/.bashrc >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Script shows OS system and program info

# Denial of Service Attacks Step 1

echo '<li><a href=specific.html#DenialOfServiceAttacks4>Denial of Service Attacks</a>' >>& ${INDEXO}

echo '<a name=DenialOfServiceAttacksStep1>' >>& ${SPECIFICO}

echo "Denial of Service Attacks Step 1" >>& ${SPECIFICO}

echo "Displaying /sbin/sysctl -a" >>& ${SPECIFICO}

echo '**************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

/sbin/sysctl -a >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Denial of Service Attacks Step 2

echo "Denial of Service Attacks Step 2" >>& ${SPECIFICO}

echo "Displaying /bin/rpm -qva" >>& ${SPECIFICO}

echo '************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

/bin/rpm -qva >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Script displays file permissions of device files

# Device Permissions Step 1

echo '<li><a href=specific.html#DevicePermissions4>Device Permissions</a>' >>& ${INDEXO}

echo '<a name=DevicePermissions4>' >>& ${SPECIFICO}

echo "Device Permissions Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#PermissionsDev>file permissions of /dev</a>' in Section 2" >>& ${SPECIFICO}

echo '*******************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# # Device Permissions Step 2

echo "Device Permissions Step 2" >>& ${SPECIFICO}

echo "See 'all device files' in Section 2" >>& ${SPECIFICO}

echo "See '<a href=system.html#DeviceFiles>all device files</a>' in Section 2" >>& ${SPECIFICO}

echo '***********************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Script displays mounted directories

# Directories Mounted with the 'nosuid' Option Step 1

echo '<li><a href=specific.html#NoSuid3>Directories Mounted with the 'nosuid' Option</a>' >>& ${INDEXO}

echo '<a name=NoSuid3>' >>& ${SPECIFICO}

echo "Directories Mounted with the 'nosuid' Option Step 1" >>& ${SPECIFICO}

echo "Displaying /bin/mount" >>& ${SPECIFICO}

echo '*********************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

/bin/mount >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Script checks for and displays /etc/named.conf

# DNS Secure Updates Step 1

echo '<li><a href=specific.html#DnsSecure>DNS Secure Updates</a>' >>& ${INDEXO}

echo '<a name=DnsSecure>' >>& ${SPECIFICO}

echo "DNS Secure Updates Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#NamedConf>/etc/named.conf</a>' file in Section 2" >>& ${SPECIFICO}

echo '***************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Script displays configuration file to review for access to DNS zone transfers

# DNS Zone Transfers Step 1

echo '<li><a href=specific.html#DnsZoneTransfers>DNS Zone Transfers</a>' >>& ${INDEXO}

echo '<a name=DnsZoneTransfers>' >>& ${SPECIFICO}

echo "DNS Zone Transfers Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#NamedConf>/etc/named.conf</a>' file in Section 2" >>& ${SPECIFICO}

echo '****************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Displays /etc/shells file and /etc/passwd file to check for valid shells

# Domain-Wide NIS Access Step 1

echo '<li><a href=specific.html#DomainWideNISAccess>Domain-Wide NIS Access</a>' >>& ${INDEXO}

echo '<a name=DomainWideNISAccess>' >>& ${SPECIFICO}

echo "Domain-Wide NIS Access Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#Shells>/etc/shells</a>' file in Section 2" >>& ${SPECIFICO}

echo '***********************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Domain-Wide NIS Access Step 2

echo "Domain-Wide NIS Access Step 2" >>& ${SPECIFICO}

echo "See '<a href=system.html#DisplayPasswdFile>/etc/passwd</a>' file in Section 2" >>& ${SPECIFICO}

echo '******************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Displays '/usr/bin/ypcat passwd' file to review for domain wide root accounts

# Domain-Wide Root Account Step 1

echo '<li><a href=specific.html#RootAccount>Domain-Wide Root Account</a>' >>& ${INDEXO}

echo '<a name=RootAccount>' >>& ${SPECIFICO}

echo "Domain-wide Root Account Step 1">>& ${SPECIFICO}

echo "See '<a href=system.html#Ypcat>ypcat passwd</a>' file in Section 2" >>& ${SPECIFICO}

echo '************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Script checks last user logins for dormant accounts

# Dormant Accounts Step 1

echo '<li><a href=specific.html#DormantAccounts2>Dormant Accounts</a>' >>& ${INDEXO}

echo '<a name=DormantAccounts2>' >>& ${SPECIFICO}

echo "Dormant Accounts Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#Last>/usr/bin/last</a>' file in Section 2" >>& ${SPECIFICO}

echo '*************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Dormant Accounts Step 1

echo "Dormant Accounts Step 1" >>& ${SPECIFICO}

echo "See previous '<a href=system.html#Last>/usr/bin/last</a>' files in Section 2" >>& ${SPECIFICO}

echo '***********************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Script checks filesystem information

# Encrypt File System Step 1

echo '<li><a href=specific.html#EncryptFile>Encrypt File System</a>' >>& ${INDEXO}

echo '<a name=EncryptFile>' >>& ${SPECIFICO}

echo "Encrypt File System Step 1" >>& ${SPECIFICO}

echo "Displaying /etc/fstab" >>& ${SPECIFICO}

echo '*********************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

cat /etc/fstab >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Script shows event log statistics

# Event Log Disk Space Step 1

echo '<li><a href=specific.html#EventLog2>Event Log Disk Space</a>' >>& ${INDEXO}

echo '<a name=EventLog2>' >>& ${SPECIFICO}

echo "Event Log Disk Space Step 1" >>& ${SPECIFICO}

echo "Displaying df -k" >>& ${SPECIFICO}

echo '****************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

df -k >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Script checks for and displays /etc/exports

# Exported File Permissions Step 1

echo '<li><a href=specific.html#ExportedFilePermissions2>Exported File Permissions</a>' >>& ${INDEXO}

echo '<a name=ExportedFilePermissions2>' >>& ${SPECIFICO}

echo "Exported File Permissions Step 1" >>& ${SPECIFICO}

echo "Displaying /etc/exports" >>& ${SPECIFICO}

echo '***********************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

if ( -f /etc/exports ) then

cat /etc/exports >>& ${SPECIFICO}

else

echo "No /etc/exports file found" >>& ${SPECIFICO}

endif

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Script shows file permissions

