Unix server audit report script

 #!/bin/csh

############################################################

############################################################

#!/bin/csh

#

#

# -------------------------------------

# UNIX Audit Script

# -------------------------------------

#

#       10/04 - Header and text objects defined - LV / BR / PM / CW - eyversion 1.0.0

#       12/04 - Header refined - BR - eyversion 1.1.0

#       01/05 - Header refined - BR - eyversion 1.2.0

#       05/05 - HTML Definitions Addedd - PM - eyversion 1.3.0

# 06/06 - Header refined - MT - eyversion 1.4.0

# 02/07 - Header refined to create unique output folders - MT - eyversion 1.5.0

# 09/07 - Corrected footer to fix Sybase output problems. - JW - eyversion 1.6.0

# =============================================================

#set -x

onintr quit

set prompt="Press <Return> to continue"

set eyversion=1.6.0

set UNAMEa=`uname -a`

set basedir=/tmp/eyscan

set HOSTNAME=`hostname`

set INDEXF=index.html

#set SYSTEMF=system.out.txt

set SYSTEMF=system.html

#set SPECIFICF=specific.out.txt

set SPECIFICF=specific.html

main:

 while (1)

 clear

  echo "          ---------------------------------------------------"

  echo "                           Ernst & Young  LLP                "

  echo "                            Copyright - 2006                 "

  echo "          ---------------------------------------------------"

  echo "          Please make your selection from the options below: "

  echo ""

  echo "           1) Run the script on this host     "

  echo "           2) Copyright Information           "

  echo "           3) Exit                            "

  echo ""

  echo -n "           Enter Selection: "

   set OUTPUTTYPE=$<

   switch ($OUTPUTTYPE)

   case 1:

        goto systemtype

   case 2:

        goto CopyRight

   case 3:

        exit

   default:

        clear

        echo "Invalid selection"

        echo -n "$prompt"

         tmp=$<

        goto main

  endsw

 end

CopyRight:

  clear

  echo ""

  echo "          ---------------------------------------------------"

  echo " This script is privileged and/or confidential, and the developers do not"

  echo " waive any related rights.  Any distribution, use, or copying of this"

  echo " script or the information it contains by other than the intended"

  echo " user is unauthorized. If you received this script in error, please advise"

  echo " Ernst & Young LLP immediately."

  echo " "

    echo "          ---------------------------------------------------"

sleep 5

goto main

systemtype:

 clear

  echo "          ---------------------------------------------------"

  echo "                           Ernst & Young  LLP                "

  echo "                            Copyright - 2006                 "

  echo "          ---------------------------------------------------"

  echo "                      Please select the system type:      "

  echo ""

  echo "           1) Linux                           "

  echo "           2) All other Unix flavors          "

  echo "           3) Sybase Database          "   

  echo ""

  echo -n "           Enter Selection: "

   set OUTPUTTYPE=$<

   switch ($OUTPUTTYPE)

   case 1:

        set case=1

        goto systeminfo1

   case 2:

        set case=2

        goto systeminfo2

   case 3:

        set case=3

        goto dbinfo

   default:

        clear

        echo "Invalid selection"

        echo -n "$prompt"

         tmp=$<

        goto systemtype

  endsw

 end

systeminfo1:

  clear

  echo ""

  echo "          ---------------------------------------------------"

  echo "                           Ernst & Young  LLP                "

  echo "                            Copyright - 2006                 "

  echo "          ---------------------------------------------------"

  echo "               Please enter some of the system specifics "

  echo ""

  echo -n "           1) Please enter a unique output folder name : "

   set outfolder = `head -1`

   set outdir = ${basedir}/${outfolder}

  echo -n "           2) What is the Operating System Version?: "

   set version = `head -1`

  echo -n "           3) What is the System Hostname?: "

   set sysname = `head -1`

  echo -n "           4) What is the Administrator's Name?: "

   set adminname = `head -1`

  echo -n "           5) What is the Client's Name?: "

   set clientname = `head -1`

  echo -n "           6) Enter Auditor's Full Name: "

   set auditorname = `head -1`

  echo -n "           7) Enter Server Information / Note To Auditor: "

   set servinfo = `head -1`

  clear

  echo ""

  echo "          ---------------------------------------------------"

  echo "                    Ernst & Young  LLP Script - ${eyversion} "

  echo "                            Copyright - 2006                 "

  echo "          ---------------------------------------------------"

  echo "          System specifics "

  echo "          "

  echo "           1) Output directory: ${outdir}"

  echo "           2) OS Version Number: ${version}"

  echo "           3) System Name: ${sysname}"

  echo "           4) Administrator's Name: ${adminname}"

  echo "           5) Client's Name: ${clientname}"

  echo "           6) Auditor's Full Name: ${auditorname}"

  echo "           7) Server Information / Note To Auditor: ${servinfo}"

  echo ""

  echo -n "           Is the above information correct? [y/n]: "

   set ans=$<

#

if (!(($ans == "y") || ($ans == "Y"))) then

       clear

       goto systeminfo1

       else

       clear

       goto Query

endif

systeminfo2:

  clear

  echo ""

  echo "          ---------------------------------------------------"

  echo "                           Ernst & Young  LLP                "

  echo "                            Copyright - 2006                 "

  echo "          ---------------------------------------------------"

  echo "               Please enter some of the system specifics "

  echo "          "

  echo -n "           1) Please enter a unique output folder name: "

   set outfolder = $<

   set outdir = ${basedir}/${outfolder}

  echo -n "           2) What is the Operating System Version?: "

   set version = $<

  echo -n "           3) What is the System Hostname?: "

   set sysname = $<

  echo -n "           4) What is the Administrator's Name?: "

   set adminname = $<

  echo -n "           5) What is the Client's Name?: "

   set clientname = $<

  echo -n "           6) Enter Auditor's Full Name: "

   set auditorname = $<

  echo -n "           7) Enter Server Information / Note To Auditor: "

   set servinfo = $<

  clear

  echo ""

  echo "          ---------------------------------------------------"

  echo "                    Ernst & Young  LLP Script - ${eyversion} "

  echo "                            Copyright - 2006                 "

  echo "          ---------------------------------------------------"

  echo "          System specifics "

  echo "          "

  echo "           1) Output directory: ${outdir}"

  echo "           2) OS Version Number: ${version}"

  echo "           3) System Name: ${sysname}"

  echo "           4) Administrator's Name: ${adminname}"

  echo "           5) Client's Name: ${clientname}"

  echo "           6) Auditor's Full Name: ${auditorname}"

  echo "           7) Server Information / Note To Auditor: ${servinfo}"

  echo ""

  echo -n "           Is the above information correct? [y/n]: "

   set ans=$<

#

if (!(($ans == "y") || ($ans == "Y"))) then

       clear

       goto systeminfo2

       else

       clear

       goto Query

endif

dbinfo:

  clear

  echo ""

  echo "          ---------------------------------------------------"

  echo "                           Ernst & Young  LLP                "

  echo "                            Copyright - 2006                 "

  echo "          ---------------------------------------------------"

  echo "          Please enter the database connection information "

  echo "          ---------------------------------------------------"

  echo "          Please enter the database connection information "

  echo "                                                          "

  echo "                THIS INFORMATION WILL NOT BE SAVED!             "

  echo ""

  echo -n "           1) Please enter a unique output folder name: "

   set outfolder = `head -1`

   set outdir = ${basedir}/${outfolder}

  echo -n "           2) What is the Database Administrator username?: "

   set admin_name = `head -1`

  echo -n "           3) What is the Database Administrator password?: "

   set admin_pword = `head -1`

  echo -n "           4) What is the Database Name?: "

   set db_name = `head -1`

  clear

  echo ""

  echo "          ---------------------------------------------------"

  echo "                    Ernst & Young  LLP Script - ${eyversion} "

  echo "                            Copyright - 2006                 "

  echo "          ---------------------------------------------------"

  echo "          Database connection information "

  echo "          "

  echo "           1) Output directory: ${outdir}"

  echo "           2) Administrator Name: ${admin_name}"

  echo "           3) Administrator Password: ${admin_pword}"

  echo "           4) Database Name: ${db_name}"

  echo ""

  echo -n "           Is the above information correct? [y/n]: "

   set ans=$<

#

if (!(($ans == "y") || ($ans == "Y"))) then

       clear

       goto dbinfo

       else

       clear

       goto Query

endif

Query:

  echo ""

  echo "          ---------------------------------------------------"

  echo "                    Ernst & Young  LLP Script - ${eyversion} "

  echo "                            Copyright - 2006                 "

  echo "          ---------------------------------------------------"

  echo "            The query script is now running. Please wait..."

  echo ""

  echo ""

sleep 3

#*** Set up output formatting.

#

# This component of the script ensures that the output directory and files are resident on the system  being reviewed.

#

        if (!(-d ${basedir})) then

                mkdir -p ${basedir}

                chmod 700 ${basedir}

                mkdir -p ${outdir}

                chmod 700 ${outdir}

else

                mkdir -p ${outdir}

                chmod 700 ${outdir}

    

        endif

                if $case != 3 then

set INDEXO=${outdir}/${INDEXF}

set SYSTEMO=${outdir}/${SYSTEMF}

set SPECIFICO=${outdir}/${SPECIFICF}

set TEXTO=${outdir}/ey-${HOSTNAME}.txt

                touch ${INDEXO}

                touch ${SPECIFICO}

                touch ${SYSTEMO}

                        # Add new html output files to the list here:

                        echo "<html><head><title>specific.out</title></head><body><h1>Specific to this  flavor of UNIX</h1><pre>" > ${SPECIFICO}

                        echo "<html><head><title>system.out</title></head><body><h1>System  files</h1><pre>" > ${SYSTEMO}

                        echo "<html><head><title>UNIX Script</title></head><body><h1>EY UNIX  Script</h1>" > ${INDEXO}

                        # End of new html output files

                        # System specifics to include on index page

                        #

                        echo "${UNAMEa}<br>" >>& ${INDEXO}

                        echo "<b>OS Version:</b> ${version}<br>">>& ${INDEXO}

                        echo "<b>Adminstrator:</b> ${adminname}<br>">>& ${INDEXO}

                        echo "<b>Client:</b> ${clientname}<br>">>& ${INDEXO}

                        echo "<b>Auditor's Full Name:</b> ${auditorname}<br>">>& ${INDEXO}

                        echo "<b>EY Script Version Number:</b> ${eyversion}<br>">>& ${INDEXO}

                        echo "<b>Server Information / Note To Auditor:</b> ${servinfo}<br><br><ul>">>&  ${INDEXO}

                        echo '<a name=TopOfIndex>' >>& ${INDEXO}

                endif

# Script finds and displays .hushlogin files

#

echo '<a name=Hush>' >>& ${SYSTEMO}

echo "Displaying .hushlogin files" >>&  ${SYSTEMO}

echo '**************************' >>&  ${SYSTEMO}

echo '' >>&  ${SYSTEMO}

     find / \( -fstype nfs -prune \) -o -name '.hushlogin' -exec ls -dal {} \; >>&  ${SYSTEMO}

echo '' >>&  ${SYSTEMO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO} 

# Script finds all .netrc files 

# 

echo '<a name=Netrc>' >>& ${SYSTEMO}

echo "Displaying .netrc files" >>& ${SYSTEMO}

echo '***********************' >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

  find / \( -fstype nfs -prune \) -o -name '*.netrc' -exec /usr/bin/ls -al {} \; -exec cat {} \; >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

# Script finds and displays .rhost files

#

echo '<a name=Rhost>' >>& ${SYSTEMO}

echo "Displaying .rhosts files" >>& ${SYSTEMO}

echo '************************' >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

  find / \( -fstype nfs -prune \) -o -name '*.rhosts' -print -exec ls -al {} \; -exec cat {} \; >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO} 

