Skip to content
Snippets Groups Projects
Commit 31a01156 authored by Moe Jette's avatar Moe Jette
Browse files

Update list of files checked for access rights and ownership

parent feec92b5
No related branches found
No related tags found
No related merge requests found
#!/bin/csh #!/bin/csh
setenv CONFIG /etc/slurm/slurm.conf setenv CONFIG /etc/slurm
setenv DEPLOY /usr setenv DEPLOY /usr
echo "Insure that executable files are not user writable" echo ""
echo "Insure that executable files are not world writable"
ls -ld $DEPLOY/bin/srun ls -ld $DEPLOY/bin/srun
ls -ld $DEPLOY/bin/sacct
ls -ld $DEPLOY/bin/sinfo ls -ld $DEPLOY/bin/sinfo
ls -ld $DEPLOY/bin/squeue ls -ld $DEPLOY/bin/squeue
ls -ld $DEPLOY/bin/scontrol ls -ld $DEPLOY/bin/scontrol
ls -ld $DEPLOY/bin/scancel ls -ld $DEPLOY/bin/scancel
ls -ld $DEPLOY/sbin/slurmctld ls -ld $DEPLOY/sbin/slurm*
ls -ld $DEPLOY/sbin/slurmd
ls -ld $CONFIG ls -ld $CONFIG
ls -l $CONFIG
echo "Insure that configured files are not user writable" echo ""
grep Epilog $CONFIG echo "Insure that configured files are not world writable"
#ls -ld /admin/sbin/slurm.epilog grep Prolog $CONFIG/slurm.conf
ls -ld /etc/slurm/prolog
ls -ld $DEPLOY/sbin/slurm_prolog
echo "Private Key must be non-readable too" grep Epilog $CONFIG/slurm.conf
grep JobCredential $CONFIG ls -ld /etc/slurm/epilog
ls -ld $DEPLOY/sbin/slurm_epilog
echo ""
echo "Both Job Keys are not world readable"
echo "Private Key must not be world readable too"
grep JobCredential $CONFIG/slurm.conf
ls -ld /etc/slurm/slurm.key ls -ld /etc/slurm/slurm.key
ls -ld /etc/slurm/slurm.cert ls -ld /etc/slurm/slurm.cert
echo "Plugin directory and its contents must be non-writable" echo ""
grep PluginDir $CONFIG echo "Plugin directory and its contents must not be world writable"
ls -ld /usr/lib/slurm grep PluginDir $CONFIG/slurm.conf
ls -l /usr/lib/slurm ls -ld /usr/lib*/slurm
ls -l /usr/lib*/slurm
grep Prolog $CONFIG
#ls -ld /admin/sbin/slurm.prolog
echo "Spool and log files must be non-writeable" echo ""
grep SlurmdSpoolDir $CONFIG echo "Spool and log files must be not be world writeable"
ls -ld /var/spool/slurm grep SlurmdSpoolDir $CONFIG/slurm.conf
grep StateSaveLocation $CONFIG grep StateSaveLocation $CONFIG/slurm.conf
ls -ld /usr/local/tmp/slurm/adev grep SlurmctldLogFile $CONFIG/slurm.conf
grep SlurmctldLogFile $CONFIG grep SlurmdLogFile $CONFIG/slurm.conf
ls -ld /var/log/slurm/slurmctld.log grep JobCompLog $CONFIG/slurm.conf
ls -ld /usr/local/tmp/slurm/bgl
ls -l /usr/local/tmp/slurm/bgl
ls -ld /var/log/slurm*
ls -l /var/log/slurm*
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment