daily revision 1.35
11.1Scgd#!/bin/sh -
21.1Scgd#
31.35Saymeric#	$NetBSD: daily,v 1.35 2001/04/22 20:34:48 aymeric Exp $
41.21Smikel#	@(#)daily	8.2 (Berkeley) 1/25/94
51.1Scgd#
61.18Smrg
71.27Smycroftexport PATH=/bin:/usr/bin:/sbin:/usr/sbin
81.28Slukemumask 077
91.28Slukem
101.28Slukemif [ -s /etc/daily.conf ]; then
111.28Slukem	. /etc/daily.conf
121.28Slukemfi
131.28Slukem
141.20Smikelhost=`hostname`
151.28Slukemdate=`date`
161.1Scgd
171.28Slukemecho "To: ${MAILTO:-root}"
181.28Slukemecho "Subject: $host daily output for $date"
191.28Slukemecho ""
201.18Smrg
211.25Slukemif [ -f /etc/rc.subr ]; then
221.25Slukem	. /etc/rc.subr
231.25Slukemelse
241.25Slukem	echo "Can't read /etc/rc.subr; aborting."
251.25Slukem	exit 1;
261.25Slukemfi
271.25Slukem
281.23Sphilif [ -z "$MAILTO" -o "$USER" != "root" ]; then
291.27Smycroft	MAILTO=root
301.23Sphilfi
311.23Sphil
321.22Slukemecho ""
331.22Slukemecho "Uptime: " `uptime`
341.18Smrg
351.29Sabs# Uncommenting any of the finds below would open up a race condition attack
361.29Sabs# based on symlinks, potentially allowing removal of any file on the system.
371.29Sabs#
381.17Sjtc#echo ""
391.17Sjtc#echo "Removing scratch and junk files:"
401.17Sjtc#if [ -d /tmp -a ! -h /tmp ]; then
411.17Sjtc#	cd /tmp && {
421.17Sjtc#	find . -type f -atime +3 -exec rm -f -- {} \;
431.17Sjtc#	find . ! -name . -type d -mtime +1 -exec rmdir -- {} \; \
441.17Sjtc#	    >/dev/null 2>&1; }
451.17Sjtc#fi
461.1Scgd
471.17Sjtc#if [ -d /var/tmp -a ! -h /var/tmp ]; then
481.17Sjtc#	cd /var/tmp && {
491.17Sjtc#	find . ! -name . -atime +7 -exec rm -f -- {} \;
501.35Saymeric#	find . ! \( -name . -o -name vi.recover \) -type d \
511.35Saymeric#		-mtime +1 -exec rmdir -- {} \; \
521.17Sjtc#	    >/dev/null 2>&1; }
531.17Sjtc#fi
541.10Scgd
551.15Spk# Additional junk directory cleanup would go like this:
561.15Spk#if [ -d /scratch -a ! -h /scratch ]; then
571.15Spk#	cd /scratch && {
581.15Spk#	find . ! -name . -atime +1 -exec rm -f -- {} \;
591.15Spk#	find . ! -name . -type d -mtime +1 -exec rmdir -- {} \; \
601.15Spk#	    >/dev/null 2>&1; }
611.15Spk#fi
621.10Scgd
631.17Sjtc#if [ -d /var/rwho -a ! -h /var/rwho ] ; then
641.17Sjtc#	cd /var/rwho && {
651.17Sjtc#	find . ! -name . -mtime +7 -exec rm -f -- {} \; ; }
661.17Sjtc#fi
671.10Scgd
681.18SmrgTMPDIR=/tmp/_daily.$$
691.18Smrg
701.18Smrgif ! mkdir $TMPDIR; then
711.18Smrg	echo can not create $TMPDIR.
721.18Smrg	exit 1
731.18Smrgfi
741.18Smrg
751.18Smrgif ! cd $TMPDIR; then
761.18Smrg	echo can not cd to $TMPDIR.
771.18Smrg	exit 1
781.18Smrgfi
791.18Smrg
801.10ScgdTMP=daily.$$
811.18SmrgTMP2=daily2.$$
821.18Smrg
831.25Slukemif checkyesno find_core; then
841.18Smrg	find / \( ! -fstype local -o -fstype rdonly -o -fstype fdesc \
851.14Smycroft		-o -fstype kernfs -o -fstype procfs \) -a -prune -o \
861.18Smrg		-name 'lost+found' -a -prune -o \
871.26Snathanw		\( -name '*.core' -o -name 'core' \) -a -print > $TMP
881.18Smrg#		\( -name '[#,]*' -o -name '.#*' -o -name a.out \
891.18Smrg#		   -o -name '*.CKP' -o -name '.emacs_[0-9]*' \) \
901.18Smrg#			-a -atime +3 -exec rm -f -- {} \; -a -print > $TMP
911.18Smrg
921.26Snathanw	egrep '\.core$|^core$' $TMP > $TMP2
931.18Smrg	if [ -s $TMP2 ]; then
941.18Smrg		echo ""
951.18Smrg		echo "Possible core dumps:"
961.18Smrg		cat $TMP2
971.18Smrg	fi
981.18Smrg
991.18Smrg#	egrep -v '\.core' $TMP > $TMP2
1001.18Smrg#	if [ -s $TMP2 ]; then
1011.18Smrg#		echo ""
1021.18Smrg#		echo "Deleted files:"
1031.18Smrg#		cat $TMP2
1041.18Smrg#	fi
1051.10Scgd
1061.18Smrg	rm -f $TMP $TMP2
1071.18Smrgfi
1081.10Scgd
1091.25Slukemif checkyesno run_msgs; then
1101.18Smrg	msgs -c
1111.18Smrgfi
1121.1Scgd