# File Permissions Step 1

echo '<li><a href=specific.html#FilePermissions3>File Permissions</a>' >>& ${INDEXO}

echo '<a name=FilePermissions3>' >>& ${SPECIFICO}

echo "File Permissions Step 1" >>& ${SPECIFICO}

echo "Displaying root path variable" >>& ${SPECIFICO}

echo '*****************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

/bin/echo $PATH >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# File Permissions Step 2

echo "File Permissions Step 2" >>& ${SPECIFICO}

echo "See '<a href=system.html#WorldWriteableDirs>world writable directories</a>' in Section 2" >>& ${SPECIFICO}

echo '*********************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# File Permissions Step 4

echo "File Permissions Step 4" >>& ${SPECIFICO}

echo "See '<a href=system.html#WorldWriteableFiles>world writable and executable</a>' files in Section 2" >>& ${SPECIFICO}

echo '******************************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Script checks for FTP Logging

# FTP Logging Step 1

echo '<li><a href=specific.html#FtpLogging2>FTP Logging</a>' >>& ${INDEXO}

echo '<a name=FtpLogging2>' >>& ${SPECIFICO}

echo "FTP Logging Step 1" >>& ${SPECIFICO}

echo "See '/etc/vsftpd/vsftpd.conf' file in Section 2" >>& ${SPECIFICO}

echo '***********************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# FTP Logging Step 1

echo "FTP Logging Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#Vsftpd>/ftpaccess</a>' in Section 2" >>& ${SPECIFICO}

echo '**************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# FTP Logging Step 1

echo "FTP Logging Step 1" >>& ${SPECIFICO}

echo "Displaying /etc/xinetd.d/wu-ftpd" >>& ${SPECIFICO}

echo '********************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

cat /etc/xinetd.d/wu-ftpd >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Displays different account information to check for generic accounts

# Generic Accounts Step 1

echo '<li><a href=specific.html#GenericAccounts>Generic Accounts</a>' >>& ${INDEXO}

echo '<a name=GenericAccounts>' >>& ${SPECIFICO}

echo "Generic Accounts Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#DisplayPasswdFile>/etc/passwd</a>' file in Section 2" >>& ${SPECIFICO}

echo '***********************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Generic Accounts Step 1

echo "Generic Accounts Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#Ypcat>ypcat passwd</a>' file in Section 2" >>& ${SPECIFICO}

echo '************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Generic Accounts Step 2

echo "Generic Accounts Step 2" >>& ${SPECIFICO}

echo "See '<a href=system.html#Rosts>.rhosts</a>' files in Section 2" >>& ${SPECIFICO}

echo '********************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Generic Accounts Step 3

echo "Generic Accounts Step 3" >>& ${SPECIFICO}

echo "See '<a href=system.html#Secure>/var/adm/secure</a>' file in Section 2" >>& ${SPECIFICO}

echo '**************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

cat /var/adm/secure >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Displays /etc/group file to be reviewed for group membership

# Group Management Step 1

echo '<li><a href=specific.html#GroupManagement>Group Management</a>' >>& ${INDEXO}

echo '<a name=GroupManagement>' >>& ${SPECIFICO}

echo "Group Management Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#Group>/etc/group</a>' file in Section 2" >>& ${SPECIFICO}

echo '**********************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Displays etc/group file to be reviewed for group membership

# Group Membership Step 1

echo '<li><a href=specific.html#GroupMembership>Group Membership</a>' >>& ${INDEXO}

echo '<a name=GroupMembership>' >>& ${SPECIFICO}

echo "Group Membership Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#passwd>/etc/passwd</a>' file in Section 2" >>& ${SPECIFICO}

echo '**********************************' >>& ${SPECIFICO}

echo "Group Membership Step 2" >>& ${SPECIFICO}

echo "See '<a href=system.html#Group>/etc/group</a>' file in Section 2" >>& ${SPECIFICO}

echo '**********************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Displays session and timeout information

# Idle Session Timeout Step 1

echo '<li><a href=specific.html#IdleSession2>Idle Session Timeout</a>' >>& ${INDEXO}

echo '<a name=IdleSession2>' >>& ${SPECIFICO}

echo "Idle Session Timeout Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#DisplayPasswdFile>/etc/passwd</a>' file in Section 2" >>& ${SPECIFICO}

echo '***********************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Idle Session Timeout Step 2

echo "Idle Session Timeout Step 2" >>& ${SPECIFICO}

echo "See '<a href=system.html#Profile>/etc/profile</a>' file in Section 2" >>& ${SPECIFICO}

echo '*******************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Idle Session Timeout Step 3

echo "Idle Session Timeout Step 3" >>& ${SPECIFICO}

echo "Displaying user login scripts that utilize an alternative timeout" >>& ${SPECIFICO}

echo '*****************************************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

/bin/grep -r TMOUT /home/ >>& ${SPECIFICO}

/bin/grep -r TIMEOUT /home/ >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Displays sendmail configuration info

# Insecure Sendmail Options Step 1

echo '<li><a href=specific.html#InsecureMail>Insecure Sendmail Options</a>' >>& ${INDEXO}

echo '<a name=InsecureMail>' >>& ${SPECIFICO}

echo "Insecure Sendmail Options Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#SendmailConf>/etc/mail/sendmail.cf</a>' file in Section 2" >>& ${SPECIFICO}

echo '*********************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

# Script shows user account information

# Issuance of User IDs Step 1

echo '<li><a href=specific.html#IssuanceUserIds4>Issuance of User IDs</a>' >>& ${INDEXO}

echo '<a name=IssuanceUserIds4>' >>& ${SPECIFICO}

echo "Issuance of User IDs Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#LoginDefs>/etc/login.defs</a>' file in Section 2" >>& ${SPECIFICO}

echo '***************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Issuance of User IDs Step 2

echo "Issuance of User IDs Steps 2" >>& ${SPECIFICO}

echo "See '<a href=system.html#Shadow>/etc/shadow</a>' file in Section 2" >>& ${SPECIFICO}

echo '***********************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Issuance of User IDs Step 3

echo "Issuance of User IDs Step 3" >>& ${SPECIFICO}

echo "Displaying '<a href=system.html#DisplayPasswdFile>/etc/passwd</a>' file in Section 2" >>& ${SPECIFICO}

echo '***********************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Script shows welcome banner configurations

