daily revision 1.35
11.1Scgd#!/bin/sh - 21.1Scgd# 31.35Saymeric# $NetBSD: daily,v 1.35 2001/04/22 20:34:48 aymeric Exp $ 41.21Smikel# @(#)daily 8.2 (Berkeley) 1/25/94 51.1Scgd# 61.18Smrg 71.27Smycroftexport PATH=/bin:/usr/bin:/sbin:/usr/sbin 81.28Slukemumask 077 91.28Slukem 101.28Slukemif [ -s /etc/daily.conf ]; then 111.28Slukem . /etc/daily.conf 121.28Slukemfi 131.28Slukem 141.20Smikelhost=`hostname` 151.28Slukemdate=`date` 161.1Scgd 171.28Slukemecho "To: ${MAILTO:-root}" 181.28Slukemecho "Subject: $host daily output for $date" 191.28Slukemecho "" 201.18Smrg 211.25Slukemif [ -f /etc/rc.subr ]; then 221.25Slukem . /etc/rc.subr 231.25Slukemelse 241.25Slukem echo "Can't read /etc/rc.subr; aborting." 251.25Slukem exit 1; 261.25Slukemfi 271.25Slukem 281.23Sphilif [ -z "$MAILTO" -o "$USER" != "root" ]; then 291.27Smycroft MAILTO=root 301.23Sphilfi 311.23Sphil 321.22Slukemecho "" 331.22Slukemecho "Uptime: " `uptime` 341.18Smrg 351.29Sabs# Uncommenting any of the finds below would open up a race condition attack 361.29Sabs# based on symlinks, potentially allowing removal of any file on the system. 371.29Sabs# 381.17Sjtc#echo "" 391.17Sjtc#echo "Removing scratch and junk files:" 401.17Sjtc#if [ -d /tmp -a ! -h /tmp ]; then 411.17Sjtc# cd /tmp && { 421.17Sjtc# find . -type f -atime +3 -exec rm -f -- {} \; 431.17Sjtc# find . ! -name . -type d -mtime +1 -exec rmdir -- {} \; \ 441.17Sjtc# >/dev/null 2>&1; } 451.17Sjtc#fi 461.1Scgd 471.17Sjtc#if [ -d /var/tmp -a ! -h /var/tmp ]; then 481.17Sjtc# cd /var/tmp && { 491.17Sjtc# find . ! -name . -atime +7 -exec rm -f -- {} \; 501.35Saymeric# find . ! \( -name . -o -name vi.recover \) -type d \ 511.35Saymeric# -mtime +1 -exec rmdir -- {} \; \ 521.17Sjtc# >/dev/null 2>&1; } 531.17Sjtc#fi 541.10Scgd 551.15Spk# Additional junk directory cleanup would go like this: 561.15Spk#if [ -d /scratch -a ! -h /scratch ]; then 571.15Spk# cd /scratch && { 581.15Spk# find . ! -name . -atime +1 -exec rm -f -- {} \; 591.15Spk# find . ! -name . -type d -mtime +1 -exec rmdir -- {} \; \ 601.15Spk# >/dev/null 2>&1; } 611.15Spk#fi 621.10Scgd 631.17Sjtc#if [ -d /var/rwho -a ! -h /var/rwho ] ; then 641.17Sjtc# cd /var/rwho && { 651.17Sjtc# find . ! -name . -mtime +7 -exec rm -f -- {} \; ; } 661.17Sjtc#fi 671.10Scgd 681.18SmrgTMPDIR=/tmp/_daily.$$ 691.18Smrg 701.18Smrgif ! mkdir $TMPDIR; then 711.18Smrg echo can not create $TMPDIR. 721.18Smrg exit 1 731.18Smrgfi 741.18Smrg 751.18Smrgif ! cd $TMPDIR; then 761.18Smrg echo can not cd to $TMPDIR. 771.18Smrg exit 1 781.18Smrgfi 791.18Smrg 801.10ScgdTMP=daily.$$ 811.18SmrgTMP2=daily2.$$ 821.18Smrg 831.25Slukemif checkyesno find_core; then 841.18Smrg find / \( ! -fstype local -o -fstype rdonly -o -fstype fdesc \ 851.14Smycroft -o -fstype kernfs -o -fstype procfs \) -a -prune -o \ 861.18Smrg -name 'lost+found' -a -prune -o \ 871.26Snathanw \( -name '*.core' -o -name 'core' \) -a -print > $TMP 881.18Smrg# \( -name '[#,]*' -o -name '.#*' -o -name a.out \ 891.18Smrg# -o -name '*.CKP' -o -name '.emacs_[0-9]*' \) \ 901.18Smrg# -a -atime +3 -exec rm -f -- {} \; -a -print > $TMP 911.18Smrg 921.26Snathanw egrep '\.core$|^core$' $TMP > $TMP2 931.18Smrg if [ -s $TMP2 ]; then 941.18Smrg echo "" 951.18Smrg echo "Possible core dumps:" 961.18Smrg cat $TMP2 971.18Smrg fi 981.18Smrg 991.18Smrg# egrep -v '\.core' $TMP > $TMP2 1001.18Smrg# if [ -s $TMP2 ]; then 1011.18Smrg# echo "" 1021.18Smrg# echo "Deleted files:" 1031.18Smrg# cat $TMP2 1041.18Smrg# fi 1051.10Scgd 1061.18Smrg rm -f $TMP $TMP2 1071.18Smrgfi 1081.10Scgd 1091.25Slukemif checkyesno run_msgs; then 1101.18Smrg msgs -c 1111.18Smrgfi 1121.1Scgd 1131.25Slukemif checkyesno