yalovadaarsa.com mutien.be ketoconazole buy online dosis colchicine escitalopram po polsku DORREAJATETXEA.COM 0.2mg dienogest 0.03mg ethinyl estradiol impotence treatment online viagra price for sildenafil citrate 100mg in hong kong nexium pediatrico 5 mg metronidazole ivi cytotec misoprostol de 500 latest antidepressant tab finasteride pill price in pakistan albuterol aerosol for sale finasteride plasma donation inhaler albuterol sulfate non prescription blackisbusiness.info chen-liu.com is flagyl 400 an antibiotic naprosyn side effects that inclue eye twiching generic metronidazole cream cost mirtazapine 7.5 mg weight gain diflucan buy online no prescription voltaren unguent antidolorifici fluconazole dosage for penile yeast infection is lasix and wine the same thing.. diuretic 16 day prednisone pack bmmpm.com elusionist.com q2melbourne.com cheap plavix usa can i take a one time dose of 40mg prednisone kak se pie kamagra lisinopril en farmacia ahumada para que es la cardizem de 30 mgs buy doxycycline tablet online viagra paypal payment accepted disabledinafghanistan.com can doxycycline make placebo pills not work taking too much diflucan can lead to hives gelernt.net acne antibiotics in the mercury drugs philippines augmentin 1g pret catena secretlives.me glucophage 850 mg side effects irbesartan 2772 combination of valtrex and abreva 1 g zithromax duloxetine hcl dr 60 mg efectos can we give azithromycin in cystitis is fish bad for levofloxacin pill prolonged use of finasteride generic version of lexapro cipro 4 weeks is 5mg singulair enough how much is buspirone at cvs que es mejor prilosec or nexium pct with nolvadex dosage while taking levofloxacin 500 sore throat what to do buy online viagra in india cheap 1 pack of azithromycin with mastercard taking neurontin for withdrawal but have lexapro asiliahomehealth.com is fluconazole available in philippines spacecityparent.com theitrecruiters.com side effects metoprolol 400mg er buy proair hfa no prescription can neurontin make you shake can i take metformin and desogen band name of the drug erythromycin oxime cialis levitra sales viagra tadalafil 60 ml effect of metformin in chf blackisbusiness.info para que sirve escitalopram precio does doxycycline work for uti and ear infection clomidep information micardis telmisartan 80 mg side effects acyclovir nephropathy hydrocodone ativan baclofen cymbalt fehmierduran.com elavil 25 mg for insomnia avodart en espanol cialis information in bahasa malaysia albuterol 1.25mg feswmp.com generic levitra there amoxicillin used for chlamydia can i wean myself off metoprolol xl swasthiktv.com comprar cytotec co.c.r will 3 weeks of ampicillin clear acne plendil cena what stds does verapamil cure americanfamilyenergy.com voltaren 75mg delay ejaculation misoprostol cuanto es el costo en argentina drs in wv who treat levaquin reactions feswmp.com seroquel street price 100 mg doxycycline hyclate 100mg tablets side effects bactrim 800 mg is it used for skin and tissue infection upperbe.it generic wellbutrin and weight loss how to come off mirtazapine 30mg my dog just swallowed atorvastatin delite.cn clomid online cheap amoxicillin g6pd where can you get zyvox for your pet genericka viagra 120 mg atorvastatin ppt powerpoint anaheimangelsjersey.com daisylcreations.com cheapest viagra online pharmacy clopidogrel 1200 mg golfnewmexico.com dipyridamole 75 mg tab can you crush cialis pill what is the shelf life of cipro inderal buy online como tomarse la pastilla feldene what is felodipine hexal tablets used for 5 htp with amitriptyline taking ciprofloxacin and metroprol tar and vitamins drhildaong.com dapoxetine hcl tablets 60 mg whrye i can buy. kamagra orall jelhly in philippines montelukast sodium prime air side effects quetiapine fumarate bluelight allcoinreviews.org difference between minipress xl and minipress how long does zoloft dizziness last affetti collaterale della gabapentin cappisula levofloxacin and doxy africanamericanimages.us what is the urdu name of tricyclic antidepressant citalopram and sun uk baclofen taper schedule what to do at home for a trazodone overdose seadoo-maldives.com chatcufete.com balitoursclub.com imipramine 25 mg reviews cdfeorellana.com feswmp.com tamsulosin tablet via ngt hydroxyzine 100 mg tablets when should i take cialis for full effect purchase oral lamisil lexapro generic in canada dataminingweb.com afrin antidepressant 25mg africanamericanimages.us how to take clomid for twins can cialis be taken with cardura can you give a 3 year old 5mg of prednisone lexapro and drug cravings women cialis in winnipeg manitoba metronidazole no insurance golfnewmexico.com kegunaan ketoconazole pada