# Legal Caption Step 1

echo '<li><a href=specific.html#LegalCaption3>Legal Caption</a>' >>& ${INDEXO}

echo '<a name=LegalCaption3>' >>& ${SPECIFICO}

echo "Legal Caption Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#ChkConfig>/sbin/chkconfig --list</a>' file in Section 2" >>& ${SPECIFICO}

echo '**********************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Legal Caption Step 2

echo "Legal Caption Step 2" >>& ${SPECIFICO}

echo "Displaying /etc/issue.net" >>& ${SPECIFICO}

echo '*************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

cat /etc/issue.net >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Legal Caption Step 4

echo "Legal Caption Step 4" >>& ${SPECIFICO}

echo "Displaying /etc/issue" >>& ${SPECIFICO}

echo '*********************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

cat /etc/issue >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Legal Caption Step 5

echo "Legal Caption Step 5" >>& ${SPECIFICO}

echo "Displaying /etc/motd" >>& ${SPECIFICO}

echo '********************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

cat /etc/motd >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Script displays log file information and configuration to verify logging events

# Log Security Events Step 1

echo '<li><a href=specific.html#LogSecurityEvents4>Log Security Events</a>' >>& ${INDEXO}

echo '<a name=LogSecurityEvents4>' >>& ${SPECIFICO}

echo "Log Security Events Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#Syslog>/etc/syslog.conf</a>' file in Section 2" >>& ${SPECIFICO}

echo '****************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Log Security Events Step 3

echo "Log Security Events Step 3" >>& ${SPECIFICO}

echo "See '<a href=system.html#Secure>/var/log/secure</a>' file in Section 2" >>& ${SPECIFICO}

echo '***************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Log Security Events Step 3

echo "Log Security Events Step 3" >>& ${SPECIFICO}

echo "See '<a href=system.html#Messages>/var/log/messages</a>' file in Section 2" >>& ${SPECIFICO}

echo '*****************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Log Security Events Step 3

echo "Log Security Events Step 3" >>& ${SPECIFICO}

echo "Displaying /usr/bin/lastlog" >>& ${SPECIFICO}

echo '***************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

/usr/bin/lastlog >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Log Security Events Step 4

echo "Log Security Events Step 4" >>& ${SPECIFICO}

echo "Displaying /usr/bin/w" >>& ${SPECIFICO}

echo '*********************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

/usr/bin/w >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo "Displaying /usr/bin/who" >>& ${SPECIFICO}

echo '***********************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

/usr/bin/who >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo "Displaying /usr/bin/finger" >>& ${SPECIFICO}

echo '**************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

/usr/bin/finger >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo "Displaying /usr/bin/rwho" >>& ${SPECIFICO}

echo '************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

/usr/bin/rwho >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo "Displaying /usr/bin/users" >>& ${SPECIFICO}

echo '*************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

/usr/bin/users >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Log Security Events Step 5

echo "Log Security Events Step 5" >>& ${SPECIFICO}

echo "See '<a href=system.html#Last>/usr/bin/last</a>' file in Section 2" >>& ${SPECIFICO}

echo '*************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Script displays memory dump setting

# Memory Dump Files Step 1

echo '<li><a href=specific.html#MemoryDumps3>Memory Dump Files</a>' >>& ${INDEXO}

echo '<a name=MemoryDumps3>' >>& ${SPECIFICO}

echo "Memory Dump Files Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#Profile>/etc/profile</a>' file in Section 2" >>& ${SPECIFICO}

echo '************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Script finds all .netrc files

# .netrc Files Step 1

echo '<a name=Netrc>' >>& ${SPECIFICO}

echo ".netrc Files Step 1" >>& ${SPECIFICO}

echo "See '.netrc' files in Section 2" >>& ${SPECIFICO}

echo '*******************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Script shows OS system and program info

# Network Device Configuration Step 1

echo '<li><a href=specific.html#NetworkDevice>Network Device Configuration</a>' >>& ${INDEXO}

echo '<a name=NetworkDevice>' >>& ${SPECIFICO}

echo "Network Device Configuration Step 1" >>& ${SPECIFICO}

echo "Displaying /bin/rpm -qva" >>& ${SPECIFICO}

echo '************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

/bin/rpm -qva >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Network Device Configuration Step 2

echo "Network Device Configuration Step 2" >>& ${SPECIFICO}

echo "Displaying /sbin/sysctl -a" >>& ${SPECIFICO}

echo '**************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

/sbin/sysctl -a >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Displays 'ifconfig -a' to check for a promiscuous mode NIC

# Network Interface Card and Promiscuous Mode Step 1

echo '<li><a href=specific.html#Promiscuous>Network Interface Card and Promiscuous Mode</a>' >>& ${INDEXO}

echo '<a name=Promiscuous>' >>& ${SPECIFICO}

echo "Network Interface Card and Promiscuous Mode Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#Ifconfig>ifconfig -a</a>' file in Section 2" >>& ${SPECIFICO}

echo '***********************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Script shows executable file permissions and group membership

# Network Interface Packet Sniffing Step 1

echo '<li><a href=specific.html#NetworkInterface>Network Interface Packet Sniffing</a>' >>& ${INDEXO}

echo '<a name=NetworkInterface>' >>& ${SPECIFICO}

echo "Network Interface Packet Sniffing Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#ExecutableFiles>executable</a>' files in Section 2" >>& ${SPECIFICO}

echo '***********************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Network Interface Packet Sniffing Step 3

echo "Network Interface Packet Sniffing Step 3" >>& ${SPECIFICO}

echo "See '<a href=system.html#Group>/etc/group</a>' file in Section 2" >>& ${SPECIFICO}

echo '**********************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Displays existence of '.hushlogin' files

# Notification of Last Login Step 1

echo '<li><a href=specific.html#LastLogin>Notification of Last Login</a>' >>& ${INDEXO}

echo '<a name=LastLogin>' >>& ${SPECIFICO}

echo "Notification of Last Login Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#Hush>hushlogin</a>' files in Section 2" >>& ${SPECIFICO}

echo '************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Script checks packages installed on system

# Package Selection Step 1

echo '<li><a href=specific.html#PackageSelect>Package Selection</a>' >>& ${INDEXO}

echo '<a name=PackageSelect>' >>& ${SPECIFICO}

echo "Package Selection Step 1" >>& ${SPECIFICO}

echo "Displaying /bin/rpm -qa" >>& ${SPECIFICO}

echo '************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

/bin/rpm -qa >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Script shows user account information

