2010-12-30 unix-privesc-check trunk * Bug fix: Cleaned up a typo * Added support for fscaps * Updated CHANGELOG -- Tim Brown 2010-11-09 unix-privesc-check trunk * Bug fix: False positive if svn.simple directory is empty -- 2010-11-04 unix-privesc-check trunk * Added unique issue numbers. Should help to generate reports -- 2010-04-17 unix-privesc-check trunk * Bug fix: Now checks HP-UX swap permissions correctly * Bug fix: Cleaned up a few typos -- Tim Brown 2010-09-27 unix-privesc-check trunk * Added check for cleartext subversion passwords in home directory -- 2010-01-06 unix-privesc-check trunk * Added support for exploit mitigations (HP-UX and Solaris) * Checks if shadow and passwd are writable, thanks jdv * Checks for SetUID shell scripts which might be racey * Improved NX and SSP checks (Linux only) * Bug fix: Cleaned up a few typos -- Tim Brown 2009-09-23 unix-privesc-check trunk * Bug fix: Cron jobs starting with '(' parsed properly * Checks perms on Java classpath -- 2009-09-06 unix-privesc-check trunk * Added MMAP allows map to 0 exploit mitigation (Linux ATM) * Added SELinux exploit mitigation (Linux only) -- Tim Brown 2009-07-30 unix-privesc-check v1.5 * Initial AIX support added * Check for exploit mitigations (Linux only ATM) * Brain dumped some more interesting things to check for into TODOs * Bug fix: Fixed typos in comments * Added SSP exploit mitigation (Linux only ATM) -- Tim Brown 2008-11-23 unix-privesc-check v1.4 * Added check of file perms of shared libraries used by SUID programs * Tidied output slightly 2008-11-09 unix-privesc-check v1.3 * Bug fix: Parts of the script only worked with /bin/bash and not /bin/sh * Bug fix: Fixed typos in reporting for privescs via cron 2008-07-06 unix-privesc-check v1.2 * Added check of library dirs (/etc/ld.so.conf) for Linux * Crude check of programs called from shell scripts * Check of libraries used by each binary program (using ldd) * Check of hard-coded paths within binaries (using strings) * More verbose WARNING messages. All the explanation for a WARNING should now be on one line so you can grep for 'WARNING' and still understand the results * Check of file perms on open file handles of running processes * Check for running SSH agent. Lists keys if possible * Check for public and private SSH keys in home directories * Check for running GPG agent * Check for cron jobs in /var/spool/cron/tabs * Extra non-priv check for local postgres trusts * Bug fix: lanscan now used on HPUX to get interface names * Check if system is an NFS client (HPUX only) * Check if swap space is readable / writable 2008-04-17 unix-privesc-check v1.1 * Added check for accounts with no password in /etc/passwd * Record some basic info about the host (hostname, uname -a, interface IPs) 2008-02-01 unix-privesc-check v1.0 * Initial public release