1131.25Slukemif checkyesno expire_news && [ -f /etc/news.expire ]; then
1141.1Scgd	/etc/news.expire
1151.1Scgdfi
1161.1Scgd
1171.25Slukemif checkyesno purge_accounting && [ -f /var/account/acct ]; then
1181.21Smikel	echo ""
1191.21Smikel	echo "Purging accounting records:"
1201.21Smikel	mv /var/account/acct.2 /var/account/acct.3
1211.21Smikel	mv /var/account/acct.1 /var/account/acct.2
1221.21Smikel	mv /var/account/acct.0 /var/account/acct.1
1231.21Smikel	cp /var/account/acct /var/account/acct.0
1241.21Smikel	sa -sq
1251.1Scgdfi
1261.1Scgd
1271.25Slukemif checkyesno run_calendar; then
1281.18Smrg	calendar -a > $TMP
1291.18Smrg	if [ -s $TMP ]; then
1301.18Smrg		echo ""
1311.18Smrg		echo "Running calendar:"
1321.18Smrg		cat $TMP
1331.18Smrg	fi
1341.18Smrg	rm -f $TMP
1351.18Smrgfi
1361.1Scgd
1371.25Slukemif checkyesno check_uucp && \
1381.25Slukem    [ -d /var/spool/uucp -a -f /usr/libexec/uucp/clean.daily ]; then
1391.1Scgd	echo ""
1401.1Scgd	echo "Cleaning up UUCP:"
1411.24Slukem	su daemon -c /usr/libexec/uucp/clean.daily
1421.1Scgdfi
1431.1Scgd
1441.25Slukemif checkyesno check_disks; then
1451.18Smrg	df -k > $TMP 
1461.18Smrg	dump W > $TMP2
1471.18Smrg	if [ -s $TMP -o -s $TMP2 ]; then
1481.18Smrg		echo ""
1491.18Smrg		echo "Checking subsystem status:"
1501.18Smrg		echo ""
1511.18Smrg		echo "disks:"
1521.18Smrg		if [ -s $TMP ]; then
1531.18Smrg			cat $TMP
1541.18Smrg			echo ""
1551.18Smrg		fi
1561.18Smrg		if [ -s $TMP2 ]; then
1571.18Smrg			cat $TMP2
1581.18Smrg			echo ""
1591.18Smrg		fi
1601.18Smrg		echo ""
1611.18Smrg	fi
1621.18Smrgfi
1631.18Smrg
1641.18Smrgrm -f $TMP $TMP2
1651.18Smrg
1661.25Slukemif checkyesno check_mailq; then
1671.18Smrg	mailq > $TMP
1681.18Smrg	if ! grep -q "^Mail queue is empty$" $TMP; then
1691.18Smrg		echo ""
1701.18Smrg		echo "mail:"
1711.18Smrg		cat $TMP
1721.18Smrg	fi
1731.18Smrgfi
1741.18Smrg
1751.18Smrgrm -f $TMP
1761.1Scgd
1771.25Slukemif checkyesno check_uucp && [ -d /var/spool/uucp ]; then
1781.18Smrg	uustat -a > $TMP
1791.18Smrg	if [ -s $TMP ]; then
1801.18Smrg		echo ""
1811.18Smrg		echo "uucp:"
1821.21Smikel		cat $TMP
1831.18Smrg	fi
1841.18Smrgfi
1851.1Scgd
1861.18Smrgrm -f $TMP
1871.1Scgd
1881.25Slukemif checkyesno check_network; then
1891.18Smrg	echo ""
1901.18Smrg	echo "network:"
1911.33Sitojun	netstat -inv
1921.1Scgd	echo ""
1931.18Smrg	t=/var/rwho/*
1941.18Smrg	if [ "$t" != '/var/rwho/*' ]; then
1951.18Smrg		ruptime
1961.18Smrg	fi
1971.1Scgdfi
1981.1Scgd
1991.25Slukemif checkyesno run_fsck; then
2001.18Smrg	echo ""
2011.18Smrg	echo "Checking filesystems:"
2021.18Smrg	fsck -n | grep -v '^\*\* Phase'
2031.18Smrgfi
2041.1Scgd
2051.1Scgdecho ""
2061.25Slukemif checkyesno run_rdist && [ -f /etc/Distfile ]; then
2071.1Scgd	echo "Running rdist:"
2081.20Smikel	if [ -d /var/log/rdist ]; then
2091.30Senami		logf=`date +%Y.%b.%d`
2101.20Smikel		rdist -f /etc/Distfile 2>&1 | tee /var/log/rdist/$logf
2111.20Smikel	else
2121.20Smikel		rdist -f /etc/Distfile 
2131.20Smikel	fi
2141.1Scgdfi
2151.1Scgd
2161.25Slukemif checkyesno run_security; then
2171.28Slukem	SECOUT=$TMPDIR/sec
2181.28Slukem	sh /etc/security 2>&1 > $SECOUT
2191.28Slukem	if [ ! -s $SECOUT ]; then
2201.28Slukem		echo "Nothing to report on $date" > $SECOUT
2211.28Slukem	fi
2221.28Slukem	mail -s "$host daily insecurity output for $date" $MAILTO < $SECOUT
2231.34Shubertffi
2241.34Shubertf
2251.34Shubertfif checkyesno run_skeyaudit; then
2261.34Shubertf	echo ""
2271.34Shubertf	echo "Checking remaining s/key OTPs:"
2281.34Shubertf	skeyaudit
2291.31Sadfi
2301.31Sad
2311.31Sadif [ -f /etc/daily.local ]; then
2321.31Sad	echo ""
2331.31Sad	echo "Running /etc/daily.local:"
2341.31Sad	. /etc/daily.local
2351.18Smrgfi
2361.18Smrg
2371.18Smrgrm -rf $TMPDIR
238