kucing skale.it africanamericanimages.us ciprodac tablets albuterol nebulizer usage arman-crusher.com bactrim para odontologia yalovadaarsa.com can you take hydroxyzine and clonidine together canada cost of naproxen 20mg escitalopram first day side effects citalopram 20 mg dose switcing to lexapro bemylight.org aster-m.com can i take nyquil while taking ciprofloxacin hcl cost of fosamax vs generic nexium 90 day coupon kegunaan tablet verapamil buy pfizer viagra online india propranolol 10 mg for tremor cost of metronidazole for fish in india blackisbusiness.info ciprofloxacin 500mg antibiotics for men 850 antibiotics is 1500mg of metformin safe to take on pcos took 40mg of celexa and a lortab bactrim forte e coli sperma ondansetron and nursing dogs can a dog take carvedilol 6.25mg pill metoprolol price mifepristone and misoprostol no prescription periactin weight gain pill bemylight.org cheap equine ivermectin metformin teaching which herb is equivalent allergic to metronidazole chinaskinny.com lbc4help.org emarkination.web5.ict4b.eu doxepin 100 mg stlsoccer.net purchase augmentin what time do u take 500mg amoxicillin for throat do balong cialis pills work levaquin coverage of enterococcus heavyanalytics.com how much do valacyclovir 500mg tabs cost voltaren dolo what does it do how much does generic prednisone cost iphone5sreview.nl how does clomid work on men chatcufete.com nizoral cream or shampoo hair regrowth chatcopii.com bukitpinus.com prednisone use 10 mg dose affect on glucose testimonial pemakai cytotec difference between 88mcg and 100 mcg dose of thyroxine lisinopril replacement dapoxetine uk pharmacy xn--b1afpdqbb8d.xn--p1ai voltaren comprimidos NEOHAIRINDO.COM prednisone and weight loss viagra while taking warfaran fluconazole tablet how long do side effect last is it ok to take augmentin after the flu shot cual es la alergia terbinafine hcl 250 mg albuterol inhaler without insurance DORREAJATETXEA.COM NEOHAIRINDO.COM is 80 mg accutane lawsuit doxazosin 8 mg cost fibromyalgia nortriptyline dosage michelamarchiotto.com high from prazosin lbc4help.org amoxicilline of square comp zestril orodispersible tablets does valacyclovir reduce night sweats out of date kamagra biotech ciprofloxacim 250 used for what viagra gold 800 mg forum desogestrel 150 mcg ethinyl estradiol 20 mcg lisinopril side effects with bananas recommended oral prednisone 6 pack what happens when you snort 150 milligrams of seroquel is linezolid hard on the kidneys bemylight.org cyproheptadine syrup appetite is celexa 40mg a maoi how long does buspar stay in your urine system famous actors on propecia periactin uses cara pakai obat ketoconazole tablet directmobility.co.uk vitaroom.net defysiomarkt.nl cerisdieventi.com bukitpinus.com 8nxw.com buy viagra from pfizer side effects of clomid after ovulation efek samping flagyl benzoyl metronidazole efek samping obat grazeo 20 piroxicam terbinafine tablets price mankind what strength of amoxil bd tabs split lexapro 2 doses gabapentin overnight delivery tamoxifen eg 20 mg quien vende pastillas cytotec en san cristobal amoxicillin 500 mg presyo sa mercury drug propranolol driving test plendil 450 generic acyclovir online dexamethasone table bp 0.5mg punkfiction.com gabapentin alcohol withdrawal dosage how to get zithromax perscription without insurance THUMBUY.COM finasteride 2.5mg side effects furosemide obat apa daisylcreations.com misoprostol cuanto cuesta accord doxycycline accord 100mg information doxycycline for sale no prescription uk es08.com montelukast 3 mg pra que serve dostinex 05mg how quickly does prednisone work in cats mutien.be flagyl tablets 200mg dapoxetine in venezuela how long does diflucan 150 mg stay in your system etizolam propranolol hydrochloride tablets con 6 semanas se puede hacer el cytotec directmobility.co.uk mutien.be bactrim dosage for std benicar 40 mg 12.5 mg trazodone izkusnje forum cost of lamisil without insurance eastriverpartners.info allcoinreviews.org levaquin and alcohol side effects conjugated estrogens 0.625 mg withdrawal symptoms of lisinopril how much does xenical sell for in durbansa manfaat obat dexamethasone 0.75 mg abilify, escitalopram can you use marijuana generic for zyvox metformin er 500 effect on hemoglobin a1c drugprevent.org.uk csitdurg.in accommodationmadeasy.com naprosyn 375 mg price manfaat levofloxacin 500 my bupropion hcl a 101 will it help me with weight loss can doxycycline hyclate cause breast abscess blakesgourmet.com doxycycline for chest infection focva.org can benicar cause dental pain fluconazole 100mg what type of antidepressant is celexa voltaren dolo lamisil dermgel price will zyvox 600 mg cause blemish in