63 lines
1.5 KiB
Plaintext
63 lines
1.5 KiB
Plaintext
|
#!/bin/sh
|
||
|
|
|
||
|
|
set -e
|
||
|
|
|
||
|
|
cd $(dirname $0)
|
||
|
|
|
||
|
|
. ../../../common/config.sh
|
||
|
|
. ../../../common/log.sh
|
||
|
|
|
||
|
|
log_start "$0" "chage report failures when it cannot open the shadow file"
|
||
|
|
|
||
|
|
save_config
|
||
|
|
|
||
|
|
# restore the files on exit
|
||
|
|
trap 'log_status "$0" "FAILURE"; restore_config; chmod g+s /usr/bin/chage' 0
|
||
|
|
|
||
|
|
change_config
|
||
|
|
|
||
|
|
echo -n "Remove setgid flag on chage..."
|
||
|
|
chmod g-s /usr/bin/chage
|
||
|
|
echo "OK"
|
||
|
|
|
||
|
|
echo -n "Change bin's shell (chage -l bin)..."
|
||
|
|
LD_PRELOAD=../../../common/open_RDONLY_failure.so FAILURE_PATH=/etc/shadow chage -l bin 2>tmp/chage.err && exit 1 || {
|
||
|
|
status=$?
|
||
|
|
}
|
||
|
|
echo "OK"
|
||
|
|
|
||
|
|
echo -n "Restore setgid flag on chage..."
|
||
|
|
chmod g+s /usr/bin/chage
|
||
|
|
echo "OK"
|
||
|
|
|
||
|
|
echo -n "Check returned status ($status)..."
|
||
|
|
test "$status" = "1"
|
||
|
|
echo "OK"
|
||
|
|
|
||
|
|
echo "chage reported:"
|
||
|
|
echo "======================================================================="
|
||
|
|
cat tmp/chage.err
|
||
|
|
echo "======================================================================="
|
||
|
|
echo -n "Check that there were a failure message..."
|
||
|
|
diff -au data/chage.err tmp/chage.err
|
||
|
|
echo "error message OK."
|
||
|
|
rm -f tmp/chage.err
|
||
|
|
|
||
|
|
echo -n "Check the passwd file..."
|
||
|
|
../../../common/compare_file.pl config/etc/passwd /etc/passwd
|
||
|
|
echo "OK"
|
||
|
|
echo -n "Check the group file..."
|
||
|
|
../../../common/compare_file.pl config/etc/group /etc/group
|
||
|
|
echo "OK"
|
||
|
|
echo -n "Check the shadow file..."
|
||
|
|
../../../common/compare_file.pl config/etc/shadow /etc/shadow
|
||
|
|
echo "OK"
|
||
|
|
echo -n "Check the gshadow file..."
|
||
|
|
../../../common/compare_file.pl config/etc/gshadow /etc/gshadow
|
||
|
|
echo "OK"
|
||
|
|
|
||
|
|
log_status "$0" "SUCCESS"
|
||
|
|
restore_config
|
||
|
|
trap '' 0
|
||
|
|
|