# Script finds and displays unauthorized device files

# 

echo '<a name=DeviceFiles>' >>& ${SYSTEMO}

echo "Displaying all device files" >>& ${SYSTEMO} 

echo '************************************' >>& ${SYSTEMO} 

echo '' >>& ${SYSTEMO} 

find / \( -fstype nfs -prune \) -o \( -type c -o -type b \) -exec ls -al {} \; >>& ${SYSTEMO} 

echo '' >>& ${SYSTEMO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

# Script shows all executable files

# 

echo '<a name=ExecutableFiles>' >>& ${SYSTEMO}

echo "Displaying executable files" >>& ${SYSTEMO}

echo '***************************' >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

find / \( -fstype nfs -prune \) -o -type f \( -perm -100 -o -perm -010 -o -perm -001 \) -exec ls -al {} \; >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

# Script displays existence of SUID and SGID files

#

echo '<a name=SUID>' >>& ${SYSTEMO}

echo "Displaying SUID files" >>& ${SYSTEMO}

echo '*********************' >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

find / \( -fstype nfs -prune \) -o -type f -perm -4000 -exec ls -dal {} \; >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

echo "Displaying SGID files" >>& ${SYSTEMO}

echo '*********************' >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

find / \( -fstype nfs -prune \) -o -type f -perm -2000 -exec ls -dal {} \; >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO} 

# Script displays files that are both world-writable and executable

#

echo '<a name=WorldWriteableFiles>' >>& ${SYSTEMO}

echo "Displaying files that are both world-writeable and executable" >>&  ${SYSTEMO}

echo '*************************************************************' >>&  ${SYSTEMO}

echo '' >>&  ${SYSTEMO}

  find / \( -fstype nfs -prune \) -o -type f -perm -00003 -exec ls -al {} \; >>&  ${SYSTEMO}

echo '' >>&  ${SYSTEMO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO} 

# Script displays all world writable directories

#

echo '<a name=WorldWriteableDirs>' >>& ${SYSTEMO}

echo "Displaying world writable directories" >>& ${SYSTEMO} 

echo '*************************************' >>& ${SYSTEMO} 

echo '' >>& ${SYSTEMO} 

find / \( -fstype nfs -prune \) -o -type d -perm -2 -exec ls -dlL {} \; >>& ${SYSTEMO} 

echo '' >>& ${SYSTEMO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

# Script displays all world writable files

#

echo '<a name=WorldWriteableFiles2>' >>& ${SYSTEMO}

echo "Displaying world writable files" >>& ${SYSTEMO} 

echo '*******************************' >>& ${SYSTEMO} 

echo '' >>& ${SYSTEMO} 

find / \( -fstype nfs -prune \) -o -type f -perm -2 -exec ls -dlL {} \; >>& ${SYSTEMO} 

echo '' >>& ${SYSTEMO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO} 

# Script displays open ports and open port numbers

#

echo '<a name=OpenPorts>' >>& ${SYSTEMO}

echo "Open ports" >>& ${SYSTEMO} 

echo "Displaying netstat -a" >>& ${SYSTEMO} 

echo '*********************' >>& ${SYSTEMO} 

echo '' >>& ${SYSTEMO} 

netstat -a  >>& ${SYSTEMO} 

echo '' >>& ${SYSTEMO} 

#

echo "Open port numbers" >>& ${SYSTEMO} 

echo "Displaying netstat -an" >>& ${SYSTEMO} 

echo '**********************' >>& ${SYSTEMO} 

echo '' >>& ${SYSTEMO} 

netstat -an  >>& ${SYSTEMO} 

echo '' >>& ${SYSTEMO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

# Script displays file permissions of /dev 

# 

echo '<a name=PermissionsDev>' >>& ${SYSTEMO}

echo "Displaying file permissions of /dev" >>& ${SYSTEMO} 

echo '***********************************' >>& ${SYSTEMO} 

echo '' >>& ${SYSTEMO} 

if ( -d /dev) then 

ls -al /dev >>& ${SYSTEMO} 

else 

echo "No /dev directory found" >>& ${SYSTEMO} 

endif 

echo '' >>& ${SYSTEMO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

# Script displays /etc/group file

# 

echo '<a name=Group>' >>& ${SYSTEMO}

echo "Displaying /etc/group" >>& ${SYSTEMO}

echo '*********************' >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

if ( -f /etc/group) then

cat /etc/group >>& ${SYSTEMO}

else

echo "No /etc/group file found" >>& ${SYSTEMO}

endif

echo '' >>& ${SYSTEMO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO} 

# Script shows user account information

# 

echo '<a name=LoginDefs>' >>& ${SYSTEMO}

echo "Displaying /etc/login.defs" >>& ${SYSTEMO}

echo '**************************' >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

  cat /etc/login.defs >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

# Displays sendmail configuration info

#

echo '<a name=SendmailConf>' >>& ${SYSTEMO}

echo "Displaying /etc/mail/sendmail.cf" >>& ${SYSTEMO}

echo '********************************' >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

if ( -f /etc/mail/sendmail.cf ) then

cat /etc/mail/sendmail.cf >>& ${SYSTEMO}

else

echo "No /etc/mail/sendmail.cf file found" >>& ${SYSTEMO}

endif

echo '' >>& ${SYSTEMO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

# Script displays /etc/named.conf file

# 

echo '<a name=NamedConf>' >>& ${SYSTEMO}

echo "Displaying /etc/named.conf" >>& ${SYSTEMO}

echo '**************************' >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

if ( -f /etc/named.conf) then

cat /etc/named.conf >>& ${SYSTEMO}

else

echo "No /etc/named.conf file found" >>& ${SYSTEMO}

endif

echo '' >>& ${SYSTEMO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO} 

# Script displays /etc/pam.d/system-auth file

#

echo '<a name=PamdSys>' >>& ${SYSTEMO}

echo "Displaying etc/pam.d/system-auth" >>& ${SYSTEMO}

echo '********************************' >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

if ( -f /etc/pam.d/system-auth ) then

cat /etc/pam.d/system-auth >>& ${SYSTEMO}

else

echo "No /etc/pam.d/system-auth file found" >>& ${SYSTEMO}

endif

echo '' >>& ${SYSTEMO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO} 

# Script displays /etc/passwd file

# 

echo '<a name=DisplayPasswdFile>' >>& ${SYSTEMO}

echo "Displaying /etc/passwd" >>& ${SYSTEMO}

echo '**********************' >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

if ( -f /etc/passwd) then

cat /etc/passwd >>& ${SYSTEMO}

else

echo "No /etc/passwd file found" >>& ${SYSTEMO}

endif

echo '' >>& ${SYSTEMO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

# Script displays /etc/profile file 

# 

echo '<a name=Profile>' >>& ${SYSTEMO}

echo "Displaying /etc/profile" >>& ${SYSTEMO} 

echo '***********************' >>& ${SYSTEMO} 

echo '' >>& ${SYSTEMO} 

if ( -f /etc/profile) then 

cat /etc/profile >>& ${SYSTEMO} 

else 

echo "No /etc/profile file found" >>& ${SYSTEMO} 

endif 

echo '' >>& ${SYSTEMO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

# Script displays /etc/shadow file

# 

echo '<a name=Shadow>' >>& ${SYSTEMO}

echo "Displaying /etc/shadow" >>& ${SYSTEMO}

echo '**********************' >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

if ( -f /etc/shadow) then

cat /etc/shadow >>& ${SYSTEMO}

else

echo "No /etc/shadow file found" >>& ${SYSTEMO}

endif

echo '' >>& ${SYSTEMO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

# Script displays /etc/shells file

# 

echo '<a name=Shells>' >>& ${SYSTEMO}

echo "Displaying /etc/shells" >>& ${SYSTEMO}

echo '**********************' >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

if ( -f /etc/shells) then

cat /etc/shells >>& ${SYSTEMO}

else

echo "No /etc/shells file found" >>& ${SYSTEMO}

endif

echo '' >>& ${SYSTEMO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO} 

# Script displays /etc/syslog.conf file

# 

echo '<a name=Syslog>' >>& ${SYSTEMO}

echo "Displaying /etc/syslog.conf" >>& ${SYSTEMO}

echo '***************************' >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

if ( -f /etc/syslog.conf) then

cat /etc/syslog.conf >>& ${SYSTEMO}

else

echo "No /etc/syslog.conf file found" >>& ${SYSTEMO}

endif

echo '' >>& ${SYSTEMO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO} 

# Script displays vsftpd.conf file

# 

echo '<a name=VsftpdConf>' >>& ${SYSTEMO}

echo "Displaying /etc/vsftpd/vsftpd.conf" >>& ${SYSTEMO} 

echo '************************************' >>& ${SYSTEMO} 

echo '' >>& ${SYSTEMO}

if ( -f /etc/vsftpd/vsftpd.conf) then

cat /etc/vsftpd/vsftpd.conf >>& ${SYSTEMO}

else

echo "No /etc/vsftpd/vsftpd.conf file found" >>& ${SYSTEMO}

endif

echo '' >>& ${SYSTEMO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

# Script displays /ftpusers file

#

echo '<a name=Ftpusers>' >>& ${SYSTEMO}

echo "Displaying contents of /ftpusers" >>& ${SYSTEMO}

echo '********************************' >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

find /etc \( -fstype nfs -prune \) -o -name ftpusers -exec cat {} \; >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

# Script checks for services

# 

echo '<a name=ChkConfig>' >>& ${SYSTEMO}

echo "Displaying /sbin/chkconfig --list" >>& ${SYSTEMO} 

echo '*********************************' >>& ${SYSTEMO} 

echo '' >>& ${SYSTEMO} 

/sbin/chkconfig --list >>& ${SYSTEMO} 

echo '' >>& ${SYSTEMO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}  

# Displays 'ifconfig -a' to check for a promiscuous mode NIC 

#

echo '<a name=Ifconfig>' >>& ${SYSTEMO}

echo "Displaying 'ifconfig -a'" >>& ${SYSTEMO}

echo '************************' >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

ifconfig -a >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO} 

# Script displays /usr/bin/last file

# 

echo '<a name=Last>' >>& ${SYSTEMO}

echo "Displaying /usr/bin/last" >>& ${SYSTEMO}

echo '************************' >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

last >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

echo "Displaying previous /usr/bin/last files" >>& ${SYSTEMO}

echo '***************************************' >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

if ( -f /var/log/wtmp.1 ) then

last -f /var/log/wtmp.* >>& ${SYSTEMO}

else

echo "No previous '/usr/bin/last' file found" >>& ${SYSTEMO}

endif

echo '' >>& ${SYSTEMO}

# Script displays ypcat passwd file

# 

echo '<a name=Ypcat>' >>& ${SYSTEMO}

echo "Displaying ypcat passwd" >>& ${SYSTEMO}

echo '***********************' >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

ypcat passwd >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

# Script displays /var/log/messages

#

echo '<a name=Messages>' >>& ${SYSTEMO}

echo "Displaying /var/log/messages" >>&  ${SYSTEMO}

echo '****************************' >>&  ${SYSTEMO}

echo '' >>&  ${SYSTEMO}

if ( -f /var/log/messages ) then

cat /var/log/messages >>&  ${SYSTEMO}

else

echo "No /var/log/messages file found" >>&  ${SYSTEMO}

endif

echo '' >>&  ${SYSTEMO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO} 

# Script displays /var/log/secure file 

# 

echo '<a name=Secure>' >>& ${SYSTEMO}

echo "Displaying /var/log/secure" >>& ${SYSTEMO} 

echo '**************************' >>& ${SYSTEMO} 

echo '' >>& ${SYSTEMO} 

if ( -f /var/log/secure) then 

cat /var/log/secure >>& ${SYSTEMO} 

else 

echo "No /var/log/secure file found" >>& ${SYSTEMO} 

endif 

echo '' >>& ${SYSTEMO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO} 

# Script displays ftp configuration files

#

echo '<a name=Vsftpd>' >>& ${SYSTEMO}

echo "Displaying /etc/vsftpd.ftpusers" >>& ${SYSTEMO}

echo '*******************************' >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

if ( -f /etc/vsftpd.ftpusers ) then

cat /etc/vsftpd.ftpusers >>& ${SYSTEMO}

else

echo "No /etc/vsftpd.ftpusers file found" >>& ${SYSTEMO}

endif

echo '' >>& ${SYSTEMO}

echo "Displaying /etc/ftpaccess" >>& ${SYSTEMO}

echo '*************************' >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

if ( -f /etc/ftpaccess ) then

cat /etc/ftpaccess >>& ${SYSTEMO}

else

echo "No /etc/ftpaccess file found" >>& ${SYSTEMO}

endif

echo '' >>& ${SYSTEMO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO} 

# Script finds all executable files and shows group permissions 

# 

# Access to Administration Tools and System Utilities Step 1

#

echo '<li><a href=specific.html#AdminTools2>Access to Administration Tools and System Utilities</a>' >>& ${INDEXO}

echo '<a name=AdminTools2>' >>& ${SPECIFICO}

echo "Access to Administration Tools and System Utilities Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#ExecutableFiles>executable</a>' files in Section 2" >>& ${SPECIFICO}

echo '***********************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Access to Administration Tools and System Utilities Step 3

