#!/bin/sh
#writed by ED
#29/11/2012

exludeusers="^nctest:|^wh:|^mailman:"
if [ -f /usr/sbin/cagefsctl ]
 then
   if [ -n "`cagefsctl --display-user-mode | grep Enable`" ]
    then
      for i in `grep "jailshell$" /etc/passwd | grep -v -E "$exludeusers"`
      do
	if [ `echo $i|awk -F':' {' print $3 '}` -gt 500 ]
	then
	badshellusers=$badshellusers`echo $i|awk -F":" {' print $1 '}`", "
	fi
      done
	if [ -n "$badshellusers" ]
	  then
	 echo "Warning! Jail shell was enabled for the following user(s): "$badshellusers
	 exit 1
	  else
	 echo "Ok."
	fi
  fi
 else
	for i in `grep "/bin/bash$" /etc/passwd | grep -v -E "$exludeusers"`
	 do
	if [ "`echo $i|awk -F':' {' print $3 '}`" -gt 500 ]
	  then
	badshellusers=$badshellusers`echo $i|awk -F":" {' print $1 '}`", "
	fi
	 done
   if [ -n "$badshellusers" ]
    then
   echo "Warning! Bash shell was enabled for the following user(s): "$badshellusers
   exit 1
    else
   echo "Ok."
   fi
fi