Imported Upstream version 1.4~svn361

CHANGELOG

@@ -0,0 +1,38 @@
+
+2008-11-23 unix-privesc-check v1.4
+
+* Added check of file perms of shared libraries used by SUID programs.
+* Tidied output slightly.
+
+2008-11-09 unix-privesc-check v1.3
+
+* Bug fix: Parts of the script only worked with /bin/bash and not /bin/sh
+* Bug fix: Fixed typos in reporting for privescs via cron.
+
+2008-07-06 unix-privesc-check v1.2
+
+* Added check of library dirs (/etc/ld.so.conf) for Linux
+* Crude check of programs called from shell scripts
+* Check of libraries used by each binary program (using ldd)
+* Check of hard-coded paths within binaries (using strings)
+* More verbose WARNING messages.  All the explanation for a WARNING
+  should now be on one line so you can grep for 'WARNING' and still
+  understand the results
+* Check of file perms on open file handles of running processes
+* Check for running SSH agent.  Lists keys if possible.
+* Check for public and private SSH keys in home directories.
+* Check for running GPG agent.
+* Check for cron jobs in /var/spool/cron/tabs
+* Extra non-priv check for local postgres trusts
+* Bug fix: lanscan now used on HPUX to get interface names
+* Check if system is an NFS client (HPUX only)
+* Check if swap space is readable / writable
+
+2008-04-17 unix-privesc-check v1.1
+
+*  Added check for accounts with no password in /etc/passwd
+*  Record some basic info about the host (hostname, uname -a, interface IPs)
+
+2008-02-01 unix-privesc-check v1.0
+
+* Initial public release