Linux System Auditing
Posted 01-04-2012 at 12:20 AM by sudhagud
Basic Linux system auditing is a bit tricky and data collected and information of that is out of place and readability is not that good. Recently this lead me to put together a Open Source code project and develop simple BASH scripts that do the job nicely.
The code and tar ball can be downloaded from both google code or from source forge website's and the project website has links to documentation, help, installation and code.
Download at:
http://code.google.com/p/linux-easy-admin-utilities/
http://sourceforge.net/projects/lnxesyadmutil/
Website:
http://linux-easy-admin-utilities.blogspot.com/
Features
genadtchk - General Audit Checker: This script generates a simple information information about your system. Basic system, Memory, Disk, File System, Network data is audited.
dksadtchk - Disk Audit Checker: This script generates a complete and compressive information about your systems disk and storage. Total disks at boot time, contained partitions, partitions used, removable disks, capacity and free capacity etc.
fsadtchk - File System Audit Checker: This script generates a complete and compressive information about the systems FS usage and current mounted, total available, type, size, free, and space occupying number one folder or file from the FS.
netadtchk - Network Audit Checker: This script generates a complete and compressive information about the network interfaces - hardware, virtual, local and other , firewall and its status, outgoing firewall status, current process that are having listening processes, port - ip - process - executable table, IPV4/6 feature, forwarding, masquerading for the system.
pwgen - Password generator: A complex human readable Linux Password Generator bash script. By default it generates a 8 character length password and can generate up to 32 characters, A numeric parameter can be passed to the script and numbers above 8 and below 33 and anything else will be less than 8 is set to 8 and greater that 32 is set to 32.
depchk - Dependency Checker: This script checks if your system has got the basic Linux utils that these scripts use, e.g. awk, sed etc.
usradtchk - User Auditor: Generates a neat set of informative data of the system users, groups, UID, GID range, root users and wheel users. Information saved only to the stdout.
adttmpcln - Auditor temp file cleaner: Deletes all the tmp files and folders that these utilities create.
The code and tar ball can be downloaded from both google code or from source forge website's and the project website has links to documentation, help, installation and code.
Download at:
http://code.google.com/p/linux-easy-admin-utilities/
http://sourceforge.net/projects/lnxesyadmutil/
Website:
http://linux-easy-admin-utilities.blogspot.com/
Features
genadtchk - General Audit Checker: This script generates a simple information information about your system. Basic system, Memory, Disk, File System, Network data is audited.
dksadtchk - Disk Audit Checker: This script generates a complete and compressive information about your systems disk and storage. Total disks at boot time, contained partitions, partitions used, removable disks, capacity and free capacity etc.
fsadtchk - File System Audit Checker: This script generates a complete and compressive information about the systems FS usage and current mounted, total available, type, size, free, and space occupying number one folder or file from the FS.
netadtchk - Network Audit Checker: This script generates a complete and compressive information about the network interfaces - hardware, virtual, local and other , firewall and its status, outgoing firewall status, current process that are having listening processes, port - ip - process - executable table, IPV4/6 feature, forwarding, masquerading for the system.
pwgen - Password generator: A complex human readable Linux Password Generator bash script. By default it generates a 8 character length password and can generate up to 32 characters, A numeric parameter can be passed to the script and numbers above 8 and below 33 and anything else will be less than 8 is set to 8 and greater that 32 is set to 32.
depchk - Dependency Checker: This script checks if your system has got the basic Linux utils that these scripts use, e.g. awk, sed etc.
usradtchk - User Auditor: Generates a neat set of informative data of the system users, groups, UID, GID range, root users and wheel users. Information saved only to the stdout.
adttmpcln - Auditor temp file cleaner: Deletes all the tmp files and folders that these utilities create.
Total Comments 0