#

echo "Access to Administration Tools and System Utilities Step 3" >>& ${SPECIFICO}

echo "See '<a href=system.html#Group>/etc/group</a>' file in Section 2" >>& ${SPECIFICO}

echo '**********************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO} 

# Script checks the BIND service and configuration file

# 

# Access to DNS Queries Step 1

#

echo '<li><a href=specific.html#DnsQueries4>Access to DNS Queries</a>' >>& ${INDEXO}

echo '<a name=DnsQueries4>' >>& ${SPECIFICO}

echo "Access to DNS Queries Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#OpenPorts>netstat -an</a>' file in Section 2" >>& ${SPECIFICO}

echo '***********************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Access to DNS Queries Step 2

#

echo "Access to DNS Queries Step 2"  >>& ${SPECIFICO}

echo "See '<a href=system.html#NamedConf>/etc/named.conf</a>' file in Section 2"  >>& ${SPECIFICO}

echo '***************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO} 

# Script checks for FTP service

# 

# Access to the FTP Service Step 1

#

echo '<li><a href=specific.html#FtpService>Access to the FTP Service</a>' >>& ${INDEXO}

echo '<a name=FtpService>' >>& ${SPECIFICO}

echo "Access to the FTP Service Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#ChkConfig>chkconfig --list</a>' in Section 2" >>& ${SPECIFICO}

echo '***********************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Access to the FTP Service Step 2

#

echo "Access to the FTP Service Step 2" >>& ${SPECIFICO}

echo "See '<a href=system.html#Vsftpd>vsftpd.ftpusers</a>' in Section 2" >>& ${SPECIFICO}

echo '********************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Access to the FTP Service Step 2

#

echo "Access to the FTP Service Step 2" >>& ${SPECIFICO}

echo "See '<a href=system.html#Vsftpd>/ftpaccess</a>' in Section 2" >>& ${SPECIFICO}

echo '**************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Access to the FTP Service Step 2

#

echo "Access to the FTP Service Step 2" >>& ${SPECIFICO}

echo "See '<a href=system.html#Ftpusers>/ftpusers</a>' file in Section 2" >>& ${SPECIFICO}

echo '*************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO} 

# Script checks if accounts can be locked

# 

# Account Lockout Step 1

#

echo '<li><a href=specific.html#AccountLockout5>Account Lockout</a>' >>& ${INDEXO}

echo '<a name=AccountLockout5>' >>& ${SPECIFICO}

echo "Account Lockout Step 1" >>& ${SPECIFICO}

echo "Displaying /var/log/faillog" >>& ${SPECIFICO}

echo '***************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

if ( -f /var/log/faillog ) then

ls -al /var/log/faillog >>& ${SPECIFICO}

else

echo "No /var/log/faillog file found" >>& ${SPECIFICO}

endif

echo '' >>& ${SPECIFICO}

# Account Lockout Step 2

#

echo "Account Lockout Step 2" >>& ${SPECIFICO}

echo "Displaying login configuration files in /etc/pam.d" >>& ${SPECIFICO}

echo '**************************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

ls /etc/pam.d/gdm >>& ${SPECIFICO}

cat /etc/pam.d/gdm >>& ${SPECIFICO}

ls /etc/pam.d/ftp >>& ${SPECIFICO}

cat /etc/pam.d/ftp >>& ${SPECIFICO}

ls /etc/pam.d/login >>& ${SPECIFICO}

cat /etc/pam.d/login >>& ${SPECIFICO}

ls /etc/pam.d/rlogin >>& ${SPECIFICO}

cat /etc/pam.d/rlogin >>& ${SPECIFICO}

ls /etc/pam.d/sshd >>& ${SPECIFICO}

cat /etc/pam.d/sshd >>& ${SPECIFICO}

ls /etc/pam.d/system-auth >>& ${SPECIFICO}

cat /etc/pam.d/system-auth >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO} 

# Script shows user accounts on the system

# 

# Administration Roles Step 1

#

echo '<li><a href=specific.html#AdministrationRoles>Administration Roles</a>' >>& ${INDEXO}

echo '<a name=AdministrationRoles>' >>& ${SPECIFICO}

echo "Administration Roles Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#DisplayPasswdFile>/etc/passwd</a>' file in Section 2" >>& ${SPECIFICO}

echo '***********************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO} 

# Script checks for administrator remote login

# 

# Administrator Login Over the Network Step 1

#

echo "Administrator Login Over the Network Step 1" >>& ${SPECIFICO}

echo "Displaying /etc/security/access.conf" >>& ${SPECIFICO}

echo '************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

if ( -f /etc/security/access.conf ) then

cat /etc/security/access.conf >>& ${SPECIFICO}

else

echo "No /etc/security/access.conf file found" >>& ${SPECIFICO}

endif

echo '' >>& ${SPECIFICO}

# Administrator Login Over the Network Step 2

#

echo "Administrator Login Over the Network Step 2" >>& ${SPECIFICO}

echo "See '<a href=system.html#Group>/etc/group</a>' file in Section 2" >>& ${SPECIFICO}

echo '**********************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Administrator Login Over the Network Step 3

#

echo "Administrator Login Over the Network Step 3" >>& ${SPECIFICO}

echo "See '<a href=system.html#Secure>/var/log/secure</a>' file in Section 2" >>& ${SPECIFICO}

echo '***************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO} 

# Script checks for FTP service

# 

# Anonymous Login to FTP Step 1

#

echo '<li><a href=specific.html#AnonymousLoginFTP2>Anonymous Login to FTP</a>' >>& ${INDEXO}

echo '<a name=AnonymousLoginFTP2>' >>& ${SPECIFICO}

echo "Anonymous Login to FTP Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#ChkConfig>chkconfig --list</a>' in Section 2" >>& ${SPECIFICO}

echo '**********************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Anonymous Login to FTP Step 2

#

echo "Anonymous Login to FTP Step 2" >>& ${SPECIFICO}

echo "See '<a href=system.html#Vsftpd>vsftpd.ftpusers</a>' in Section 2" >>& ${SPECIFICO} 

echo '********************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Anonymous Login to FTP Step 2

#

echo "Anonymous Login to FTP Step 2" >>& ${SPECIFICO}

echo "See '<a href=system.html#Vsftpd>/ftpaccess</a>' in Section 2" >>& ${SPECIFICO}

echo '**************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Anonymous Login to FTP Step 2

#

echo "Anonymous Login to FTP Step 2" >>& ${SPECIFICO}

echo "See '<a href=system.html#Ftpusers>/ftpusers</a>' file in Section 2" >>& ${SPECIFICO} 

echo '*************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO} 

echo '' >>& ${SPECIFICO} 

# Script checks for scheduled cron jobs and backups

# 

# Auditing: Backup and Restore Step 2

#

echo '<li><a href=specific.html#AuditBackup2>Auditing: Backup and Restore</a>' >>& ${INDEXO}

echo '<a name=AuditBackup2>' >>& ${SPECIFICO}

echo "Auditing: Backup and Restore Step 2" >>& ${SPECIFICO}

echo "Displaying /etc/crontab" >>& ${SPECIFICO}

echo '***********************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

  cat /etc/crontab >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Auditing: Backup and Restore Step 3

#

echo "Auditing: Backup and Restore Step 3" >>& ${SPECIFICO}

echo "Displaying permissions of /var/spool/cron jobs" >>& ${SPECIFICO}

echo '**********************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

if ( -d /var/spool/cron ) then

ls -al /var/spool/cron >>& ${SPECIFICO}

else

echo "No /var/spool/cron directory found" >>& ${SPECIFICO}

endif

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Script checks permissions to the C compilers

# 

# C Compiler Step 1

#

echo '<li><a href=specific.html#CCompiler>C Compiler</a>' >>& ${INDEXO}

echo '<a name=CCompiler>' >>& ${SPECIFICO}

echo "C Compiler Step 1" >>& ${SPECIFICO}

echo "Displaying permissions of /usr/bin/gcc" >>& ${SPECIFICO}

echo '**************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

if ( -f /usr/bin/gcc ) then

ls -al /usr/bin/gcc >>& ${SPECIFICO}

else

echo "No /usr/bin/gcc file found" >>& ${SPECIFICO}

endif

echo '' >>& ${SPECIFICO}

# C Compiler Step 1

#

echo "C Compiler Step 1" >>& ${SPECIFICO}

echo "Displaying permissions of /usr/bin/cc" >>& ${SPECIFICO}

echo '*************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

if ( -f /usr/bin/cc ) then

ls -al /usr/bin/cc >>& ${SPECIFICO}

else

echo "No /usr/bin/cc" >>& ${SPECIFICO}

endif

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO} 

# Script checks log file for clock synchronization

# 

# Clock Synchronization Step 1

#

echo '<li><a href=specific.html#ClockSynchornization3>Clock Synchronization</a>' >>& ${INDEXO}

echo '<a name=ClockSynchornization3>' >>& ${SPECIFICO}

echo "Clock Synchronization Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#Messages>/var/log/messages</a>' file in Section 2" >>& ${SPECIFICO}

echo '*****************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO} 

# Displays account access

#

# Command Line Access Step 1

#

echo '<li><a href=specific.html#CommandLineAccess12>Command Line Access</a>' >>& ${INDEXO}

echo '<a name=CommandLineAccess2>' >>& ${SPECIFICO}

echo "Command Line Access Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#DisplayPasswdFile>/etc/passwd</a>' file in Section 2" >>& ${SPECIFICO}

echo '***********************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Command Line Access Step 2

#

echo "Command Line Access Step 2" >>& ${SPECIFICO}

echo "Displaying shell files for bash users" >>& ${SPECIFICO}

echo '*************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

  find /home \( -fstype nfs -prune \) -o \( -name .bash_profile -o -name .bashrc \) -print -exec ls -al {} \; -exec cat {} \; >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Command Line Access Step 3