expire_news && [ -f /etc/news.expire ]; then 1141.1Scgd /etc/news.expire 1151.1Scgdfi 1161.1Scgd 1171.25Slukemif checkyesno purge_accounting && [ -f /var/account/acct ]; then 1181.21Smikel echo "" 1191.21Smikel echo "Purging accounting records:" 1201.21Smikel mv /var/account/acct.2 /var/account/acct.3 1211.21Smikel mv /var/account/acct.1 /var/account/acct.2 1221.21Smikel mv /var/account/acct.0 /var/account/acct.1 1231.21Smikel cp /var/account/acct /var/account/acct.0 1241.21Smikel sa -sq 1251.1Scgdfi 1261.1Scgd 1271.25Slukemif checkyesno run_calendar; then 1281.18Smrg calendar -a > $TMP 1291.18Smrg if [ -s $TMP ]; then 1301.18Smrg echo "" 1311.18Smrg echo "Running calendar:" 1321.18Smrg cat $TMP 1331.18Smrg fi 1341.18Smrg rm -f $TMP 1351.18Smrgfi 1361.1Scgd 1371.25Slukemif checkyesno check_uucp && \ 1381.25Slukem [ -d /var/spool/uucp -a -f /usr/libexec/uucp/clean.daily ]; then 1391.1Scgd echo "" 1401.1Scgd echo "Cleaning up UUCP:" 1411.24Slukem su daemon -c /usr/libexec/uucp/clean.daily 1421.1Scgdfi 1431.1Scgd 1441.25Slukemif checkyesno check_disks; then 1451.18Smrg df -k > $TMP 1461.18Smrg dump W > $TMP2 1471.18Smrg if [ -s $TMP -o -s $TMP2 ]; then 1481.18Smrg echo "" 1491.18Smrg echo "Checking subsystem status:" 1501.18Smrg echo "" 1511.18Smrg echo "disks:" 1521.18Smrg if [ -s $TMP ]; then 1531.18Smrg cat $TMP 1541.18Smrg echo "" 1551.18Smrg fi 1561.18Smrg if [ -s $TMP2 ]; then 1571.18Smrg cat $TMP2 1581.18Smrg echo "" 1591.18Smrg fi 1601.18Smrg echo "" 1611.18Smrg fi 1621.18Smrgfi 1631.18Smrg 1641.18Smrgrm -f $TMP $TMP2 1651.18Smrg 1661.25Slukemif checkyesno check_mailq; then 1671.18Smrg mailq > $TMP 1681.18Smrg if ! grep -q "^Mail queue is empty$" $TMP; then 1691.18Smrg echo "" 1701.18Smrg echo "mail:" 1711.18Smrg cat $TMP 1721.18Smrg fi 1731.18Smrgfi 1741.18Smrg 1751.18Smrgrm -f $TMP 1761.1Scgd 1771.25Slukemif checkyesno check_uucp && [ -d /var/spool/uucp ]; then 1781.18Smrg uustat -a > $TMP 1791.18Smrg if [ -s $TMP ]; then 1801.18Smrg echo "" 1811.18Smrg echo "uucp:" 1821.21Smikel cat $TMP 1831.18Smrg fi 1841.18Smrgfi 1851.1Scgd 1861.18Smrgrm -f $TMP 1871.1Scgd 1881.25Slukemif checkyesno check_network; then 1891.18Smrg echo "" 1901.18Smrg echo "network:" 1911.33Sitojun netstat -inv 1921.1Scgd echo "" 1931.18Smrg t=/var/rwho/* 1941.18Smrg if [ "$t" != '/var/rwho/*' ]; then 1951.18Smrg ruptime 1961.18Smrg fi 1971.1Scgdfi 1981.1Scgd 1991.25Slukemif checkyesno run_fsck; then 2001.18Smrg echo "" 2011.18Smrg echo "Checking filesystems:" 2021.18Smrg fsck -n | grep -v '^\*\* Phase' 2031.18Smrgfi 2041.1Scgd 2051.1Scgdecho "" 2061.25Slukemif checkyesno run_rdist && [ -f /etc/Distfile ]; then 2071.1Scgd echo "Running rdist:" 2081.20Smikel if [ -d /var/log/rdist ]; then 2091.30Senami logf=`date +%Y.%b.%d` 2101.20Smikel rdist -f /etc/Distfile 2>&1 | tee /var/log/rdist/$logf 2111.20Smikel else 2121.20Smikel rdist -f /etc/Distfile 2131.20Smikel fi 2141.1Scgdfi 2151.1Scgd 2161.25Slukemif checkyesno run_security; then 2171.28Slukem SECOUT=$TMPDIR/sec 2181.28Slukem sh /etc/security 2>&1 > $SECOUT 2191.28Slukem if [ ! -s $SECOUT ]; then 2201.28Slukem echo "Nothing to report on $date" > $SECOUT 2211.28Slukem fi 2221.28Slukem mail -s "$host daily insecurity output for $date" $MAILTO < $SECOUT 2231.34Shubertffi 2241.34Shubertf 2251.34Shubertfif checkyesno run_skeyaudit; then 2261.34Shubertf echo "" 2271.34Shubertf echo "Checking remaining s/key OTPs:" 2281.34Shubertf skeyaudit 2291.31Sadfi 2301.31Sad 2311.31Sadif [ -f /etc/daily.local ]; then 2321.31Sad echo "" 2331.31Sad echo "Running /etc/daily.local:" 2341.31Sad . /etc/daily.local 2351.18Smrgfi 2361.18Smrg 2371.18Smrgrm -rf $TMPDIR 238