# Password Composition Step 1

echo '<li><a href=specific.html#PasswordComposition4>Password Composition</a>' >>& ${INDEXO}

echo '<a name=PasswordComposition4>' >>& ${SPECIFICO}

echo "Password Composition Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#LoginDefs>/etc/login.defs</a>' file in Section 2" >>& ${SPECIFICO}

echo '***************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Password Composition Step 2

echo "Password Composition Step 2" >>& ${SPECIFICO}

echo "See '<a href=system.html#PamdSys>/etc/pam.d/system-auth' file in Section 2" >>& ${SPECIFICO}

echo '*********************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Script shows user account information

# Password Expiration Step 1

echo '<li><a href=specific.html#PasswordExpiration5>Password Expiration</a>' >>& ${INDEXO}

echo '<a name=PasswordExpiration5>' >>& ${SPECIFICO}

echo "Password Expiration Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#LoginDefs>/etc/login.defs</a>' file in Section 2" >>& ${SPECIFICO}

echo '***************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Script shows user account information

# Password History Step 2

echo '<li><a href=specific.html#PasswordHistory4>Password History</a>' >>& ${INDEXO}

echo '<a name=PasswordHistory4>' >>& ${SPECIFICO}

echo "Password History Step 2" >>& ${SPECIFICO}

echo "See '<a href=system.html#PamdSys>/etc/pam.d/system-auth</a>' file in Section 2" >>& ${SPECIFICO}

echo '*********************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Password History Step 3

echo "Password History Step 3" >>& ${SPECIFICO}

echo "Displaying permissions of /etc/security/opasswd" >>& ${SPECIFICO}

echo '***********************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

if ( -f /etc/security/opasswd ) then

ls -al /etc/security/opasswd >>& ${SPECIFICO}

else

echo "No /etc/security/opasswd file found" >>& ${SPECIFICO}

endif

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Script checks if /etc/passwd and /etc/shadow exist and their contents

# Password Storage Step 1

echo '<li><a href=specific.html#PasswordStorage3>Password Storage</a>' >>& ${INDEXO}

echo '<a name=PasswordStorage3>' >>& ${SPECIFICO}

echo "Password Storage Step 1" >>& ${SPECIFICO}

echo "Displaying permissions /etc/passwd" >>& ${SPECIFICO}

echo '**********************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

if ( -f /etc/passwd ) then

ls -al /etc/passwd >>& ${SPECIFICO}

else

echo "No /etc/passwd file found" >>& ${SPECIFICO}

endif

echo '' >>& ${SPECIFICO}

# Password Storage Step 1

echo "Password Storage Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#DisplayPasswdFile>/etc/passwd</a>' file in Section 2" >>& ${SPECIFICO}

echo '***********************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Password Storage Step 2

echo "Password Storage Step 2" >>& ${SPECIFICO}

echo "Displaying permissions /etc/shadow" >>& ${SPECIFICO}

echo '**********************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

if ( -f /etc/shadow ) then

ls -al /etc/shadow >>& ${SPECIFICO}

else

echo "No /etc/shadow file found" >>& ${SPECIFICO}

endif

echo '' >>& ${SPECIFICO}

# Password Storage Step 2

echo "Password Storage Step 2" >>& ${SPECIFICO}

echo "See '<a href=system.html#Shadow>/etc/shadow</a>' file in Section 2" >>& ${SPECIFICO}

echo '***********************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Displays user and group account information

# Powerful Group Membership Step 1

echo '<li><a href=specific.html#PowerfulGroupMembership>Powerful Group Membership</a>' >>& ${INDEXO}

echo '<a name=PowerfulGroupMembership>' >>& ${SPECIFICO}

echo "Powerful Group Membership Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#DisplayPasswdFile>/etc/passwd</a>' file in Section 2" >>& ${SPECIFICO}

echo '***********************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Powerful Group Membership Step 1

echo "Powerful Group Membership Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#Group>/etc/group</a>' file in Section 2" >>& ${SPECIFICO}

echo '**********************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Script shows permissions for printer spool directories

# Print Spool Directories Step 1

echo '<li><a href=specific.html#PrintSpool5>Print Spool Directories</a>' >>& ${INDEXO}

echo '<a name=PrintSpool5>' >>& ${SPECIFICO}

echo "Print Spool Directories Step 1" >>& ${SPECIFICO}

echo "Displaying permissions of /var/spool" >>& ${SPECIFICO}

echo '************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

/bin/ls -l /var/spool >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Script displays root account information

# Privileged Accounts / Root Login at Console Step 1

echo '<li><a href=specific.html#RootLogin4>Privileged Accounts / Root Login at Console</a>' >>& ${INDEXO}

echo '<a name=RootLogin4>' >>& ${SPECIFICO}

echo "Privileged Accounts / Root Login at Console Step 1" >>& ${SPECIFICO}

echo "Displaying /etc/security/access.conf" >>& ${SPECIFICO}

echo '************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

cat /etc/security/access.conf >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Privileged Accounts / Root Login at Console Step 2

echo "Privileged Accounts / Root Login at Console Step 2" >>& ${SPECIFICO}

echo "See '<a href=system.html#Group>/etc/group</a>' file in Section 2" >>& ${SPECIFICO}

echo '**********************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Privileged Accounts / Root Login at Console Step 3

echo "Privileged Accounts / Root Login at Console Step 3" >>& ${SPECIFICO}

echo "See '<a href=system.html#Secure>/var/log/secure</a>' file in Section 2" >>& ${SPECIFICO}

echo '***************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Script displays account information

# Privileged Accounts Step 1

echo '<li><a href=specific.html#PrivilegedAccounts3>Privileged Accounts</a>' >>& ${INDEXO}

echo '<a name=PrivilegedAccounts3>' >>& ${SPECIFICO}

echo "Privleged Accounts Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#FindPasswdFile>/etc/passwd</a>' file in Section 2" >>& ${SPECIFICO}

echo '***********************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Privileged Accounts Step 2

echo "Privileged Accounts Step 2" >>& ${SPECIFICO}

echo "See '<a href=system.html#Group>/etc/group</a>' file in Section 2" >>& ${SPECIFICO}

echo '**********************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Script shows executable file permissions and group membership