#

echo "Command Line Access Step 3" >>& ${SPECIFICO}

echo "Displaying shell files for korn, shell, bourne, and trusted users" >>& ${SPECIFICO}

echo '*****************************************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

  find /home \( -fstype nfs -prune \) -o -name .profile -print -exec ls -al {} \; -exec cat {} \; >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Command Line Access Step 4

#

echo "Command Line Access Step 4" >>& ${SPECIFICO}

echo "Displaying shell files for c-shell users" >>& ${SPECIFICO}

echo '****************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

  find /home \( -fstype nfs -prune \) -o \( -name .cshrc -o -name .login -o -name .logout \) -print -exec ls -al {} \; -exec cat {} \; >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Command Line Access Step 5

#

echo "Command Line Access Step 5" >>& ${SPECIFICO} 

echo "See '<a href=system.html#Vsftpd>vsftpd.ftpusers</a>' in Section 2" >>& ${SPECIFICO} 

echo '********************************************' >>& ${SPECIFICO} 

echo '' >>& ${SPECIFICO} 

# Command Line Access Step 5 

# 

echo "Command Line Access Step 5" >>& ${SPECIFICO} 

echo "See '<a href=system.html#Vsftpd>/ftpaccess</a>' in Section 2" >>& ${SPECIFICO}

echo '**************************************' >>& ${SPECIFICO} 

echo '' >>& ${SPECIFICO} 

# Command Line Access Step 5 

# 

echo "Command Line Access Step 5" >>& ${SPECIFICO} 

echo "See '<a href=system.html#Ftpusers>/ftpusers</a>' file in Section 2" >>& ${SPECIFICO}

echo '*********************************' >>& ${SPECIFICO} 

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO} 

echo '' >>& ${SPECIFICO}

# Script checks for SUID, SGID, and world-writable file/directory information 

# 

# Configuration Checklist Step 1

#

echo '<li><a href=specific.html#ConfigCheck>Configuration Checklist</a>' >>& ${INDEXO}

echo '<a name=ConfigCheck>' >>& ${SPECIFICO}

echo "Configuration Checklist Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#SUID>SUID and SGID</a>' files in Section 2" >>& ${SPECIFICO}

echo '**************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Configuration Checklist Step 2

#

echo "Configuration Checklist Step 2" >>& ${SPECIFICO}

echo "See '<a href=system.html#WorldWriteableDirs>world writable directories</a>' in Section 2" >>& ${SPECIFICO}

echo '*********************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Configuration Checklist Step 2

#

echo "Configuration Checklist Step 2" >>& ${SPECIFICO}

echo "See '<a href=system.html#WorldWriteableFiles>world writable</a>' files in Section 2" >>& ${SPECIFICO}

echo '***************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Configuration Checklist Step 3

#

echo "Configuration Checklist Step 3" >>& ${SPECIFICO}

echo "<a href=system.html#Netstat>See 'netstat -a</a>' file in Section 2" >>& ${SPECIFICO}

echo '***********************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO} 

# Script displays file permissions and contents of /etc/hosts.equiv

#

# Control Trust Relationships Step 1

#

echo '<li><a href=specific.html#ControlTrustRelationships>Control Trust Relationships</a>' >>& ${INDEXO}

echo '<a name=ControlTrustRelationships>' >>& ${SPECIFICO}

echo "Control Trust Relationships Step 1" >>& ${SPECIFICO}

echo "Displaying permissions and contents of /etc/hosts.equiv" >>& ${SPECIFICO}

echo '**********************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

if ( -f /etc/hosts.equiv ) then 

ls -l /etc/hosts.equiv >>& ${SPECIFICO} 

cat /etc/hosts.equiv >>& ${SPECIFICO} 

else 

echo "No /etc/hosts.equiv file found" >>& ${SPECIFICO} 

endif 

echo '' >>& ${SPECIFICO} 

# Script finds all files with world writeable permissions

# 

# Data File Permissions Step 1

#

echo '<li><a href=specific.html#DataFile>Data File Permissions</a>' >>& ${INDEXO}

echo '<a name=DataFile>' >>& ${SPECIFICO}

echo "Data File Permissions Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#WorldWriteableFiles>world writable</a>' files in Section 2" >>& ${SPECIFICO}

echo '***************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Script displays password status for accounts and NIS/NIS+, if applicable

#

# Default Accounts Step 1

#

echo '<li><a href=specific.html#DefaultAccounts4>Default Accounts</a>' >>& ${INDEXO}

echo '<a name=DefaultAccounts4>' >>& ${SPECIFICO}

echo "Default Accounts Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#Shadow>/etc/shadow</a>' file in Section 2" >>& ${SPECIFICO}

echo '***********************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Default Accounts Step 2

#

echo "Default Accounts Step 2" >>& ${SPECIFICO}

echo "See '<a href=system.html#Ypcat>/usr/bin/ypcat passwd</a>' file in Section 2" >>& ${SPECIFICO}

echo '************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO} 

# Script displays system umask value and users utilizing other umask values

#

# Default Umask Value Step 1

#

echo '<li><a href=specific.html#DefaultUmaskValue5>Default Umask Value</a>' >>& ${INDEXO}

echo '<a name=DefaultUmaskValue5>' >>& ${SPECIFICO}

echo "Default Umask Value Step 1" >>& ${SPECIFICO}

echo "Displaying /etc/bashrc" >>& ${SPECIFICO}

echo '**********************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

if ( -f /etc/bashrc ) then

cat /etc/bashrc >>& ${SPECIFICO}

else

echo "No /etc/bashrc file found" >>& ${SPECIFICO}

endif

echo '' >>& ${SPECIFICO}

# Default Umask Value Step 1

#

echo "Default Umask Value Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#Profile>/etc/profile</a>' file in Section 2" >>& ${SPECIFICO}

echo '************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Default Umask Value Step 2

#

echo "Default Umask Value Step 2" >>& ${SPECIFICO}

echo "Displaying user login scripts that define umask" >>& ${SPECIFICO}

echo '***********************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

/bin/grep -r umask /home/*/.bashrc >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Script shows OS system and program info 

# 

# Denial of Service Attacks Step 1

#

echo '<li><a href=specific.html#DenialOfServiceAttacks4>Denial of Service Attacks</a>' >>& ${INDEXO}

echo '<a name=DenialOfServiceAttacksStep1>' >>& ${SPECIFICO}

echo "Denial of Service Attacks Step 1" >>& ${SPECIFICO}

echo "Displaying /sbin/sysctl -a" >>& ${SPECIFICO}

echo '**************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

  /sbin/sysctl -a >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Denial of Service Attacks Step 2

#

echo "Denial of Service Attacks Step 2" >>& ${SPECIFICO}

echo "Displaying /bin/rpm -qva" >>& ${SPECIFICO}

echo '************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

  /bin/rpm -qva >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Script displays file permissions of device files

#

# Device Permissions Step 1

#

echo '<li><a href=specific.html#DevicePermissions4>Device Permissions</a>' >>& ${INDEXO}

echo '<a name=DevicePermissions4>' >>& ${SPECIFICO}

echo "Device Permissions Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#PermissionsDev>file permissions of /dev</a>' in Section 2" >>& ${SPECIFICO}

echo '*******************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# # Device Permissions Step 2

#

echo "Device Permissions Step 2" >>& ${SPECIFICO} 

echo "See 'all device files' in Section 2" >>& ${SPECIFICO}

echo "See '<a href=system.html#DeviceFiles>all device files</a>' in Section 2" >>& ${SPECIFICO}

echo '***********************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Script displays mounted directories

#

# Directories Mounted with the 'nosuid' Option Step 1

#

echo '<li><a href=specific.html#NoSuid3>Directories Mounted with the 'nosuid' Option</a>' >>& ${INDEXO}

echo '<a name=NoSuid3>' >>& ${SPECIFICO}

echo "Directories Mounted with the 'nosuid' Option Step 1" >>& ${SPECIFICO}

echo "Displaying /bin/mount" >>& ${SPECIFICO}

echo '*********************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

  /bin/mount >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Script checks for and displays /etc/named.conf

# 

# DNS Secure Updates Step 1

#

echo '<li><a href=specific.html#DnsSecure>DNS Secure Updates</a>' >>& ${INDEXO}

echo '<a name=DnsSecure>' >>& ${SPECIFICO}

echo "DNS Secure Updates Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#NamedConf>/etc/named.conf</a>' file in Section 2"  >>& ${SPECIFICO}

echo '***************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Script displays configuration file to review for access to DNS zone transfers

#

#  DNS Zone Transfers Step 1

#

echo '<li><a href=specific.html#DnsZoneTransfers>DNS Zone Transfers</a>' >>& ${INDEXO}

echo '<a name=DnsZoneTransfers>' >>& ${SPECIFICO}

echo "DNS Zone Transfers Step 1"  >>& ${SPECIFICO}

echo "See '<a href=system.html#NamedConf>/etc/named.conf</a>' file in Section 2"  >>& ${SPECIFICO}

echo '****************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Displays /etc/shells file and /etc/passwd file to check for valid shells

#

# Domain-Wide NIS Access Step 1

#

echo '<li><a href=specific.html#DomainWideNISAccess>Domain-Wide NIS Access</a>' >>& ${INDEXO}

echo '<a name=DomainWideNISAccess>' >>& ${SPECIFICO}

echo "Domain-Wide NIS Access Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#Shells>/etc/shells</a>' file in Section 2" >>& ${SPECIFICO}

echo '***********************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Domain-Wide NIS Access Step 2

#

echo "Domain-Wide NIS Access Step 2" >>& ${SPECIFICO}

echo "See '<a href=system.html#DisplayPasswdFile>/etc/passwd</a>' file in Section 2" >>& ${SPECIFICO}

echo '******************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Displays '/usr/bin/ypcat passwd' file to review for domain wide root accounts

#

# Domain-Wide Root Account Step 1

#

echo '<li><a href=specific.html#RootAccount>Domain-Wide Root Account</a>' >>& ${INDEXO}

echo '<a name=RootAccount>' >>& ${SPECIFICO}

echo "Domain-wide Root Account Step 1">>& ${SPECIFICO}

echo "See '<a href=system.html#Ypcat>ypcat passwd</a>' file in Section 2" >>& ${SPECIFICO}

echo '************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Script checks last user logins for dormant accounts

# 

# Dormant Accounts Step 1

#

echo '<li><a href=specific.html#DormantAccounts2>Dormant Accounts</a>' >>& ${INDEXO}

echo '<a name=DormantAccounts2>' >>& ${SPECIFICO}

echo "Dormant Accounts Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#Last>/usr/bin/last</a>' file in Section 2" >>& ${SPECIFICO}

echo '*************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Dormant Accounts Step 1

#

echo "Dormant Accounts Step 1" >>& ${SPECIFICO}

echo "See previous '<a href=system.html#Last>/usr/bin/last</a>' files in Section 2" >>& ${SPECIFICO}

echo '***********************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Script checks filesystem information

# Encrypt File System Step 1

#

echo '<li><a href=specific.html#EncryptFile>Encrypt File System</a>' >>& ${INDEXO}

echo '<a name=EncryptFile>' >>& ${SPECIFICO}

echo "Encrypt File System Step 1" >>& ${SPECIFICO}

echo "Displaying /etc/fstab" >>& ${SPECIFICO}

echo '*********************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

  cat /etc/fstab >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Script shows event log statistics

# 

# Event Log Disk Space Step 1

#

echo '<li><a href=specific.html#EventLog2>Event Log Disk Space</a>' >>& ${INDEXO}

echo '<a name=EventLog2>' >>& ${SPECIFICO}

echo "Event Log Disk Space Step 1" >>& ${SPECIFICO}

echo "Displaying df -k" >>& ${SPECIFICO}

echo '****************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

  df -k >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Script checks for and displays /etc/exports

