检查crontab合规，除root用户外，禁止普通用户使用crontab

Crontab_check ()

{

if [ -r /etc/cron.allow ] && [ ! -r /etc/cron.deny ]; then

echo "waring!~ only cron.allow exist is not 合规"

echo "请删除/etc/cron.allow 并创建/etc/cron.deny"

elif [ ! -r /etc/cron.allow ] && [ -r /etc/cron.deny ]; then

cat /etc/passwd | awk -F : '{print $1}'|egrep -v "root|bin|daemon|lp|mail|games|wwwrun|ftp|nobody|messagebus|haldaemon|sshd|man|news|uucp|uuid|postfix|mysql|at|ntp|polkituser|pulse|suse-ncc|gdm" > utmpfile

cat ./utmpfile | while read valcron 

do

grep $valcron /etc/cron.deny > /dev/null  

if [ $?  =  0 ]; then

echo "$valcron is in /etc/cron.deny"

else

echo "warning!~ $valcron is not in  /etc/cron.deny "  >> user.tmp

fi

done

cat ./user.tmp

echo "add these user in  /etc/cron.deny"

rm -rf ./utmpfile

rm -rf  ./user.tmp

elif [ ! -r /etc/cron.allow ] && [ ! -r /etc/cron.deny ]; then

echo "waring!~ all user can not use crontab includ root "

elif  [ -r /etc/cron.allow ] && [  -r /etc/cron.deny ] ; then

echo "waring!~ cron.allow and cron.deny  all exist is not 合规"

echo "请删除/etc/cron.allow"

fi

}

Crontab_check