Nagios Support Forum

Code: Select all

#!/usr/bin/env bash

# Nagios plugin to check file permissions, owner, and group.
# Usage: ./check_file_permissions.sh /path/to/file expected_owner expected_group expected_mode

FILE_PATH="$1"
EXPECTED_OWNER="$2"
EXPECTED_GROUP="$3"
EXPECTED_MODE="$4"

if [[ -z "$FILE_PATH" || -z "$EXPECTED_OWNER" || -z "$EXPECTED_GROUP" || -z "$EXPECTED_MODE" ]]; then
  echo "Usage: $0 <file_path> <expected_owner> <expected_group> <expected_mode>"
  exit 3
fi

CURRENT_OWNER=$(stat -c "%U" "$FILE_PATH" 2>/dev/null)
CURRENT_GROUP=$(stat -c "%G" "$FILE_PATH" 2>/dev/null)
CURRENT_MODE=$(stat -c "%a" "$FILE_PATH" 2>/dev/null)

if [[ -z "$CURRENT_OWNER" || -z "$CURRENT_GROUP" || -z "$CURRENT_MODE" ]]; then
  echo "CRITICAL: Unable to stat $FILE_PATH (file not found or permission denied)."
  exit 2
fi

if [[ "$CURRENT_OWNER" == "$EXPECTED_OWNER" && \
      "$CURRENT_GROUP" == "$EXPECTED_GROUP" && \
      "$CURRENT_MODE" == "$EXPECTED_MODE" ]]; then
  echo "OK: $FILE_PATH permissions/owner/group match (owner=$CURRENT_OWNER, group=$CURRENT_GROUP, mode=$CURRENT_MODE)."
  exit 0
else
  echo "CRITICAL: Mismatch for $FILE_PATH (owner=$CURRENT_OWNER, group=$CURRENT_GROUP, mode=$CURRENT_MODE)"
  exit 2
fi

Code: Select all

check_file_permissions.sh /root/.ssh username usergroup 700