your face mirtazapine generic name feifan8.net golongan ondansetron aml.ca naprosyn 500 cost tolterodine tartrate and tamsulosin hydrochloride slimming lasix zofran 4mg and stomach flu lamisil price shoppers drug mart does valtrex help with rheumatoid arthritis asiliahomehealth.com robertjszmidt.pl buspirone side effects taper off bemylight.org topamax para que sirve erythromycin 4 times a day proscar online buy equivalent dose of acyclovir to valtrex i went bright red mirtazapine withdrawal brtop.net metoprolol and breast pain enlargement zyprexa zydis 20 mg cytotec yahoo respuestas montelukast sodium solution stability cheap lipitor online lamisil cream how long to see results on my face synthroid tabs narcotic can you get antibiotic in greece without prescription does doxycycline work immediately for lyme disease how long after moduretic is taken does milk flow stop iphone-accessory.cn persantine 75 mg side effects generic cialis soft sale effects of taking four 7.5 mg pills buspirone what is the side effects for diovan 360 deserteichler.com deserteichler.com aml.ca will too high of levothyroxine keep me awake chatcufete.com singulair 10mg uk aml.ca cong dung thuoc atorvastatin tablets 10 mg viagra canada overnight if u crush and snort naproxen 250mg will u get high redcaymanmedia.com quetiapine fu stat can i take fexofenadine snd levocetirizine st same time levaquin kellymom rwmeierlaw.com original cialis commercial lamisil 125mg diflucan for sinus infection what is a 200 mg seroquel worth yalovadaarsa.com arman-crusher.com how often can you take a 4 mg dose pack of prednisone valium for zoloft withdrawal que cuesta la cytotec en panama apa kegunaan lipitor 02 mg kamagra 36 hours flomax 64 mg golfnewmexico.com flagyl 200 used for doxycycline and metronidazole for treatment in dogs overdose atorvastatin calcium tablets prometrium increased cervical mucus meloxicam de 2.5 y 4 mg para uso veterinario aml.ca depo provera online order bukitpinus.com digoxin dosage 125 mcg strattera 40 mg side effects is 50 mg of seroquel safe for kids bupropion 300 xl side effects ic montelukast sod 10 mg clomid timeline with doctor appointments 200 mg doxycycline cflailesi.org es normal manchar usando depo provera canine chewable amoxicillin 250mg balitoursclub.com drugprevent.org.uk chatcopii.com balitoursclub.com singulair available canada 8nxw.com accommodationmadeasy.com levaquin 14 days lisinopril 20 mg has no htcz coverage of levofloxacin for dental abcess azithromycin 1 gm pwd packet avmdtogo.org chen-liu.com can mirtazapine cause sleepwalking para que sirve el atorvastatin 40 mg can you take painkillers while on metformin for pcos cialis 5 mg online diflucan price per tablet philippines plavix 50 mg cipro 500 mg one time dose nortriptyline 25mg tablets intervenciones de enfermeria con medicamento lasix clomiphene para que serve doxazosin mesylate 2 mg tab side effects albuterol walgreens uso del medicamento inderal priligy and anxiety yalovadaarsa.com egyptereizen.org drugprevent.org.uk propecia vs finasteride kutub dapoxetine furosemide for cats dosage plavix vs vit k cheap propecia no rx obat propranolol ciprofloxacin stability prozac 10mg side effects can you cut a cialis 20 mg in two provera tablet in india at what age viagra can be taken olmesartan price list cual es el preci del bactrim pediatrici gave dog metronidazole now panting chatcufete.com d amoxicillin fluoxetine 20 mg for the perimenopause austell amoxillin seroquel xr 50mg sleep walking doxycycline 100 mg cost walmart emarkination.web5.ict4b.eu can i use stud 100 and cialis grapefruit pristiq benicar interaction cheap cialis uk next day delivery should i take cialis before a strenuous workout propranolol hydrochloridealprazolam ondansetron odt 4 mg for stomach flu cozaar 952 white street value of citalopram 20mg levaquin 500 mg alcohol use singulair available canada strategi pemasaran brand viagra buy propecia boots michelamarchiotto.com shortage of iv lasix apakah ketoconazole cream aman untuk hamil what happens if i miss a day of zoloft dog atesynthroid 25 mg dr.mercola and prednisone treatment can maxolon zofran cause hiccups allegra suspension y benadryl maxalt rizatriptan melt 10mg prices citalopram 5 mg daily prednisone 60 mg side effectys amoxil is this good for 9 month old baby topamax dosage for weight loss 150 mg clomid and ovidrel sucess septra online hbhetterem.hu lamisil tablets price canciprofloxacin 250mg be taken 6 hours apart difference between revatio and vaigra entech.com what is onset for zyprexa ziromac azithromycin 250 mg in urdu at which boots store can i buy viagra forma correcta de utilizar misoprostol feifan8.net

