检查crontab合规，除root用户外，禁止普通用户使用crontab

23113fff

Crontab_check ()
{
if [ -r /etc/cron.allow ] && [ ! -r /etc/cron.deny ]; then
echo "waring!~ only cron.allow exist is not 合规"
echo "请删除/etc/cron.allow 并创建/etc/cron.deny"
elif [ ! -r /etc/cron.allow ] && [ -r /etc/cron.deny ]; then
cat /etc/passwd | awk -F : '{print $1}'|egrep -v "root|bin|daemon|lp|mail|games|wwwrun|ftp|nobody|messagebus|haldaemon|sshd|man|news|uucp|uuid|postfix|mysql|at|ntp|polkituser|pulse|suse-ncc|gdm" > utmpfile
cat ./utmpfile | while read valcron
do
grep $valcron /etc/cron.deny > /dev/null  
if [ $?  =  0 ]; then
echo "$valcron is in /etc/cron.deny"
else
echo "warning!~ $valcron is not in  /etc/cron.deny "  >> user.tmp
fi
done
cat ./user.tmp
echo "add these user in  /etc/cron.deny"
rm -rf ./utmpfile
rm -rf  ./user.tmp
elif [ ! -r /etc/cron.allow ] && [ ! -r /etc/cron.deny ]; then
echo "waring!~ all user can not use crontab includ root "
elif  [ -r /etc/cron.allow ] && [  -r /etc/cron.deny ] ; then
echo "waring!~ cron.allow and cron.deny  all exist is not 合规"
echo "请删除/etc/cron.allow"
fi
}
Crontab_check