From b5944fb24aed9d7ce2939664331cd8ceea6e1622 Mon Sep 17 00:00:00 2001
From: jonnyCodev <yonicodev@gmail.com>
Date: Mon, 3 Feb 2020 14:22:22 +0200
Subject: [PATCH] Check if user have unused console login

---
 checks/check_extra_774 | 21 +++++++++++++++++++++
 groups/group1_iam      |  2 +-
 2 files changed, 22 insertions(+), 1 deletion(-)
 create mode 100644 checks/check_extra_774

diff --git a/checks/check_extra_774 b/checks/check_extra_774
new file mode 100644
index 0000000000..984b0dec6e
--- /dev/null
+++ b/checks/check_extra_774
@@ -0,0 +1,21 @@
+CHECK_ID_extra774="1.23"
+CHECK_TITLE_extra774="[extra774] Check if user have unused console login"
+CHECK_SCORED_extra774="NOT_SCORED"
+CHECK_TYPE_extra774="EXTRA"
+CHECK_ALTERNATE_check774="extra774"
+MAX_DAYS=-30
+extra774(){
+  LIST_USERS_WITH_PASSWORD_ENABLED=$(cat $TEMP_REPORT_FILE|awk -F, '{ print $1,$4,$5 }' |grep true | awk '{ print $1 }')
+
+  for i in $LIST_USERS_WITH_PASSWORD_ENABLED; do
+    user=$(cat $TEMP_REPORT_FILE|awk -F, '{ print $1,$3 }' |grep "^$i " |awk '{ print $1 }')
+    last_login_date=$(cat $TEMP_REPORT_FILE|awk -F, '{ print $1,$3 }' |grep "^$i " |awk '{ print $2 }')
+
+    days_not_in_use=$(how_many_days_from_today ${last_login_date%T*})
+    if [ "$days_not_in_use" -lt "$MAX_DAYS" ];then
+        textFail "User $user has not used console login for more then ${MAX_DAYS#-} days"
+      else
+        textPass "User $user has used console login in the past ${MAX_DAYS#-} days"
+    fi
+  done
+}
\ No newline at end of file
diff --git a/groups/group1_iam b/groups/group1_iam
index e999b7c74e..190260305c 100644
--- a/groups/group1_iam
+++ b/groups/group1_iam
@@ -12,4 +12,4 @@ GROUP_ID[1]='group1'
 GROUP_NUMBER[1]='1.0'
 GROUP_TITLE[1]='Identity and Access Management - [group1] **********************'
 GROUP_RUN_BY_DEFAULT[1]='Y' # run it when execute_all is called
-GROUP_CHECKS[1]='check11,check12,check13,check14,check15,check16,check17,check18,check19,check110,check111,check112,check113,check114,check115,check116,check117,check118,check119,check120,check121,check122'
+GROUP_CHECKS[1]='check11,check12,check13,check14,check15,check16,check17,check18,check19,check110,check111,check112,check113,check114,check115,check116,check117,check118,check119,check120,check121,check122,extra774'