From 8efbb80497fbc012df389efcc2e00396c8896de2 Mon Sep 17 00:00:00 2001 From: mboelen Date: Fri, 5 Dec 2014 20:08:10 +0100 Subject: Starting user ID 1000 for Linux systems --- include/tests_authentication | 9 +++++---- 1 file changed, 5 insertions(+), 4 deletions(-) diff --git a/include/tests_authentication b/include/tests_authentication index 1a0e152f..3e3f3cb0 100644 --- a/include/tests_authentication +++ b/include/tests_authentication @@ -5,8 +5,8 @@ # Lynis # ------------------ # -# Copyright 2007-2014, Michael Boelen (michael@rootkit.nl), The Netherlands -# Web site: http://www.rootkit.nl +# Copyright 2007-2015, Michael Boelen, CISOfy (michael.boelen@cisofy.com) +# Web site: https://cisofy.com # # Lynis comes with ABSOLUTELY NO WARRANTY. This is free software, and you are # welcome to redistribute it under the terms of the GNU General Public License. @@ -338,6 +338,7 @@ # Notes : HPUX > 100 # MacOS: need to be improved (just reading passwd file is not enough) # OpenBSD/NetBSD: unknown + # Arch Linux / CentOS / Ubuntu: 1000+ Register --test-no AUTH-9234 --os Linux --weight L --network NO --description "Query user accounts" if [ ${SKIPTEST} -eq 0 ]; then logtext "Test: Read system users (including root user) from /etc/passwd" @@ -351,7 +352,7 @@ "Linux") logtext "Linux real users output (ID = 0, or 500+, but not 65534):" - FIND=`awk -F: '($3 >= 500) && ($3 != 65534) || ($3 == 0) { print $1","$3 }' /etc/passwd` + FIND=`awk -F: '($3 >= 1000) && ($3 != 65534) || ($3 == 0) { print $1","$3 }' /etc/passwd` ;; "Solaris") @@ -1328,4 +1329,4 @@ wait_for_keypress # #================================================================================ -# Lynis - Copyright 2007-2014, Michael Boelen - www.rootkit.nl - The Netherlands +# Lynis - Copyright 2007-2015 Michael Boelen, CISOfy - https://cisofy.com -- cgit v1.2.3