xref: /illumos-gate/usr/src/man/man8/check-permissions.8 (revision dd72704bd9e794056c558153663c739e2012d721)
te
Copyright (c) 2003 Sun Microsystems, Inc. All Rights Reserved.
The contents of this file are subject to the terms of the Common Development and Distribution License (the "License"). You may not use this file except in compliance with the License.
You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE or http://www.opensolaris.org/os/licensing. See the License for the specific language governing permissions and limitations under the License.
When distributing Covered Code, include this CDDL HEADER in each file and include the License file at usr/src/OPENSOLARIS.LICENSE. If applicable, add the following below this CDDL HEADER, with the fields enclosed by brackets "[]" replaced with your own identifying information: Portions Copyright [yyyy] [name of copyright owner]
CHECK-PERMISSIONS 8 "Nov 10, 2003"
NAME
check-permissions - check permissions on mail rerouting files
SYNOPSIS

/usr/sbin/check-permissions [login]
DESCRIPTION

The check-permissions script is intended as a migration aid for sendmail(8). It checks the /etc/mail/sendmail.cf file for all configured alias files, and checks the alias files for :include: files. It also checks for certain .forward files. For each file that check-permissions checks, it verifies that none of the parent directories are group- or world-writable. If any directories are overly permissive, it is reported. Otherwise it reports that no unsafe directories were found.

As to which .forward files are checked, it depends on the arguments included on the command line. If no argument is given, the current user's home directory is checked for the presence of a .forward file. If any arguments are given, they are assumed to be valid logins, and the home directory of each one is checked.

If the special argument ALL is given, the passwd entry in the /etc/nsswitch.conf file is checked, and all password entries that can be obtained through the switch file are checked. In large domains, this can be time-consuming.

OPERANDS

The following operands are supported: login

Where login is a valid user name, checks the home directory for login.

ALL

Checks the home directory of all users.

FILES
/etc/mail/sendmail.cf

Defines environment for sendmail

/etc/mail/aliases

Ascii mail aliases file

ATTRIBUTES

See attributes(7) for descriptions of the following attributes:

ATTRIBUTE TYPE ATTRIBUTE VALUE
Interface Stability Evolving
SEE ALSO

aliases (5), attributes (7), getent (8), sendmail (8)