From 2fe7147d7bbeeca9c52a5b3d0b5162ceab7a125b Mon Sep 17 00:00:00 2001
From: Moe Jette <jette1@llnl.gov>
Date: Thu, 27 Mar 2003 17:32:33 +0000
Subject: [PATCH] Sample file access right test script.

---
 .../slurm_unit/slurmctld/security_2_1.csh     | 35 +++++++++++++++++++
 1 file changed, 35 insertions(+)
 create mode 100755 testsuite/slurm_unit/slurmctld/security_2_1.csh

diff --git a/testsuite/slurm_unit/slurmctld/security_2_1.csh b/testsuite/slurm_unit/slurmctld/security_2_1.csh
new file mode 100755
index 00000000000..2807e835481
--- /dev/null
+++ b/testsuite/slurm_unit/slurmctld/security_2_1.csh
@@ -0,0 +1,35 @@
+#!/bin/csh
+setenv CONFIG /etc/slurm.conf
+setenv DEPLOY /usr/local
+
+echo "Insure that files are not user writable"
+ls -ld $DEPLOY/bin/srun
+ls -ld $DEPLOY/bin/sinfo
+ls -ld $DEPLOY/bin/squeue
+ls -ld $DEPLOY/bin/scontrol
+ls -ld $DEPLOY/bin/scancel
+ls -ld $DEPLOY/sbin/slurmctld
+ls -ld $DEPLOY/sbin/slurmd
+ls -ld $CONFIG
+
+echo "Insure that configured files are not user writable"
+grep Epilog $CONFIG
+ls -ld /admin/sbin/slurm.epilog
+
+grep Prolog $CONFIG
+ls -ld /admin/sbin/slurm.prolog
+
+echo "Private Key must be non-readable too"
+grep JobCredential $CONFIG
+ls -ld /usr/local/slurm/private.key
+ls -ld /usr/local/slurm/public.cert
+
+grep PluginDir $CONFIG
+ls -ld /usr/local/lib/slurm
+ls -l  /usr/local/lib/slurm
+
+grep SlurmdSpoolDir $CONFIG
+ls -ld /tmp/slurmd.spool
+
+grep StateSaveLocation $CONFIG
+ls -ld /tmp/slurm.state
-- 
GitLab