# 

# Exported File Permissions Step 1

#

echo '<li><a href=specific.html#ExportedFilePermissions2>Exported File Permissions</a>' >>& ${INDEXO}

echo '<a name=ExportedFilePermissions2>' >>& ${SPECIFICO}

echo "Exported File Permissions Step 1" >>& ${SPECIFICO}

echo "Displaying /etc/exports" >>& ${SPECIFICO}

echo '***********************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

if ( -f /etc/exports ) then

cat /etc/exports >>& ${SPECIFICO}

else

echo "No /etc/exports file found" >>& ${SPECIFICO}

endif

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Script shows file permissions

#

# File Permissions Step 1

#

echo '<li><a href=specific.html#FilePermissions3>File Permissions</a>' >>& ${INDEXO}

echo '<a name=FilePermissions3>' >>& ${SPECIFICO}

echo "File Permissions Step 1" >>& ${SPECIFICO}

echo "Displaying root path variable" >>& ${SPECIFICO}

echo '*****************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

  /bin/echo $PATH >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# File Permissions Step 2

#

echo "File Permissions Step 2" >>& ${SPECIFICO}

echo "See '<a href=system.html#WorldWriteableDirs>world writable directories</a>' in Section 2" >>& ${SPECIFICO}

echo '*********************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# File Permissions Step 4

#

echo "File Permissions Step 4" >>& ${SPECIFICO}

echo "See '<a href=system.html#WorldWriteableFiles>world writable and executable</a>' files in Section 2" >>& ${SPECIFICO}

echo '******************************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Script checks for FTP Logging

# FTP Logging Step 1

#

echo '<li><a href=specific.html#FtpLogging2>FTP Logging</a>' >>& ${INDEXO}

echo '<a name=FtpLogging2>' >>& ${SPECIFICO}

echo "FTP Logging Step 1" >>& ${SPECIFICO}

echo "See '/etc/vsftpd/vsftpd.conf' file in Section 2" >>& ${SPECIFICO}

echo '***********************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# FTP Logging Step 1

#

echo "FTP Logging Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#Vsftpd>/ftpaccess</a>' in Section 2" >>& ${SPECIFICO}

echo '**************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# FTP Logging Step 1

#

echo "FTP Logging Step 1" >>& ${SPECIFICO}

echo "Displaying /etc/xinetd.d/wu-ftpd" >>& ${SPECIFICO}

echo '********************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

cat /etc/xinetd.d/wu-ftpd >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO} 

echo '' >>& ${SPECIFICO}

# Displays different account information to check for generic accounts

#

# Generic Accounts Step 1

#

echo '<li><a href=specific.html#GenericAccounts>Generic Accounts</a>' >>& ${INDEXO}

echo '<a name=GenericAccounts>' >>& ${SPECIFICO}

echo "Generic Accounts Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#DisplayPasswdFile>/etc/passwd</a>' file in Section 2" >>& ${SPECIFICO}

echo '***********************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Generic Accounts Step 1

#

echo "Generic Accounts Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#Ypcat>ypcat passwd</a>' file in Section 2" >>& ${SPECIFICO}

echo '************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Generic Accounts Step 2

#

echo "Generic Accounts Step 2" >>& ${SPECIFICO}

echo "See '<a href=system.html#Rosts>.rhosts</a>' files in Section 2" >>& ${SPECIFICO}

echo '********************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Generic Accounts Step 3

#

echo "Generic Accounts Step 3" >>& ${SPECIFICO}

echo "See '<a href=system.html#Secure>/var/adm/secure</a>' file in Section 2" >>& ${SPECIFICO}

echo '**************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

  cat /var/adm/secure >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Displays /etc/group file to be reviewed for group membership

#

# Group Management Step 1

#

echo '<li><a href=specific.html#GroupManagement>Group Management</a>' >>& ${INDEXO}

echo '<a name=GroupManagement>' >>& ${SPECIFICO}

echo "Group Management Step 1"  >>& ${SPECIFICO}

echo "See '<a href=system.html#Group>/etc/group</a>' file in Section 2" >>& ${SPECIFICO}

echo '**********************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO} 

# Displays etc/group file to be reviewed for group membership

#

# Group Membership Step 1

#

echo '<li><a href=specific.html#GroupMembership>Group Membership</a>' >>& ${INDEXO}

echo '<a name=GroupMembership>' >>& ${SPECIFICO}

echo "Group Membership Step 1"  >>& ${SPECIFICO}

echo "See '<a href=system.html#passwd>/etc/passwd</a>' file in Section 2" >>& ${SPECIFICO}

echo '**********************************' >>& ${SPECIFICO}

echo "Group Membership Step 2"  >>& ${SPECIFICO}

echo "See '<a href=system.html#Group>/etc/group</a>' file in Section 2" >>& ${SPECIFICO}

echo '**********************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Displays session and timeout information

#

# Idle Session Timeout Step 1

#

echo '<li><a href=specific.html#IdleSession2>Idle Session Timeout</a>' >>& ${INDEXO}

echo '<a name=IdleSession2>' >>& ${SPECIFICO}

echo "Idle Session Timeout Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#DisplayPasswdFile>/etc/passwd</a>' file in Section 2" >>& ${SPECIFICO}

echo '***********************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Idle Session Timeout Step 2

#

echo "Idle Session Timeout Step 2" >>& ${SPECIFICO}

echo "See '<a href=system.html#Profile>/etc/profile</a>' file in Section 2" >>& ${SPECIFICO}

echo '*******************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Idle Session Timeout Step 3

#

echo "Idle Session Timeout Step 3" >>& ${SPECIFICO}

echo "Displaying user login scripts that utilize an alternative timeout" >>& ${SPECIFICO}

echo '*****************************************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

/bin/grep -r TMOUT /home/ >>& ${SPECIFICO}

/bin/grep -r TIMEOUT /home/ >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Displays sendmail configuration info

#

# Insecure Sendmail Options Step 1

#

echo '<li><a href=specific.html#InsecureMail>Insecure Sendmail Options</a>' >>& ${INDEXO}

echo '<a name=InsecureMail>' >>& ${SPECIFICO}

echo "Insecure Sendmail Options Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#SendmailConf>/etc/mail/sendmail.cf</a>' file in Section 2" >>& ${SPECIFICO}

echo '*********************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SYSTEMO}

echo '' >>& ${SYSTEMO}

# Script shows user account information

# 

# Issuance of User IDs Step 1

#

echo '<li><a href=specific.html#IssuanceUserIds4>Issuance of User IDs</a>' >>& ${INDEXO}

echo '<a name=IssuanceUserIds4>' >>& ${SPECIFICO}

echo "Issuance of User IDs Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#LoginDefs>/etc/login.defs</a>' file in Section 2" >>& ${SPECIFICO}

echo '***************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Issuance of User IDs Step 2

#

echo "Issuance of User IDs Steps 2" >>& ${SPECIFICO}

echo "See '<a href=system.html#Shadow>/etc/shadow</a>' file in Section 2" >>& ${SPECIFICO}

echo '***********************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Issuance of User IDs Step 3

#

echo "Issuance of User IDs Step 3" >>& ${SPECIFICO}

echo "Displaying '<a href=system.html#DisplayPasswdFile>/etc/passwd</a>' file in Section 2" >>& ${SPECIFICO}

echo '***********************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Script shows welcome banner configurations

# 

# Legal Caption Step 1

#

echo '<li><a href=specific.html#LegalCaption3>Legal Caption</a>' >>& ${INDEXO}

echo '<a name=LegalCaption3>' >>& ${SPECIFICO}

echo "Legal Caption Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#ChkConfig>/sbin/chkconfig --list</a>' file in Section 2" >>& ${SPECIFICO}

echo '**********************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Legal Caption Step 2

#

echo "Legal Caption Step 2" >>& ${SPECIFICO}

echo "Displaying /etc/issue.net" >>& ${SPECIFICO}

echo '*************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

  cat /etc/issue.net >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Legal Caption Step 4

#

echo "Legal Caption Step 4" >>& ${SPECIFICO}

echo "Displaying /etc/issue" >>& ${SPECIFICO}

echo '*********************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

  cat /etc/issue >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Legal Caption Step 5

#

echo "Legal Caption Step 5" >>& ${SPECIFICO}

echo "Displaying /etc/motd" >>& ${SPECIFICO}

echo '********************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

  cat /etc/motd >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Script displays log file information and configuration to verify logging events

#

# Log Security Events Step 1

#

echo '<li><a href=specific.html#LogSecurityEvents4>Log Security Events</a>' >>& ${INDEXO}

echo '<a name=LogSecurityEvents4>' >>& ${SPECIFICO}

echo "Log Security Events Step 1"  >>& ${SPECIFICO}

echo "See '<a href=system.html#Syslog>/etc/syslog.conf</a>' file in Section 2" >>& ${SPECIFICO}

echo '****************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Log Security Events Step 3

#

echo "Log Security Events Step 3"  >>& ${SPECIFICO}

echo "See '<a href=system.html#Secure>/var/log/secure</a>' file in Section 2" >>& ${SPECIFICO}

echo '***************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Log Security Events Step 3

#

echo "Log Security Events Step 3"  >>& ${SPECIFICO}

echo "See '<a href=system.html#Messages>/var/log/messages</a>' file in Section 2" >>& ${SPECIFICO}

echo '*****************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Log Security Events Step 3

#

echo "Log Security Events Step 3"  >>& ${SPECIFICO}

echo "Displaying /usr/bin/lastlog" >>& ${SPECIFICO}

echo '***************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

/usr/bin/lastlog >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Log Security Events Step 4

#

echo "Log Security Events Step 4"  >>& ${SPECIFICO}

echo "Displaying /usr/bin/w" >>& ${SPECIFICO}

echo '*********************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

/usr/bin/w >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo "Displaying /usr/bin/who" >>& ${SPECIFICO}

echo '***********************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

/usr/bin/who >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo "Displaying /usr/bin/finger" >>& ${SPECIFICO}

echo '**************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

/usr/bin/finger >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo "Displaying /usr/bin/rwho" >>& ${SPECIFICO}

echo '************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

/usr/bin/rwho >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo "Displaying /usr/bin/users" >>& ${SPECIFICO}

echo '*************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

/usr/bin/users >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Log Security Events Step 5

#

echo "Log Security Events Step 5"  >>& ${SPECIFICO}

echo "See '<a href=system.html#Last>/usr/bin/last</a>' file in Section 2" >>& ${SPECIFICO}

echo '*************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Script displays memory dump setting

#

# Memory Dump Files Step 1

#

echo '<li><a href=specific.html#MemoryDumps3>Memory Dump Files</a>' >>& ${INDEXO}

echo '<a name=MemoryDumps3>' >>& ${SPECIFICO}

echo "Memory Dump Files Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#Profile>/etc/profile</a>' file in Section 2" >>& ${SPECIFICO}

echo '************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Script finds all .netrc files 

# 

# .netrc Files Step 1

#

echo '<a name=Netrc>' >>& ${SPECIFICO}

echo ".netrc Files Step 1" >>& ${SPECIFICO}

echo "See '.netrc' files in Section 2" >>& ${SPECIFICO}

echo '*******************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Script shows OS system and program info 

# 

# Network Device Configuration Step 1

#

echo '<li><a href=specific.html#NetworkDevice>Network Device Configuration</a>' >>& ${INDEXO}

echo '<a name=NetworkDevice>' >>& ${SPECIFICO}

echo "Network Device Configuration Step 1" >>& ${SPECIFICO}

echo "Displaying /bin/rpm -qva" >>& ${SPECIFICO}

echo '************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

  /bin/rpm -qva >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Network Device Configuration Step 2