# Program File Permissions Step 1

echo '<li><a href=specific.html#ProgFilePermissions2>Program File Permissions</a>' >>& ${INDEXO}

echo '<a name=ProgFilePermissions2>' >>& ${SPECIFICO}

echo "Program File Permissions Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#ExecutableFiles>executable</a>' files in Section 2" >>& ${SPECIFICO}

echo '***********************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Program File Permissions Step 3

echo "Program File Permissions Step 3" >>& ${SPECIFICO}

echo "See '<a href=system.html#Group>/etc/group</a>' file in Section 2" >>& ${SPECIFICO}

echo '**********************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Script checks for unencrypted services

# Protection of Authentication Data Step 1

echo '<li><a href=specific.html#ProtectData2>Protection of Authentication Data</a>' >>& ${INDEXO}

echo '<a name=ProtectData2>' >>& ${SPECIFICO}

echo "Protection of Authentication Data Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#ChkConfig>/sbin/chkconfig --list</a>' in Section 2" >>& ${SPECIFICO}

echo '**********************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Protection of Authentication Data Step 2

echo "Protection of Authentication Data Step 2" >>& ${SPECIFICO}

echo "<a href=system.html#Netstat>See 'netstat -a</a>' file in Section 2" >>& ${SPECIFICO}

echo '**********************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Script checks for remote trusted r-services

# Remote Trusted r- Services Step 1

echo '<li><a href=specific.html#RServices3>Remote Trusted r- Services</a>' >>& ${INDEXO}

echo '<a name=RServices3>' >>& ${SPECIFICO}

echo "Remote Trusted r- Services Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#ChkConfig>/sbin/chkconfig --list</a>' in Section 2" >>& ${SPECIFICO}

echo '**********************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Script checks for scheduled cron jobs and backups

# Review Audit Log Step 1

echo '<li><a href=specific.html#ReviewLog>Review Audit Log</a>' >>& ${INDEXO}

echo '<a name=ReviewLog>' >>& ${SPECIFICO}

echo "Review Audit Log Step 1" >>& ${SPECIFICO}

echo "Displaying ps -axu | grep syslogd" >>& ${SPECIFICO}

echo '*********************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

ps -axu | grep syslogd >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Review Audit Log Step 2

echo "Review Audit Log Step 2" >>& ${SPECIFICO}

echo "Displaying permissions of /var/log" >>& ${SPECIFICO}

echo '**********************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

if ( -f /var/log ) then

ls -al /var/log >>& ${SPECIFICO}

else

echo "No /var/log vile found found" >>& ${SPECIFICO}

endif

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Script shows user account information

# Root Access Step 1

echo '<li><a href=specific.html#RootAcess2>Root Access</a>' >>& ${INDEXO}

echo '<a name=RootAccess2>' >>& ${SPECIFICO}

echo "Root Access Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#DisplayPasswdFile>/etc/passwd</a>' file in Section 2" >>& ${SPECIFICO}

echo '***********************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Root Access Step 1

echo "Root Access Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#Secure>/var/log/secure</a>' in Section 2" >>& ${SPECIFICO}

echo '***************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Script checks for root FTP access

# Root Login to FTP Step 1

echo '<li><a href=specific.html#RootFtp2>Root Login to FTP</a>' >>& ${INDEXO}

echo '<a name=RootFtp2>' >>& ${SPECIFICO}

echo "Root Login to FTP Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#VsftpdConf>/etc/vsftpd/vsftpd.conf' in Section 2" >>& ${SPECIFICO}

echo '***********************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Root Login to FTP Step 2

echo "Root Login to FTP Step 2" >>& ${SPECIFICO}

echo "Displaying /etc/vsftpd.user_list" >>& ${SPECIFICO}

echo '********************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

if ( -f /etc/vsftpd.user_list ) then

cat /etc/vsftpd.user_list >>& ${SPECIFICO}

else

echo "No /etc/vsftpd.user_list file found" >>& ${SPECIFICO}

endif

echo '' >>& ${SPECIFICO}

# Root Login to FTP Step 1

echo "Root Login to FTP Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#Vsftpd>/ftpaccess</a>' in Section 2" >>& ${SPECIFICO}

echo '**************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Script shows SSH login information

# Root Login to SSH Step 1

echo '<li><a href=specific.html#RootSsh>Root Login to SSH Step 1</a>' >>& ${INDEXO}

echo '<a name=RootSsh>' >>& ${SPECIFICO}

echo "Root Login to SSH Step 1" >>& ${SPECIFICO}

echo "Displaying /etc/ssh/sshd_config | grep PermitRootLogin" >>& ${SPECIFICO}

echo '**************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

cat /etc/ssh/sshd_config | grep PermitRootLogin >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Script shows telnet root login information

# Root Login to Telnet Step 1

echo '<li><a href=specific.html#RootTelnet>Root Login to Telnet</a>' >>& ${INDEXO}

echo '<a name=RootTelnet>' >>& ${SPECIFICO}

echo "Root Login to Telnet Step 1" >>& ${SPECIFICO}

echo "Displaying /etc/securetty" >>& ${SPECIFICO}

echo '*************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

cat /etc/securetty >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Script shows root startup permissions

# Root Startup File Permissions Step 1

echo '<li><a href=specific.html#RootStartup3>Root Startup File Permissions</a>' >>& ${INDEXO}

echo '<a name=RootStartup3>' >>& ${SPECIFICO}

echo "Root Startup File Permissions Step 1" >>& ${SPECIFICO}

echo "Displaying permissions of /root/.*" >>& ${SPECIFICO}

echo '**********************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

ls -al /root/.* >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Root Startup File Permissions Step 2

echo "Root Startup File Permissions Step 2" >>& ${SPECIFICO}

echo "See '<a href=system.html#DisplayPasswdFile>/etc/passwd</a>' file in Section 2" >>& ${SPECIFICO}

echo '***********************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Script shows root user path variable information

# Root User Path Variable Step 1

echo '<li><a href=specific.html#RootPath3>Root User Path Variable</a>' >>& ${INDEXO}

echo '<a name=RootPath3>' >>& ${SPECIFICO}

echo "Root User Path Variable Step 1" >>& ${SPECIFICO}

echo "Displaying root path variable" >>& ${SPECIFICO}

echo '*****************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

/bin/echo $PATH >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Displays /usr/bin/rpcinfo file to check for RPC network services

# RPC Services Step 1

echo '<li><a href=specific.html#Rpc>RPC Services</a>' >>& ${INDEXO}

echo '<a name=Rpc>' >>& ${SPECIFICO}

echo "RPC Services Step 1" >>& ${SPECIFICO}

echo "Displaying /usr/bin/rpcinfo" >>& ${SPECIFICO}

echo '***************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

rpcinfo -p localhost >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Displays BIND status

