#!/usr/bin/perl -w
# 
# Check.pl
# Written by David Allen
# s2mdalle@titan.vcu.edu
# http://opop.nols.com/
#
# Released under the terms of the GNU GPL
#
# Run the program with an argument of the directory you want to completely scan
# Usage:
# check.pl / 
# 
# Currently this program DOES NOT follow symlinks because of some program's
# tendencies to have circular symlinks which will run you out of memory 
# pretty fast.  And that's evil.  Maybe I'll make it check for circular 
# symlinks later, but right now, that's a real pain in the ass.
#
# This program reports SUID, SGID, STICKY, writeable files by
# the effective user.  This is best run with the permissions of a regular
# user who shouldn't be editing a lot of your files.  :)
# 
# It prints everything to STDOUT by default.  Redirect the output wherever
# the hell you want it.

use strict;  # Keep me honest

my $root = shift;
my $BEGINNING_LEVEL=0;

if(not $root)
{
    # Initialize if the user didn't give us anything to cling to.
    $root="/";
}

# Level indexing is provided for debugging and to check if it's going out
# of control.  In dirinfo() you can adjust what the warning and error levels
# are for the number of directory levels deep this will check.
print "Calling dirinfo\n";
dirinfo($root, $BEGINNING_LEVEL);

sub dirinfo
{
    my $dirname = shift;
    my $level = shift;
    my $HANDLE;
    my $MAXLEVEL=100;
    my $WARNINGLEVEL=50;

    if($level==$WARNINGLEVEL)
    {
	print STDERR "WARNING:  Deep directory structure.  I hope you have some serious RAM free...\n";
    }
    if($level>$MAXLEVEL)
    {
	print STDERR "ERROR:  Max recursion met - directory structure deeper than $MAXLEVEL directories.  That's bad.  You can change the default in the script, or you can see if you can find any circular symlinks that are causing the problem.  Check the end of your output for clues.\n\n";
	die "ERROR:  Max-eval-depth error.\n";
    }

    opendir HANDLE, "$dirname" or return(-1);

    my @allfiles = readdir HANDLE;
    
#    print  "Reading info on \"$dirname\"...\n";

    TORTURE: foreach my $file (@allfiles)
    {
	my $foobar;
	
	if($dirname eq "/")
	{
	    $foobar = $dirname . $file;
	}
	else
	{
	    $foobar = $dirname. "/". $file;
	}
	
	# print "\"$foobar\" level $level\n";
	if(($file eq ".") or ($file eq ".."))
	{
	    # Go on your merry way...ignore this one.
	}

	# If the file is writeable, and doesn't belong to the user running
	# this script, then it gets reported.
	elsif((-W $foobar) and (not (-O $foobar)))  # File is writeable&&!owned
	{
	    # If it's a directory, report it as such.
	    if(-d $foobar)  # File is a directory
	    {
		print "\"$foobar\" ### WRITEABLE DIR\n"
	    }
	    else
	    {
		my $fileinfo=`ls -l "$foobar"`;
		chomp($fileinfo);
		print "\"$fileinfo\" ### WRITEABLE\n";
	    } # End else 
	} # End elsif
	elsif(-l $foobar)
	{
	    # my $fileinfo=`ls -l "$foobar"`;
	    # chomp($fileinfo);
	    # print "\"$fileinfo\" ### SYMLINK\n";
	    # Symlink evilness.  Especially with GNOME.  :(
	}
	elsif(-d $foobar)  # File is a directory
	{
	    # File is a directory - recurse through it
#	    DEBUG: print "Entering \"$file\" coming from \"$dirname\"\n";
	    my $tmp=dirinfo($foobar, ($level+1));
	    if($tmp == -1)
	    {
		print "Directory $foobar not readable with your sorry UID.\n";
	    }
	}
	elsif(-u $foobar)   # File is SUID
	{
	    my $fileinfo=`ls -l "$foobar"`;
	    chomp($fileinfo);
	    print "$fileinfo ### SUID\n";
	}
	elsif(-g $foobar)  # File is SGID
	{
	    my $fileinfo=`ls -l "$foobar"`;
	    chomp($fileinfo);
	    print "$fileinfo ### SGID\n";
	}
	elsif(-k $foobar)  # File is sticky
	{
	    my $fileinfo=`ls -l "$foobar"`;
	    chomp($fileinfo);
	    print "$fileinfo ### STICKY\n";
	}
	else
	{
#	    DEBUG2: print "\"$foobar\" doesn't look very interesting to me.\n";
	}
    } # End foreach
} # End dirinfo