#

echo "Network Device Configuration Step 2" >>& ${SPECIFICO}

echo "Displaying /sbin/sysctl -a" >>& ${SPECIFICO}

echo '**************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

  /sbin/sysctl -a >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Displays 'ifconfig -a' to check for a promiscuous mode NIC 

#

# Network Interface Card and Promiscuous Mode Step 1

#

echo '<li><a href=specific.html#Promiscuous>Network Interface Card and Promiscuous Mode</a>' >>& ${INDEXO}

echo '<a name=Promiscuous>' >>& ${SPECIFICO}

echo "Network Interface Card and Promiscuous Mode Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#Ifconfig>ifconfig -a</a>' file in Section 2" >>& ${SPECIFICO}

echo '***********************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Script shows executable file permissions and group membership

# 

# Network Interface Packet Sniffing Step 1

#

echo '<li><a href=specific.html#NetworkInterface>Network Interface Packet Sniffing</a>' >>& ${INDEXO}

echo '<a name=NetworkInterface>' >>& ${SPECIFICO}

echo "Network Interface Packet Sniffing Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#ExecutableFiles>executable</a>' files in Section 2" >>& ${SPECIFICO}

echo '***********************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Network Interface Packet Sniffing Step 3

#

echo "Network Interface Packet Sniffing Step 3" >>& ${SPECIFICO}

echo "See '<a href=system.html#Group>/etc/group</a>' file in Section 2" >>& ${SPECIFICO}

echo '**********************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Displays existence of '.hushlogin' files

#

# Notification of Last Login Step 1

#

echo '<li><a href=specific.html#LastLogin>Notification of Last Login</a>' >>& ${INDEXO}

echo '<a name=LastLogin>' >>& ${SPECIFICO}

echo "Notification of Last Login Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#Hush>hushlogin</a>' files in Section 2" >>& ${SPECIFICO}

echo '************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Script checks packages installed on system

# Package Selection Step 1

#

echo '<li><a href=specific.html#PackageSelect>Package Selection</a>' >>& ${INDEXO}

echo '<a name=PackageSelect>' >>& ${SPECIFICO}

echo "Package Selection Step 1" >>& ${SPECIFICO}

echo "Displaying /bin/rpm -qa" >>& ${SPECIFICO}

echo '************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

  /bin/rpm -qa >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Script shows user account information

# 

# Password Composition Step 1

#

echo '<li><a href=specific.html#PasswordComposition4>Password Composition</a>' >>& ${INDEXO}

echo '<a name=PasswordComposition4>' >>& ${SPECIFICO}

echo "Password Composition Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#LoginDefs>/etc/login.defs</a>' file in Section 2" >>& ${SPECIFICO}

echo '***************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Password Composition Step 2

#

echo "Password Composition Step 2" >>& ${SPECIFICO}

echo "See '<a href=system.html#PamdSys>/etc/pam.d/system-auth' file in Section 2" >>& ${SPECIFICO}

echo '*********************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Script shows user account information

# 

# Password Expiration Step 1

#

echo '<li><a href=specific.html#PasswordExpiration5>Password Expiration</a>' >>& ${INDEXO}

echo '<a name=PasswordExpiration5>' >>& ${SPECIFICO}

echo "Password Expiration Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#LoginDefs>/etc/login.defs</a>' file in Section 2" >>& ${SPECIFICO}

echo '***************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Script shows user account information

# 

# Password History Step 2

#

echo '<li><a href=specific.html#PasswordHistory4>Password History</a>' >>& ${INDEXO} 

echo '<a name=PasswordHistory4>' >>& ${SPECIFICO} 

echo "Password History Step 2" >>& ${SPECIFICO}

echo "See '<a href=system.html#PamdSys>/etc/pam.d/system-auth</a>' file in Section 2" >>& ${SPECIFICO}

echo '*********************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Password History Step 3

#

echo "Password History Step 3" >>& ${SPECIFICO}

echo "Displaying permissions of /etc/security/opasswd" >>& ${SPECIFICO}

echo '***********************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

if ( -f /etc/security/opasswd ) then

ls -al /etc/security/opasswd >>& ${SPECIFICO}

else

echo "No /etc/security/opasswd file found" >>& ${SPECIFICO}

endif

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Script checks if /etc/passwd and /etc/shadow exist and their contents

# 

# Password Storage Step 1

#

echo '<li><a href=specific.html#PasswordStorage3>Password Storage</a>' >>& ${INDEXO}

echo '<a name=PasswordStorage3>' >>& ${SPECIFICO}

echo "Password Storage Step 1" >>& ${SPECIFICO}

echo "Displaying permissions /etc/passwd" >>& ${SPECIFICO}

echo '**********************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

if ( -f /etc/passwd ) then

ls -al /etc/passwd >>& ${SPECIFICO}

else

echo "No /etc/passwd file found" >>& ${SPECIFICO}

endif

echo '' >>& ${SPECIFICO}

# Password Storage Step 1

#

echo "Password Storage Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#DisplayPasswdFile>/etc/passwd</a>' file in Section 2" >>& ${SPECIFICO}

echo '***********************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Password Storage Step 2

#

echo "Password Storage Step 2" >>& ${SPECIFICO}

echo "Displaying permissions /etc/shadow" >>& ${SPECIFICO}

echo '**********************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

if ( -f /etc/shadow ) then

ls -al /etc/shadow >>& ${SPECIFICO}

else

echo "No /etc/shadow file found" >>& ${SPECIFICO}

endif

echo '' >>& ${SPECIFICO}

# Password Storage Step 2

#

echo "Password Storage Step 2" >>& ${SPECIFICO}

echo "See '<a href=system.html#Shadow>/etc/shadow</a>' file in Section 2" >>& ${SPECIFICO}

echo '***********************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Displays user and group account information

#

# Powerful Group Membership Step 1

#

echo '<li><a href=specific.html#PowerfulGroupMembership>Powerful Group Membership</a>' >>& ${INDEXO}

echo '<a name=PowerfulGroupMembership>' >>& ${SPECIFICO}

echo "Powerful Group Membership Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#DisplayPasswdFile>/etc/passwd</a>' file in Section 2" >>& ${SPECIFICO}

echo '***********************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Powerful Group Membership Step 1

#

echo "Powerful Group Membership Step 1"  >>& ${SPECIFICO}

echo "See '<a href=system.html#Group>/etc/group</a>' file in Section 2" >>& ${SPECIFICO}

echo '**********************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Script shows permissions for printer spool directories

#

# Print Spool Directories Step 1

#

echo '<li><a href=specific.html#PrintSpool5>Print Spool Directories</a>' >>& ${INDEXO}

echo '<a name=PrintSpool5>' >>& ${SPECIFICO}

echo "Print Spool Directories Step 1" >>& ${SPECIFICO}

echo "Displaying permissions of /var/spool" >>& ${SPECIFICO}

echo '************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

  /bin/ls -l /var/spool >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Script displays root account information

#

# Privileged Accounts / Root Login at Console Step 1

#

echo '<li><a href=specific.html#RootLogin4>Privileged Accounts / Root Login at Console</a>' >>& ${INDEXO}

echo '<a name=RootLogin4>' >>& ${SPECIFICO}

echo "Privileged Accounts / Root Login at Console Step 1" >>& ${SPECIFICO}

echo "Displaying /etc/security/access.conf" >>& ${SPECIFICO}

echo '************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

  cat /etc/security/access.conf >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Privileged Accounts / Root Login at Console Step 2

#

echo "Privileged Accounts / Root Login at Console Step 2" >>& ${SPECIFICO}

echo "See '<a href=system.html#Group>/etc/group</a>' file in Section 2" >>& ${SPECIFICO}

echo '**********************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Privileged Accounts / Root Login at Console Step 3

#

echo "Privileged Accounts / Root Login at Console Step 3" >>& ${SPECIFICO}

echo "See '<a href=system.html#Secure>/var/log/secure</a>' file in Section 2" >>& ${SPECIFICO}

echo '***************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO} 

# Script displays account information

#

# Privileged Accounts Step 1

#

echo '<li><a href=specific.html#PrivilegedAccounts3>Privileged Accounts</a>' >>& ${INDEXO}

echo '<a name=PrivilegedAccounts3>' >>& ${SPECIFICO}

echo "Privleged Accounts Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#FindPasswdFile>/etc/passwd</a>' file in Section 2" >>& ${SPECIFICO}

echo '***********************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Privileged Accounts Step 2

#

echo "Privileged Accounts Step 2" >>& ${SPECIFICO}

echo "See '<a href=system.html#Group>/etc/group</a>' file in Section 2" >>& ${SPECIFICO}

echo '**********************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Script shows executable file permissions and group membership

# 

# Program File Permissions Step 1

#

echo '<li><a href=specific.html#ProgFilePermissions2>Program File Permissions</a>' >>& ${INDEXO}

echo '<a name=ProgFilePermissions2>' >>& ${SPECIFICO}

echo "Program File Permissions Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#ExecutableFiles>executable</a>' files in Section 2" >>& ${SPECIFICO}

echo '***********************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Program File Permissions Step 3

#

echo "Program File Permissions Step 3" >>& ${SPECIFICO}

echo "See '<a href=system.html#Group>/etc/group</a>' file in Section 2" >>& ${SPECIFICO}

echo '**********************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Script checks for unencrypted services 

# 

# Protection of Authentication Data Step 1

#

echo '<li><a href=specific.html#ProtectData2>Protection of Authentication Data</a>' >>& ${INDEXO}

echo '<a name=ProtectData2>' >>& ${SPECIFICO}

echo "Protection of Authentication Data Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#ChkConfig>/sbin/chkconfig --list</a>' in Section 2" >>& ${SPECIFICO}

echo '**********************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Protection of Authentication Data Step 2

#

echo "Protection of Authentication Data Step 2" >>& ${SPECIFICO}

echo "<a href=system.html#Netstat>See 'netstat -a</a>' file in Section 2" >>& ${SPECIFICO}

echo '**********************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Script checks for remote trusted r-services

# 

# Remote Trusted r- Services Step 1

#

echo '<li><a href=specific.html#RServices3>Remote Trusted r- Services</a>' >>& ${INDEXO}

echo '<a name=RServices3>' >>& ${SPECIFICO}

echo "Remote Trusted r- Services Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#ChkConfig>/sbin/chkconfig --list</a>' in Section 2" >>& ${SPECIFICO}

echo '**********************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Script checks for scheduled cron jobs and backups

# 

# Review Audit Log Step 1

#

echo '<li><a href=specific.html#ReviewLog>Review Audit Log</a>' >>& ${INDEXO}

echo '<a name=ReviewLog>' >>& ${SPECIFICO}

echo "Review Audit Log Step 1" >>& ${SPECIFICO}

echo "Displaying ps -axu | grep syslogd" >>& ${SPECIFICO}

echo '*********************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

  ps -axu | grep syslogd >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Review Audit Log Step 2

#

echo "Review Audit Log Step 2" >>& ${SPECIFICO}

echo "Displaying permissions of /var/log" >>& ${SPECIFICO}

echo '**********************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

if ( -f /var/log ) then

ls -al /var/log >>& ${SPECIFICO}

else

echo "No /var/log vile found found" >>& ${SPECIFICO}

endif

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Script shows user account information

# 

# Root Access Step 1

#

echo '<li><a href=specific.html#RootAcess2>Root Access</a>' >>& ${INDEXO}

echo '<a name=RootAccess2>' >>& ${SPECIFICO}

echo "Root Access Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#DisplayPasswdFile>/etc/passwd</a>' file in Section 2" >>& ${SPECIFICO}

echo '***********************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Root Access Step 1

#

echo "Root Access Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#Secure>/var/log/secure</a>' in Section 2" >>& ${SPECIFICO}

echo '***************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Script checks for root FTP access