UNIX/Linux local audit tool

By Sean Boran (sean at boran.com)


Introduction

Auditing the security of an existing Solaris system can be time-consuming, and often requires on-site visits. There are several commercial tools and a few free ones (e.g., Titan and the Coroner's Toolkit) that help, but they can be complicated and require local compilation or configuration.

So a tool was developed with the following aims:

This script automates the gathering of the information only. Of course, the difficult part is the interpretation of results and deciding what countermeasures to take.

Note:
Please visit the Lusas project which is newer than this page

The script
audit.sh can be used to call audit1.sh and audit2.pl and create one file with all results

What does it do?

The tool consists of two main scripts, both of which look at the system, but do not make any modifications.

  1. audit1.sh (Bourne shell): This script is designed to run quickly and gather as much security information as possible about the system.
    No file searches are conducted, to keep it fast.
    Tested on: Solaris 2.6/7/8/9, OpenBSD 2.6, RH 7, Suse 7.1/8.1, HP-UX11. Solaris is best supported.
  2. audit2.pl (perl): This second script searches the entire filesystem, listing SUID, SGID, world-writeable, group-writeable files. It also lists trust files and their contents. Finally it lists files with weird names (e.g., containing punctuation characters), which might be danger or a sign of penetration. On a large server with 100GB disks, this can take a few hours to run.
    Tested on SunOS 5.5/6/7/8/9, OpenBSD 2.6, RH 7, Suse 7.1/8.1/9, HP-UX11.
     
  3. audit3.sh is a minimal Bourne shell script, that replaces audit2.pl and old systems than don't have Perl. Normally you don't need to run this.

Using the tool

Please read the headers in the scripts before using.

dir=`dirname $0`;
hostname=`uname -n`
echo "Run audit part 1, results in $dir/$hostname.audit1.log..."
sh $dir/audit1.sh > $dir/$hostname.audit1.log 2>&1

echo "Run audit part 2..."
perl $dir/audit2.pl

echo "Create a gzipped tarball from .."
ls -al $hostname.audit[12]*log
tar cf - $hostname.audit[12]*log | gzip > $dir/audit.$hostname.tgz
if [ $? -eq 0 ] ; then
  echo "Deleting temporary audit files .."
  rm $dir/$hostname.audit[12]*log
fi
ls -l $dir/audit.$hostname.tgz
echo "finished"

Tips

  1. Compare Solaris patch levels:
    for f in *audit1.log ; do
      echo $f;
      egrep "^Patch: " $f |awk '{print $2}' |sort > $f.pat;
    done
    sdiff system1.audit1.log.pat system2.audit1.log.pat |grep "|"

Seán Boran is an IT security consultant based in Switzerland and the author of the online IT Security Cookbook.

© Copyright 2004, Seán .Boran, All Rights Reserved, Last Update: 11 février, 2004