Files not found by 50_authentication_check

[aspi-dwtt]

From the logfile, I conclude that certain files in /etc where not found by the tool. Am I correct?
These files are present in the tested firmware image!

[+] Check users, groups and authentication
=================================================================

==> Users with UID zero (0)
-----------------------------------------------------------------
[*] Searching accounts with UID 0
[-] /etc/passwd not available

==> Non-unique accounts
-----------------------------------------------------------------
[*] Searching non-unique accounts
[-] /etc/passwd not available

==> Unique group IDs
-----------------------------------------------------------------
[*] Searching non-unique group ID's
[-] /etc/group not available

==> Unique group name
-----------------------------------------------------------------
[*] Searching non-unique group names
[-] /etc/group not available

==> Query user accounts
-----------------------------------------------------------------
[*] Reading system users
[-] /etc/passwd not available

==> Query NIS and NIS+ authentication support
-----------------------------------------------------------------
[*] Check nsswitch.conf
[-] /etc/nsswitch.conf not available

[m-1-k-3]

Interesting ... could you provide a link to the firmware?

[aspi-dwtt]

I'm sorry I can't share the firmware with you.
But I'm happy to test again when you've found a solution (a test run takes about 11 hours to complete in my current test setup)

[p4cx]

That makes it quite complicated to fix the bug, because the code should give this error only if there is no file. Maybe you can add some echo statements in module S50 to give us a more verbose output, e.g. between line 92 and 93:

  for PASSWD_FILE in "${PASSWD_FILE_PATHS[@]}"; do
    echo "$PASSWD_FILE"
    if [[ -f "$PASSWD_FILE" ]] ; then

To only run the module S50, you can specify this in the run command:

./emba.sh -f path_to_firmware -l path_to_log -W -t -r -s -m S50

EDIT: You will find module S50 in the module folder: /modules/S50_authentication_check.sh.

[m-1-k-3]

ist there a passwd file? Is this file in /etc or is it somewhere else?

[aspi-dwtt]

Hello Pascal, I’ve made the adaption you requested, and started a test run. I had to start the command with sudo. I’ve to leave the office now, I will get back to you on Monday Have a nice weekend.

[aspi-dwtt]

Hello Michael, Yes, the passwd, group, shadow and gshadow are all located in /etc

[aspi-dwtt]

Console output from the run with the extra 'echo' statement:

`
[+] Check users, groups and authentication

..
==> Users with UID zero (0)

...[*] Searching accounts with UID 0
..........
...[-] /etc/passwd not available
................
`

[p4cx]

Thanks for your help - this PR should now fix it for good and hopefully it works also on your machine.