# Root Login to FTP Step 1

#

echo '<li><a href=specific.html#RootFtp2>Root Login to FTP</a>' >>& ${INDEXO}

echo '<a name=RootFtp2>' >>& ${SPECIFICO}

echo "Root Login to FTP Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#VsftpdConf>/etc/vsftpd/vsftpd.conf' in Section 2" >>& ${SPECIFICO}

echo '***********************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Root Login to FTP Step 2

#

echo "Root Login to FTP Step 2" >>& ${SPECIFICO}

echo "Displaying /etc/vsftpd.user_list" >>& ${SPECIFICO}

echo '********************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

if ( -f /etc/vsftpd.user_list ) then

cat /etc/vsftpd.user_list >>& ${SPECIFICO}

else

echo "No /etc/vsftpd.user_list file found" >>& ${SPECIFICO}

endif

echo '' >>& ${SPECIFICO}

# Root Login to FTP Step 1

#

echo "Root Login to FTP Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#Vsftpd>/ftpaccess</a>' in Section 2" >>& ${SPECIFICO}

echo '**************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Script shows SSH login information

# 

# Root Login to SSH Step 1

#

echo '<li><a href=specific.html#RootSsh>Root Login to SSH Step 1</a>' >>& ${INDEXO}

echo '<a name=RootSsh>' >>& ${SPECIFICO}

echo "Root Login to SSH Step 1" >>& ${SPECIFICO}

echo "Displaying /etc/ssh/sshd_config | grep PermitRootLogin" >>& ${SPECIFICO}

echo '**************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

  cat /etc/ssh/sshd_config | grep PermitRootLogin >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Script shows telnet root login information

# 

# Root Login to Telnet Step 1

#

echo '<li><a href=specific.html#RootTelnet>Root Login to Telnet</a>' >>& ${INDEXO}

echo '<a name=RootTelnet>' >>& ${SPECIFICO}

echo "Root Login to Telnet Step 1" >>& ${SPECIFICO}

echo "Displaying /etc/securetty" >>& ${SPECIFICO}

echo '*************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

  cat /etc/securetty >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Script shows root startup permissions

# 

# Root Startup File Permissions Step 1

#

echo '<li><a href=specific.html#RootStartup3>Root Startup File Permissions</a>' >>& ${INDEXO}

echo '<a name=RootStartup3>' >>& ${SPECIFICO}

echo "Root Startup File Permissions Step 1" >>& ${SPECIFICO}

echo "Displaying permissions of /root/.*" >>& ${SPECIFICO}

echo '**********************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

  ls -al /root/.* >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Root Startup File Permissions Step 2

#

echo "Root Startup File Permissions Step 2" >>& ${SPECIFICO}

echo "See '<a href=system.html#DisplayPasswdFile>/etc/passwd</a>' file in Section 2" >>& ${SPECIFICO}

echo '***********************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Script shows root user path variable information

# 

# Root User Path Variable Step 1

#

echo '<li><a href=specific.html#RootPath3>Root User Path Variable</a>' >>& ${INDEXO}

echo '<a name=RootPath3>' >>& ${SPECIFICO}

echo "Root User Path Variable Step 1" >>& ${SPECIFICO}

echo "Displaying root path variable" >>& ${SPECIFICO}

echo '*****************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

  /bin/echo $PATH >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Displays /usr/bin/rpcinfo file to check for RPC network services

#

# RPC Services Step 1

#

echo '<li><a href=specific.html#Rpc>RPC Services</a>' >>& ${INDEXO}

echo '<a name=Rpc>' >>& ${SPECIFICO}

echo "RPC Services Step 1" >>& ${SPECIFICO}

echo "Displaying /usr/bin/rpcinfo" >>& ${SPECIFICO}

echo '***************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

            rpcinfo -p localhost >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Displays BIND status

#

# Run BIND With Non-Root Privlege Step 1

#

echo '<li><a href=specific.html#RunBind>Run BIND With Non-Root Privlege</a>' >>& ${INDEXO}

echo '<a name=RunBind>' >>& ${SPECIFICO}

echo "Run BIND With Non-root Privlege Step 1" >>& ${SPECIFICO}

echo "Displaying ps -ef | grep named" >>& ${SPECIFICO}

echo '******************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

ps -ef | grep named >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Script shows printer access and permissions

#

# Securing Printing Step 1

#

echo '<li><a href=specific.html#SecurePrint2>Securing Printing</a>' >>& ${INDEXO}

echo '<a name=SecurePrint2>' >>& ${SPECIFICO}

echo "Securing Printing Step 1" >>& ${SPECIFICO}

echo "Displaying permissions and contents of /etc/hosts.equiv" >>& ${SPECIFICO}

echo '*******************************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

if ( -f /etc/hosts.equiv ) then

ls -l /etc/hosts.equiv >>& ${SPECIFICO}

cat /etc/hosts.equiv >>& ${SPECIFICO}

else

echo "No /etc/hosts.equiv file found" >>& ${SPECIFICO}

endif

echo '' >>& ${SPECIFICO}

# Securing Printing Step 1

#

echo "Securing Printing Step 1" >>& ${SPECIFICO}

echo "Displaying permissions and contents of /etc/hosts.lpd" >>& ${SPECIFICO}

echo '*****************************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

if ( -f /etc/hosts.lpd ) then

ls -l /etc/hosts.lpd >>& ${SPECIFICO}

cat /etc/hosts.lpd >>& ${SPECIFICO}

else

echo "No /etc/hosts.lpd file found" >>& ${SPECIFICO}

endif

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Displays permissions of sendmail.cf file

#

# Security of Sendmail.cf File Step 1

#

echo '<li><a href=specific.html#SendmailCf>Security of Sendmail.cf File</a>' >>& ${INDEXO}

echo '<a name=SendmailCf>' >>& ${SPECIFICO}

echo "Security of Sendmail.cf File Step 1" >>& ${SPECIFICO}

echo "Displaying permissions of /etc/mail/sendmail.cf" >>& ${SPECIFICO}

echo '***********************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

  ls -la /etc/mail/sendmail.cf >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Displays /etc/mail/sendmail.cf to check for trusted clients

#

# Sendmail Trusted Clients Step 1

#

echo '<li><a href=specific.html#SendmailTrusted>Sendmail Trusted Clients</a>' >>& ${INDEXO}

echo '<a name=SendmailTrusted>' >>& ${SPECIFICO}

echo "Sendmail Trusted Clients Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#SendmailCf>/etc/mail/sendmail.cf</a>' file in Section 2" >>& ${SPECIFICO}

echo '*********************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO} 

# Script shows finger information

# 

# Service Information Step 1

#

echo '<li><a href=specific.html#ServiceInformation3>Service Information</a>' >>& ${INDEXO}

echo '<a name=ServiceInformation3>' >>& ${SPECIFICO}

echo "Service Information Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#ChkConfig>/sbin/chkconfig --list</a>' in Section 2" >>& ${SPECIFICO}

echo '**********************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Service Information Step 2

#

echo "Service Information Step 2" >>& ${SPECIFICO}

echo "Displaying /etc/xinetd.d/finger" >>& ${SPECIFICO}

echo '*******************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

  cat /etc/xinetd.d/finger >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Script shows single command account information

# 

# Single Command Accounts Step 1

#

echo '<li><a href=specific.html#SingleCommandAccounts3>Single Command Accounts</a>' >>& ${INDEXO}

echo '<a name=SingleCommandAccounts3>' >>& ${SPECIFICO}

echo "Single Command Accounts Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#DisplayPasswdFile>/etc/passwd</a>' file in Section 2" >>& ${SPECIFICO}

echo '***********************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Single Command Accounts Step 2

#

echo "Single Command Accounts Step 2" >>& ${SPECIFICO}

echo "See '<a href=system.html#Shadow>/etc/shadow</a>' file in Section 2" >>& ${SPECIFICO}

echo '***********************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Script shows system boot loader password

# 

# System Boot Loader Password Step 1

#

echo '<li><a href=specific.html#SysBoot>System Boot Loader Password</a>' >>& ${INDEXO}

echo '<a name=SysBoot>' >>& ${SPECIFICO}

echo "System Boot Loader Password Step 1" >>& ${SPECIFICO}

echo "Displaying /etc/lilo.conf | grep password" >>& ${SPECIFICO}

echo '*****************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

if ( -f /etc/lilo.conf ) then

cat /etc/lilo.conf | grep password >>& ${SPECIFICO}

else

echo "No /etc/lilo.conf file found" >>& ${SPECIFICO}

endif

echo '' >>& ${SPECIFICO}

# System Boot Loader Password Step 1

#

echo "System Boot Loader Password Step 1" >>& ${SPECIFICO}

echo "Displaying /etc/grub.conf | grep password" >>& ${SPECIFICO}

echo '*****************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

if ( -f /etc/grub.conf ) then

cat /etc/grub.conf | grep password >>& ${SPECIFICO}

else

echo "No /etc/grub.conf file found" >>& ${SPECIFICO}

endif

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Script shows user account information

# 

# Temporary and Contractor Type Accounts Step 1

#

echo '<li><a href=specific.html#TempContract4>Temporary and Contractor Type Accounts</a>' >>& ${INDEXO} 

echo '<a name=TempContract4>' >>& ${SPECIFICO}

echo "Temporary and Contractor Type Accounts Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#Shadow>/etc/shadow</a>' file in Section 2" >>& ${SPECIFICO}

echo '***********************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Displays /etc/passwd file

#

# Unique User IDs Step 1

#

echo '<li><a href=specific.html#UniqueUserIds>Unique User IDs</a>' >>& ${INDEXO}

echo '<a name=UniqueUserIds>' >>& ${SPECIFICO}

echo "Unique User IDs Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#DisplayPasswdFile>/etc/passwd</a>' file in Section 2" >>& ${SPECIFICO}

echo '***********************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO} 

# Script displays configurations of local and network services

#

# Unnecessary Services Step 1

#

echo '<li><a href=specific.html#UnecessaryServices4>Unecessary Services</a>' >>& ${INDEXO}

echo '<a name=UnecessaryServices4>' >>& ${SPECIFICO}

echo "Unnecessary Services Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#ChkConfig>/sbin/chkconfig --list</a>' in Section 2" >>& ${SPECIFICO}

echo '**********************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Unnecessary Services Step 1

#

echo "Unnecessary Services Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#Netstat>netstat -a</a>' file in Section 2" >>& ${SPECIFICO}

echo '**********************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Unnecessary Services Step 1

#

echo "Unnecessary Services Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#Ifconfig>ifconfig -a</a>' file in Section 2" >>& ${SPECIFICO}

echo '***********************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO} 

# Script shows permissions and contents of at.deny and at.allow, if they exist

#

# Use of AT and BATCH Commands Step 1

#

echo '<li><a href=specific.html#AtBatch4>Use of AT and BATCH Commands</a>' >>& ${INDEXO}

echo '<a name=AtBatch4>' >>& ${SPECIFICO}

echo "Use of AT and BATCH Commands Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#ChkConfig>/sbin/chkconfig --list</a>' in Section 2" >>& ${SPECIFICO}

echo '**********************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Use of AT and BATCH Commands Step 2

