linux系统中的列出敏感用户的脚本代码

240 阅读 0 评论 159 点赞

我是靠谱客的博主暴躁纸飞机，最近开发中收集的这篇文章主要介绍linux系统中的列出敏感用户的脚本代码，觉得挺不错的，现在分享给大家，希望可以做个参考。

概述

此处的敏感用户是指这个用户属于多个组，或者这个用户属于的组名跟这个用户名不一样

#! /bin/bash 
#list user who belong to more than one group 
#and list user who belong to the group which isn't the same as the username 
#w is whitelist,we will not think user in this whitelist is special or dangerous w=("root" "adm" "games" "operator" "halt" "shutdown" "sync" "daemon" "bin" "operator") function WhiteList() 
{ 
    for i in ${w[@]} 
    do
        if [ "$i" == "$1" ];then
            return 1 
        fi
    done
    return 0 
} 
IFS=" 
" for LINE in `cat /etc/passwd|awk -F: '{print $1}'` do
    WhiteList $LINE; 
    #if $? equal 1,means it is in the whitelist     if [ $? -eq 0 ];then
        a=`groups $LINE|awk -F: '{print $2}'` 
        b=`echo $a` 
        if [ "$b" != "$LINE" ];then
            #echo $LINE             echo `groups $LINE` 
        fi
    fi done