topic Re: Command for checking world-writable access in Operating System - Linux

Command for checking world-writable access

Dewa Negara_4 — Mon, 10 Apr 2006 08:26:04 GMT

Hi All,

I have a script to check world-writable access using the following command:

grep -v "#" /etc/fstab| awk '{print $2}'|grep -E -v "^/tmp$|^/var/tmp$|\.\.$"|xargs -n1 ls -ld|grep "wx "

However, this command is giving me a bug when the ownership of the mount point with "wx" chars as below:

[root@PROD:/opt/soeg/validation/scripts]
# grep -v "#" /etc/fstab| awk '{print $2}'|grep -E -v "^/tmp$|^/var/tmp$|\.\.$"|xargs -n1 ls -ld|grep "wx "
drwxrwxrwx 6 p50adm sapsys 96 Jun 30 2005 /usr/sap/P50
drwxrwxrwx 19 oratwx dba 2048 Oct 21 21:37 /oracle/TWX
drwxrwxr-x 56 oratwx dba 2048 Oct 14 16:59 /oracle/TWX/920_64
drwxr-xr-x 3 oratwx dba 24576 Feb 13 14:00 /oracle/TWX/saparch
drwxr-xr-x 5 oratwx dba 1024 Oct 27 11:21 /oracle/TWX/sapreorg

How can I do a little bit modification on the command, so it only checks for the world-writable permission?

Pls help.

Thanks and Best Regards,
Dewa

Re: Command for checking world-writable access

James R. Ferguson — Mon, 10 Apr 2006 08:40:40 GMT

Hi Dewa:

If you want to find files with world-writable permissions do:

# find /path -xdev -type f -perm -o+w

The '-xdev' argument prevents crossing mountpoints. If you want you want to brutally search every filesystem, do:

# find / -type f -perm -o+w

Regards!

...JRF...

Re: Command for checking world-writable access

harry d brown jr — Mon, 10 Apr 2006 08:45:41 GMT

Change your ending grep with:

grep "^d.......wx "

live free or die
harry d brown jr

Re: Command for checking world-writable access

James R. Ferguson — Mon, 10 Apr 2006 08:52:01 GMT

Hi (again) Dewa:

OK, you want mountpoints. How about this:

while read DEV MPT NULL
do
find ${MPT} -xdev -type d -perm -o+w
done < /etc/fstab

Regards!

...JRF...

Re: Command for checking world-writable access

James R. Ferguson — Mon, 10 Apr 2006 09:28:44 GMT

Hi Dewa:

Oops, that should be:

while read DEV MPT NULL
do
find ${MPT} -xdev -type d -prune -perm -o+w
done < /etc/fstab

Regards!

...JRF...

Re: Command for checking world-writable access

Dewa Negara_4 — Mon, 10 Apr 2006 09:30:01 GMT

Hi Harry / James,

Thanks a lot. It looks ok for me now. Thanks again for your great help.

Best Regards,
Dewa