#

echo "Use of AT and BATCH Commands Step 2"  >>& ${SPECIFICO}

echo "Displaying permissions of /etc/at.deny" >>& ${SPECIFICO}

echo '**************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

if ( -f /etc/at.deny ) then

/bin/ls -al /etc/at.deny >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo "Use of AT and BATCH Commands Step 2"  >>& ${SPECIFICO}

echo "Displaying /etc/at.deny" >>& ${SPECIFICO}

echo '***********************' >>& ${SPECIFICO}

/bin/cat /etc/at.deny >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

else

echo "No /etc/at.deny file found" >>& ${SPECIFICO}

endif

echo '' >>& ${SPECIFICO}

# Use of AT and BATCH Commands Step 2

#

echo "Use of AT and BATCH Commands Step 2"  >>& ${SPECIFICO}

echo "Displaying permissions of /etc/at.allow" >>& ${SPECIFICO}

echo '***************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

if ( -f /etc/at.allow ) then

/bin/ls -al /etc/at.allow >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo "Use of AT and BATCH Commands Step 1"  >>& ${SPECIFICO}

echo "Displaying /etc/at.allow" >>& ${SPECIFICO}

echo '*********************************' >>& ${SPECIFICO}

/bin/cat /etc/at.allow >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

else

echo "No /etc/at.allow file found" >>& ${SPECIFICO}

endif

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Script shows Crontab command usage

#

# Use of CRONTAB Command Step 1

#

echo '<li><a href=specific.html#Crontab3>Use of CRONTAB Command</a>' >>& ${INDEXO}

echo '<a name=Crontab3>' >>& ${SPECIFICO}

echo "Use of CRONTAB Command Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#ChkConfig>/sbin/chkconfig --list</a>' in Section 2" >>& ${SPECIFICO}

echo '**********************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Use of CRONTAB Command Step 2

#

echo "Use of CRONTAB Command Step 2"  >>& ${SPECIFICO}

echo "Displaying permissions of /etc/cron*" >>& ${SPECIFICO}

echo '*************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

/bin/ls -al /etc/cron* >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Use of CRONTAB Command Step 2

#

echo "Use of CRONTAB Command Step 2"  >>& ${SPECIFICO}

echo "Displaying permissions of /var/spool/cron*" >>& ${SPECIFICO}

echo '*******************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

/bin/ls -al /var/spool/cron* >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Script displays configuration of sendmail

#

# Use of Sendmail Step 1

#

echo '<li><a href=specific.html#UseOfSendmail4>Use of Sendmail</a>' >>& ${INDEXO}

echo '<a name=UseOfSendmail4>' >>& ${SPECIFICO}

echo "Use of Sendmail Step 1" >>& ${SPECIFICO}

echo "Displaying /sbin/service sendmail status" >>& ${SPECIFICO}

echo '****************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

  /sbin/service sendmail status >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Use of Sendmail Step 1

#

echo "Use of Sendmail Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#ChkConfig>/sbin/chkconfig --list</a>' in Section 2" >>& ${SPECIFICO}

echo '**********************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Script displays configuration of SNMP

#

# Use of SNMP Step 1

#

echo '<li><a href=specific.html#UseOfSnmp2>Use of SNMP</a>' >>& ${INDEXO}

echo '<a name=UseOfSnmp2>' >>& ${SPECIFICO}

echo "Use of SNMP Step 1" >>& ${SPECIFICO}

echo "Displaying /sbin/service snmpd status" >>& ${SPECIFICO}

echo '*************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

  /sbin/service snmpd status >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Use of SNMP Step 1

#

echo "Use of SNMP Step 1" >>& ${SPECIFICO}

echo "Displaying /sbin/service snmptrapd status" >>& ${SPECIFICO}

echo '*****************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

  /sbin/service snmptrapd status >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Use of SNMP Step 1

#

echo "Use of SNMP Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#ChkConfig>/sbin/chkconfig --list</a>' in Section 2" >>& ${SPECIFICO}

echo '**********************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Script shows world writeable directories

#

# Use of  Sticky Bit Step 1

#

echo '<li><a href=specific.html#UseOfSticky>Use of  Sticky Bit</a>' >>& ${INDEXO}

echo '<a name=UseOfSticky>' >>& ${SPECIFICO}

echo "Use of the Sticky Bit Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#WorldWriteableDirs>world writable directories</a>' in Section 2" >>& ${SPECIFICO}

echo '*********************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Displays existence of SUID and SGID files

#

# Use of SUID and SGID Programs Step 1

#

echo '<li><a href=specific.html#UseOfSuid>Use of SUID and SGID Programs</a>' >>& ${INDEXO}

echo '<a name=UseOfSuid>' >>& ${SPECIFICO}

echo "Use of SUID and SGID Programs Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#SUID>SUID</a>' files in Section 2" >>& ${SPECIFICO}

echo '*****************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Use of SUID and SGID Programs Step 1

#

echo "Use of SUID and SGID Programs Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#SUID>SGID</a>' files in Section 2" >>& ${SPECIFICO}

echo '*****************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Script looks for TCP wrappers

# 

# Use of TCP Wrappers Step 1

#

echo '<li><a href=specific.html#UseOfTcpWrap3>Use of TCP Wrappers</a>' >>& ${INDEXO}

echo '<a name=UseOfTcpWrap3>' >>& ${SPECIFICO}

echo "Use of TCP Wrappers Step 1" >>& ${SPECIFICO}

echo "Displaying permissions of /etc/xinetd.d directory" >>& ${SPECIFICO}

echo '*************************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

  /bin/ls -al /etc/xinetd.d >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Use of TCP Wrappers Step 2

#

echo "Use of TCP Wrappers Step 2" >>& ${SPECIFICO}

echo "Displaying contents of every file in /etc/xinetd.d directory" >>& ${SPECIFICO}

echo '************************************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

cat /etc/xinetd.d/* >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Script checks TFTP configuration

# 

# Use of TFTP Step 1

#

echo '<li><a href=specific.html#UseOfTftp3>Use of TFTP</a>' >>& ${INDEXO}

echo '<a name=UseOfTftp3>' >>& ${SPECIFICO}

echo "Use of TFTP Step 1" >>& ${SPECIFICO}

echo "Displaying /etc/xinetd.d/tftp" >>& ${SPECIFICO}

echo '*****************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

  cat /etc/xinetd.d/tftp >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO} 

# Displays /etc/passwd file

#

# User and Group ID Numbers Step 1

#

echo '<li><a href=specific.html#UserID>User and Group ID Numbers</a>' >>& ${INDEXO}

echo '<a name=UserID>' >>& ${SPECIFICO}

echo "User and Group ID Numbers Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#Passwd>/etc/passwd</a>' file in Section 2" >>& ${SPECIFICO}

echo '***********************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Displays /etc/passwd file

#

# User Description Step 1

#

echo '<li><a href=specific.html#UserDescription>User Description</a>' >>& ${INDEXO}

echo '<a name=UserDescription>' >>& ${SPECIFICO}

echo "User Description Step 1" >>& ${SPECIFICO}

echo "<a href=system.html#DisplayPasswdFile>See '/etc/passwd</a>' file in Section 2" >>& ${SPECIFICO}

echo '***********************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO} 

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Displays /etc/passwd file

#

# User Home Directory Step 1

#

echo '<li><a href=specific.html#UserHome>User Home Directory</a>' >>& ${INDEXO}

echo '<a name=UserHome>' >>& ${SPECIFICO}

echo "User Home Directory Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#DisplayPasswdFile>/etc/passwd</a>' file in Section 2" >>& ${SPECIFICO}

echo '***********************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Displays /etc/passwd file

#

# User ID Naming Convention Step 1

#

echo '<li><a href=specific.html#UserIdNamingConvention>User ID Naming Convention</a>' >>& ${INDEXO}

echo '<a name=UserIdNamingConvention>' >>& ${SPECIFICO}

echo "User ID Naming Convention Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#DisplayPasswdFile>/etc/passwd</a>' file in Section 2" >>& ${SPECIFICO}

echo '***********************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Script checks for user shells

#

# User Shells Step 1

#

echo '<li><a href=specific.html#UserShells3>User Shells</a>' >>& ${INDEXO}

echo '<a name=UserShells3>' >>& ${SPECIFICO}

echo "User Shells Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#Shells>/etc/shells</a>' file in Section 2" >>& ${SPECIFICO}

echo '***********************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# User Shells Step 2

#

echo "User Shells Step 2" >>& ${SPECIFICO}

echo "See '<a href=system.html#DisplayPasswdFile>/etc/passwd</a>' file in Section 2" >>& ${SPECIFICO}

echo '***********************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Script checks if UUCP is used

# 

# UUCP Usage Step 1

#

echo '<li><a href=specific.html#UucpUse4>UUCP Usage</a>' >>& ${INDEXO} 

echo '<a name=UucpUse4>' >>& ${SPECIFICO}

echo "UUCP Usage Step 1" >>& ${SPECIFICO}

echo "Displaying /bin/rpm -qa | grep uucp" >>& ${SPECIFICO}

echo '***********************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

  /bin/rpm -qa | grep uucp >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# UUCP Usage Step 2

#

echo "UUCP Usage Step 2" >>& ${SPECIFICO}

echo "See '<a href=system.html#Shadow>/etc/shadow</a>' file in Section 2" >>& ${SPECIFICO}

echo '***********************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# UUCP Usage Step 3

#

echo "UUCP Usage Step 3" >>& ${SPECIFICO}

echo "See '<a href=system.html#ChkConfig>/sbin/chkconfig --list</a>' in Section 2" >>& ${SPECIFICO}

echo '**********************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# UUCP Usage Step 4

#

echo "UUCP Usage Step 4" >>& ${SPECIFICO}

echo "Displaying contents of /etc/uucp/*" >>& ${SPECIFICO}

echo '**********************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

  /bin/cat /etc/uucp/* >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Script shows user account information

# 

# X-Windows Started At Boot Step 1

#

echo '<li><a href=specific.html#XWinBoot>X-Windows Started At Boot Time</a>' >>& ${INDEXO}

echo '<a name=XWinBoot>' >>& ${SPECIFICO}

echo "X-Windows Started At Boot Step 1" >>& ${SPECIFICO}

echo "Displaying /etc/inittab | grep initdefault" >>& ${SPECIFICO}

echo '******************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

  cat /etc/inittab | grep initdefault >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Script shows user account information

# 

# X-Windows Tunneling Over SSH Step 1

#

echo '<li><a href=specific.html#XWinTunnel>X-Windows Tunneling Over SSH</a>' >>& ${INDEXO}

echo '<a name=XWinTunnel>' >>& ${SPECIFICO}

echo "X-Windows Started At Boot Step 1" >>& ${SPECIFICO}

echo "Displaying /etc/ssh/sshd_config | grep X11Forwarding" >>& ${SPECIFICO}

echo '****************************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

  cat /etc/ssh/sshd_config | grep X11Forwarding >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopOfIndex>Return to Report</a>' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# Script checks if X-windows is used

#

# X-Windows Usage Step 1

#

echo '<li><a href=specific.html#XWinUse>X-Windows Usage</a>' >>& ${INDEXO}

echo '<a name=XWinUse>' >>& ${SPECIFICO}

echo "X-Windows Usage Step 1" >>& ${SPECIFICO}

echo "See '<a href=system.html#Netstat>netstat -an</a>' file in Section 2" >>& ${SPECIFICO}

echo '************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# X-Windows Usage Step 2

#

echo "X-Windows Usage Step 2" >>& ${SPECIFICO}

echo "Displaying files that allow X-windows sessions" >>& ${SPECIFICO}

echo '**********************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

  find / \( -fstype nfs -prune \) -o -name 'X*.hosts' -exec ls -la  {} \; -exec cat {} \; >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

# X-Windows Usage Step 3

#

echo "X-Windows Usage Step 3" >>& ${SPECIFICO}

echo "Displaying permissions of /usr/X11R6/bin/xhost" >>& ${SPECIFICO}

echo '**********************************************' >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

  /bin/ls -l /usr/X11R6/bin/xhost >>& ${SPECIFICO}

echo '' >>& ${SPECIFICO}

echo '<a href=index.html#TopO