# Run BIND With Non-Root Privlege Step 1

echo '<li><a href=specific.html#RunBind>Run BIND With Non-Root Privlege</a>' >>& ${INDEXO}

echo '<a name=RunBind>' >>& ${SPECIFICO}

echo "Run BIND With Non-root Privlege Step 1" >>& ${SPECIFICO}

echo "Displaying ps -ef | grep named" >>& ${SPECIFICO}

echo '******************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

ps -ef | grep named >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Script shows printer access and permissions

# Securing Printing Step 1

echo '<li><a href=specific.html#SecurePrint2>Securing Printing</a>' >>& ${INDEXO}

echo '<a name=SecurePrint2>' >>& ${SPECIFICO}

echo "Securing Printing Step 1" >>& ${SPECIFICO}

echo "Displaying permissions and contents of /etc/hosts.equiv" >>& ${SPECIFICO}

echo '*******************************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

if ( -f /etc/hosts.equiv ) then

ls -l /etc/hosts.equiv >>& ${SPECIFICO}

cat /etc/hosts.equiv >>& ${SPECIFICO}

else

echo "No /etc/hosts.equiv file found" >>& ${SPECIFICO}

endif

echo '' >>& ${SPECIFICO}

# Securing Printing Step 1

echo "Securing Printing Step 1" >>& ${SPECIFICO}

echo "Displaying permissions and contents of /etc/hosts.lpd" >>& ${SPECIFICO}

echo '*****************************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

if ( -f /etc/hosts.lpd ) then

ls -l /etc/hosts.lpd >>& ${SPECIFICO}

cat /etc/hosts.lpd >>& ${SPECIFICO}

else

echo "No /etc/hosts.lpd file found" >>& ${SPECIFICO}

endif

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Displays permissions of sendmail.cf file

# Security of Sendmail.cf File Step 1

echo '<li><a href=specific.html#SendmailCf>Security of Sendmail.cf File</a>' >>& ${INDEXO}

echo '<a name=SendmailCf>' >>& ${SPECIFICO}

echo "Security of Sendmail.cf File Step 1" >>& ${SPECIFICO}

echo "Displaying permissions of /etc/mail/sendmail.cf" >>& ${SPECIFICO}

echo '***********************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

ls -la /etc/mail/sendmail.cf >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Displays /etc/mail/sendmail.cf to check for trusted clients

# Sendmail Trusted Clients Step 1

echo '<li><a href=specific.html#SendmailTrusted>Sendmail Trusted Clients</a>' >>& ${INDEXO}

echo '<a name=SendmailTrusted>' >>& ${SPECIFICO}

echo "Sendmail Trusted Clients Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#SendmailCf>/etc/mail/sendmail.cf</a>' file in Section 2" >>& ${SPECIFICO}

echo '*********************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Script shows finger information

# Service Information Step 1

echo '<li><a href=specific.html#ServiceInformation3>Service Information</a>' >>& ${INDEXO}

echo '<a name=ServiceInformation3>' >>& ${SPECIFICO}

echo "Service Information Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#ChkConfig>/sbin/chkconfig --list</a>' in Section 2" >>& ${SPECIFICO}

echo '**********************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Service Information Step 2

echo "Service Information Step 2" >>& ${SPECIFICO}

echo "Displaying /etc/xinetd.d/finger" >>& ${SPECIFICO}

echo '*******************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

cat /etc/xinetd.d/finger >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Script shows single command account information

# Single Command Accounts Step 1

echo '<li><a href=specific.html#SingleCommandAccounts3>Single Command Accounts</a>' >>& ${INDEXO}

echo '<a name=SingleCommandAccounts3>' >>& ${SPECIFICO}

echo "Single Command Accounts Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#DisplayPasswdFile>/etc/passwd</a>' file in Section 2" >>& ${SPECIFICO}

echo '***********************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Single Command Accounts Step 2

echo "Single Command Accounts Step 2" >>& ${SPECIFICO}

echo "See '<a href=system.html#Shadow>/etc/shadow</a>' file in Section 2" >>& ${SPECIFICO}

echo '***********************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Script shows system boot loader password

# System Boot Loader Password Step 1

echo '<li><a href=specific.html#SysBoot>System Boot Loader Password</a>' >>& ${INDEXO}

echo '<a name=SysBoot>' >>& ${SPECIFICO}

echo "System Boot Loader Password Step 1" >>& ${SPECIFICO}

echo "Displaying /etc/lilo.conf | grep password" >>& ${SPECIFICO}

echo '*****************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

if ( -f /etc/lilo.conf ) then

cat /etc/lilo.conf | grep password >>& ${SPECIFICO}

else

echo "No /etc/lilo.conf file found" >>& ${SPECIFICO}

endif

echo '' >>& ${SPECIFICO}

# System Boot Loader Password Step 1

echo "System Boot Loader Password Step 1" >>& ${SPECIFICO}

echo "Displaying /etc/grub.conf | grep password" >>& ${SPECIFICO}

echo '*****************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

if ( -f /etc/grub.conf ) then

cat /etc/grub.conf | grep password >>& ${SPECIFICO}

else

echo "No /etc/grub.conf file found" >>& ${SPECIFICO}

endif

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Script shows user account information

# Temporary and Contractor Type Accounts Step 1

echo '<li><a href=specific.html#TempContract4>Temporary and Contractor Type Accounts</a>' >>& ${INDEXO}

echo '<a name=TempContract4>' >>& ${SPECIFICO}

echo "Temporary and Contractor Type Accounts Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#Shadow>/etc/shadow</a>' file in Section 2" >>& ${SPECIFICO}

echo '***********************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Displays /etc/passwd file

# Unique User IDs Step 1

echo '<li><a href=specific.html#UniqueUserIds>Unique User IDs</a>' >>& ${INDEXO}

echo '<a name=UniqueUserIds>' >>& ${SPECIFICO}

echo "Unique User IDs Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#DisplayPasswdFile>/etc/passwd</a>' file in Section 2" >>& ${SPECIFICO}

echo '***********************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Script displays configurations of local and network services

