topic Re: Scripting Challenge in Operating System - HP-UX

Scripting Challenge

Robert Gamble — Tue, 26 Sep 2000 19:47:29 GMT

A security audit is coming a I have a request coming from my customer to print to a file a list of EVERY file that is world readable and world writable (-zzzzzzzrwz, where z doesnt matter). Yes, I realize this will create a huge file.
I considered using a 'lsr -la > $FILE' but I'm not sure how to grep for just the 8th and 9th character. If I use 'cut' it strips away the rest of the output of the lsr command which is needed.

The output needs to have the $PATH/$FILENAME and permissions for each file that is world read/write.

Any Ideas ?
T.I.A.

Re: Scripting Challenge

James R. Ferguson — Tue, 26 Sep 2000 20:05:00 GMT

Robert:

# ls -al|awk '{if (substr($1,8,2)=="rw") {print $0}}' > /tmp/results

...JRF...

Re: Scripting Challenge

Robert Gamble — Tue, 26 Sep 2000 21:40:29 GMT

not just 'rw' but '-w', 'r-'

thx

Re: Scripting Challenge

James R. Ferguson — Tue, 26 Sep 2000 22:27:35 GMT

Robert:

# ls -al|awk '{if(substr($1,8,1)=="r")||(substr($1,9,1)=="w") {print $0}}' > /tmp/results

...JRF...

Re: Scripting Challenge

Fred Martin_1 — Tue, 26 Sep 2000 23:05:23 GMT

I think the 'find' command would do:

find //wherever -perm -o+w -o -perm -o+r
-exec ls -la {} ;

A little hard to read but it says "find in directory //wherever, files with permissions of "other" as writable OR files with permissions of "other" as readable - then perform an 'ls -ls' on each file found.

Re: Scripting Challenge

Fred Martin_1 — Tue, 26 Sep 2000 23:06:38 GMT

Re: Scripting Challenge

Fred Martin_1 — Tue, 26 Sep 2000 23:07:45 GMT

Sorry about the double slashes above. That should read:

find /wherever -perm -o+w -o -perm -o+r
-exec ls -la {}\;

Re: Scripting Challenge

Robert Gamble — Wed, 27 Sep 2000 11:08:05 GMT

James,

I get an awk syntax error on the second command line you provided.
awk: The statement cannot be correctly parsed. The source line is 1. syntax error The source is line 1.

Fred,
I keep getting "invalid mode o+W-o" or variants of that when adding spaces between them.

Thanks for your help!

Re: Scripting Challenge

federico_3 — Wed, 27 Sep 2000 11:15:49 GMT

put the condition between "(" ")" like this

ls -al|awk '{ifi((substr($1,8,1)=="r")||(substr($1,9,1)=="w")) {print $0}}' > /tmp/results

federico

Re: Scripting Challenge

James R. Ferguson — Wed, 27 Sep 2000 11:27:09 GMT

Robert:

Sorry, been off-line. The syntax should be:

ls -al|awk '{if((substr($1,8,1)=="r")||(substr($1,9,1)=="w")) {print $0}}' > /tmp/results

...JRF...

Re: Scripting Challenge

Robert Gamble — Wed, 27 Sep 2000 11:31:32 GMT

James,

That works! Thank you very much!

Re: Scripting Challenge

Fred Martin_1 — Wed, 27 Sep 2000 18:56:36 GMT

The spaces are important. If this is clearer, consider the underscores below as spaces and try it again:

find_/wherever_-perm_-o+w_-o_-perm_-o+r_-exec_ls_-al_{}_\;

Fred

Re: Scripting Challenge

unix team_4 — Thu, 28 Sep 2000 05:06:53 GMT

find / -xdev -type f -perm -006 -exec ls -ld {} ; > /tmp/rw.lst
Run it as a user instead of root, so you dont get into any directories that a user cant read anyways.
If you just need filenames, drop the -exec