[sudo-users] Script to list users and privileges?

[David Barr]

Good Morning!

I know this isn’t part of the sudo release, but I thought I’d ask here anyway before I reinvent the wheel.

I need to come up with a script that will tell our cybersecurity team who has what privileges on our Linux and Solaris hosts. My first thought was to iterate through sudoers to collect privileges and users/groups, and then iterate through group members for additional users.

My second thought was that someone on this list might already be doing something similar. I recall seeing a similar need come across this list in the last year or so.

So, if you have a script that starts with sudoers and produces a list of users with privileges, would you be willing to share that script with me? Full credit in the comments, of course!

Thanks!
David



--

David - Offbeat		http://dafydd.livejournal.com
dafydd - Online		http://pgp.mit.edu/
Battalion 4 - Black Rock City Emergency Services Department
	Integrity*Commitment*Communication*Support

----5----1----5----2----5----3----5----4----5----5----5----6----5----7--

Rene Descartes walks into his neighborhood watering hole. The publican sees him and asks, "Will you have your usual, sir?"

Descartes ponders a moment and replies, "I think not."

And promptly disappears...



-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 495 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <http://www.sudo.ws/pipermail/sudo-users/attachments/20140320/16c43a79/attachment.bin>