# Unnecessary Services Step 1

echo '<li><a href=specific.html#UnecessaryServices4>Unecessary Services</a>' >>& ${INDEXO}

echo '<a name=UnecessaryServices4>' >>& ${SPECIFICO}

echo "Unnecessary Services Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#ChkConfig>/sbin/chkconfig --list</a>' in Section 2" >>& ${SPECIFICO}

echo '**********************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Unnecessary Services Step 1

echo "Unnecessary Services Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#Netstat>netstat -a</a>' file in Section 2" >>& ${SPECIFICO}

echo '**********************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Unnecessary Services Step 1

echo "Unnecessary Services Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#Ifconfig>ifconfig -a</a>' file in Section 2" >>& ${SPECIFICO}

echo '***********************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Script shows permissions and contents of at.deny and at.allow, if they exist

# Use of AT and BATCH Commands Step 1

echo '<li><a href=specific.html#AtBatch4>Use of AT and BATCH Commands</a>' >>& ${INDEXO}

echo '<a name=AtBatch4>' >>& ${SPECIFICO}

echo "Use of AT and BATCH Commands Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#ChkConfig>/sbin/chkconfig --list</a>' in Section 2" >>& ${SPECIFICO}

echo '**********************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Use of AT and BATCH Commands Step 2

echo "Use of AT and BATCH Commands Step 2" >>& ${SPECIFICO}

echo "Displaying permissions of /etc/at.deny" >>& ${SPECIFICO}

echo '**************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

if ( -f /etc/at.deny ) then

/bin/ls -al /etc/at.deny >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo "Use of AT and BATCH Commands Step 2" >>& ${SPECIFICO}

echo "Displaying /etc/at.deny" >>& ${SPECIFICO}

echo '***********************' >>& ${SPECIFICO}

/bin/cat /etc/at.deny >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

else

echo "No /etc/at.deny file found" >>& ${SPECIFICO}

endif

echo '' >>& ${SPECIFICO}

# Use of AT and BATCH Commands Step 2

echo "Use of AT and BATCH Commands Step 2" >>& ${SPECIFICO}

echo "Displaying permissions of /etc/at.allow" >>& ${SPECIFICO}

echo '***************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

if ( -f /etc/at.allow ) then

/bin/ls -al /etc/at.allow >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo "Use of AT and BATCH Commands Step 1" >>& ${SPECIFICO}

echo "Displaying /etc/at.allow" >>& ${SPECIFICO}

echo '*********************************' >>& ${SPECIFICO}

/bin/cat /etc/at.allow >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

else

echo "No /etc/at.allow file found" >>& ${SPECIFICO}

endif

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Script shows Crontab command usage

# Use of CRONTAB Command Step 1

echo '<li><a href=specific.html#Crontab3>Use of CRONTAB Command</a>' >>& ${INDEXO}

echo '<a name=Crontab3>' >>& ${SPECIFICO}

echo "Use of CRONTAB Command Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#ChkConfig>/sbin/chkconfig --list</a>' in Section 2" >>& ${SPECIFICO}

echo '**********************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Use of CRONTAB Command Step 2

echo "Use of CRONTAB Command Step 2" >>& ${SPECIFICO}

echo "Displaying permissions of /etc/cron*" >>& ${SPECIFICO}

echo '*************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

/bin/ls -al /etc/cron* >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Use of CRONTAB Command Step 2

echo "Use of CRONTAB Command Step 2" >>& ${SPECIFICO}

echo "Displaying permissions of /var/spool/cron*" >>& ${SPECIFICO}

echo '*******************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

/bin/ls -al /var/spool/cron* >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Script displays configuration of sendmail

# Use of Sendmail Step 1

echo '<li><a href=specific.html#UseOfSendmail4>Use of Sendmail</a>' >>& ${INDEXO}

echo '<a name=UseOfSendmail4>' >>& ${SPECIFICO}

echo "Use of Sendmail Step 1" >>& ${SPECIFICO}

echo "Displaying /sbin/service sendmail status" >>& ${SPECIFICO}

echo '****************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

/sbin/service sendmail status >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Use of Sendmail Step 1

echo "Use of Sendmail Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#ChkConfig>/sbin/chkconfig --list</a>' in Section 2" >>& ${SPECIFICO}

echo '**********************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Script displays configuration of SNMP

# Use of SNMP Step 1

echo '<li><a href=specific.html#UseOfSnmp2>Use of SNMP</a>' >>& ${INDEXO}

echo '<a name=UseOfSnmp2>' >>& ${SPECIFICO}

echo "Use of SNMP Step 1" >>& ${SPECIFICO}

echo "Displaying /sbin/service snmpd status" >>& ${SPECIFICO}

echo '*************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

/sbin/service snmpd status >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Use of SNMP Step 1

echo "Use of SNMP Step 1" >>& ${SPECIFICO}

echo "Displaying /sbin/service snmptrapd status" >>& ${SPECIFICO}

echo '*****************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

/sbin/service snmptrapd status >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Use of SNMP Step 1

echo "Use of SNMP Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#ChkConfig>/sbin/chkconfig --list</a>' in Section 2" >>& ${SPECIFICO}

echo '**********************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Script shows world writeable directories

# Use of Sticky Bit Step 1

echo '<li><a href=specific.html#UseOfSticky>Use of Sticky Bit</a>' >>& ${INDEXO}

echo '<a name=UseOfSticky>' >>& ${SPECIFICO}

echo "Use of the Sticky Bit Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#WorldWriteableDirs>world writable directories</a>' in Section 2" >>& ${SPECIFICO}

echo '*********************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Displays existence of SUID and SGID files

# Use of SUID and SGID Programs Step 1

echo '<li><a href=specific.html#UseOfSuid>Use of SUID and SGID Programs</a>' >>& ${INDEXO}

echo '<a name=UseOfSuid>' >>& ${SPECIFICO}

echo "Use of SUID and SGID Programs Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#SUID>SUID</a>' files in Section 2" >>& ${SPECIFICO}

echo '*****************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Use of SUID and SGID Programs Step 1

echo "Use of SUID and SGID Programs Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#SUID>SGID</a>' files in Section 2" >>& ${SPECIFICO}

echo '*****************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Script looks for TCP wrappers

# Use of TCP Wrappers Step 1

echo '<li><a href=specific.html#UseOfTcpWrap3>Use of TCP Wrappers</a>' >>& ${INDEXO}

echo '<a name=UseOfTcpWrap3>' >>& ${SPECIFICO}

echo "Use of TCP Wrappers Step 1" >>& ${SPECIFICO}

echo "Displaying permissions of /etc/xinetd.d directory" >>& ${SPECIFICO}

echo '*************************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

