Package: harden-doc
Version: 3.10
Severity: normal

Hi!

Section 12.1.12.1 _Are all system users necessary?_[1] suggests a
command intended to "easily find users who don't own any files":

       cut -f 1 -d : /etc/passwd | \
       while read i; do find / -user "$i" | grep -q . && echo "$i"; done

I tried it out, and it seems to do just the opposite.  In other words,
it finds the users who *do* own files.
Substituting a || for && seems to fix the problem.

[1] which is in
http://www.debian.org/doc/manuals/securing-debian-howto/ch12.en.html#s12.1


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to