/bin/ls -al /etc/xinetd.d >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Use of TCP Wrappers Step 2

echo "Use of TCP Wrappers Step 2" >>& ${SPECIFICO}

echo "Displaying contents of every file in /etc/xinetd.d directory" >>& ${SPECIFICO}

echo '************************************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

cat /etc/xinetd.d/* >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Script checks TFTP configuration

# Use of TFTP Step 1

echo '<li><a href=specific.html#UseOfTftp3>Use of TFTP</a>' >>& ${INDEXO}

echo '<a name=UseOfTftp3>' >>& ${SPECIFICO}

echo "Use of TFTP Step 1" >>& ${SPECIFICO}

echo "Displaying /etc/xinetd.d/tftp" >>& ${SPECIFICO}

echo '*****************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

cat /etc/xinetd.d/tftp >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Displays /etc/passwd file

# User and Group ID Numbers Step 1

echo '<li><a href=specific.html#UserID>User and Group ID Numbers</a>' >>& ${INDEXO}

echo '<a name=UserID>' >>& ${SPECIFICO}

echo "User and Group ID Numbers Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#Passwd>/etc/passwd</a>' file in Section 2" >>& ${SPECIFICO}

echo '***********************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Displays /etc/passwd file

# User Description Step 1

echo '<li><a href=specific.html#UserDescription>User Description</a>' >>& ${INDEXO}

echo '<a name=UserDescription>' >>& ${SPECIFICO}

echo "User Description Step 1" >>& ${SPECIFICO}

echo "<a href=system.html#DisplayPasswdFile>See '/etc/passwd</a>' file in Section 2" >>& ${SPECIFICO}

echo '***********************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Displays /etc/passwd file

# User Home Directory Step 1

echo '<li><a href=specific.html#UserHome>User Home Directory</a>' >>& ${INDEXO}

echo '<a name=UserHome>' >>& ${SPECIFICO}

echo "User Home Directory Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#DisplayPasswdFile>/etc/passwd</a>' file in Section 2" >>& ${SPECIFICO}

echo '***********************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Displays /etc/passwd file

# User ID Naming Convention Step 1

echo '<li><a href=specific.html#UserIdNamingConvention>User ID Naming Convention</a>' >>& ${INDEXO}

echo '<a name=UserIdNamingConvention>' >>& ${SPECIFICO}

echo "User ID Naming Convention Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#DisplayPasswdFile>/etc/passwd</a>' file in Section 2" >>& ${SPECIFICO}

echo '***********************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Script checks for user shells

# User Shells Step 1

echo '<li><a href=specific.html#UserShells3>User Shells</a>' >>& ${INDEXO}

echo '<a name=UserShells3>' >>& ${SPECIFICO}

echo "User Shells Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#Shells>/etc/shells</a>' file in Section 2" >>& ${SPECIFICO}

echo '***********************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# User Shells Step 2

echo "User Shells Step 2" >>& ${SPECIFICO}

echo "See '<a href=system.html#DisplayPasswdFile>/etc/passwd</a>' file in Section 2" >>& ${SPECIFICO}

echo '***********************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Script checks if UUCP is used

# UUCP Usage Step 1

echo '<li><a href=specific.html#UucpUse4>UUCP Usage</a>' >>& ${INDEXO}

echo '<a name=UucpUse4>' >>& ${SPECIFICO}

echo "UUCP Usage Step 1" >>& ${SPECIFICO}

echo "Displaying /bin/rpm -qa | grep uucp" >>& ${SPECIFICO}

echo '***********************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

/bin/rpm -qa | grep uucp >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# UUCP Usage Step 2

echo "UUCP Usage Step 2" >>& ${SPECIFICO}

echo "See '<a href=system.html#Shadow>/etc/shadow</a>' file in Section 2" >>& ${SPECIFICO}

echo '***********************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# UUCP Usage Step 3

echo "UUCP Usage Step 3" >>& ${SPECIFICO}

echo "See '<a href=system.html#ChkConfig>/sbin/chkconfig --list</a>' in Section 2" >>& ${SPECIFICO}

echo '**********************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# UUCP Usage Step 4

echo "UUCP Usage Step 4" >>& ${SPECIFICO}

echo "Displaying contents of /etc/uucp/*" >>& ${SPECIFICO}

echo '**********************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

/bin/cat /etc/uucp/* >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Script shows user account information

# X-Windows Started At Boot Step 1

echo '<li><a href=specific.html#XWinBoot>X-Windows Started At Boot Time</a>' >>& ${INDEXO}

echo '<a name=XWinBoot>' >>& ${SPECIFICO}

echo "X-Windows Started At Boot Step 1" >>& ${SPECIFICO}

echo "Displaying /etc/inittab | grep initdefault" >>& ${SPECIFICO}

echo '******************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

cat /etc/inittab | grep initdefault >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Script shows user account information

# X-Windows Tunneling Over SSH Step 1

echo '<li><a href=specific.html#XWinTunnel>X-Windows Tunneling Over SSH</a>' >>& ${INDEXO}

echo '<a name=XWinTunnel>' >>& ${SPECIFICO}

echo "X-Windows Started At Boot Step 1" >>& ${SPECIFICO}

echo "Displaying /etc/ssh/sshd_config | grep X11Forwarding" >>& ${SPECIFICO}

echo '****************************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

cat /etc/ssh/sshd_config | grep X11Forwarding >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Script checks if X-windows is used

# X-Windows Usage Step 1

echo '<li><a href=specific.html#XWinUse>X-Windows Usage</a>' >>& ${INDEXO}

echo '<a name=XWinUse>' >>& ${SPECIFICO}

echo "X-Windows Usage Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#Netstat>netstat -an</a>' file in Section 2" >>& ${SPECIFICO}

echo '************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# X-Windows Usage Step 2

echo "X-Windows Usage Step 2" >>& ${SPECIFICO}

echo "Displaying files that allow X-windows sessions" >>& ${SPECIFICO}

echo '**********************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

find / $ -fstype nfs -prune $ -o -name 'X*.hosts' -exec ls -la {} \; -exec cat {} \; >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# X-Windows Usage Step 3

echo "X-Windows Usage Step 3" >>& ${SPECIFICO}

echo "Displaying permissions of /usr/X11R6/bin/xhost" >>& ${SPECIFICO}

echo '**********************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

/bin/ls -l /usr/X11R6/bin/xhost >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopO