daily revision 1.36
11.1Scgd#!/bin/sh - 21.1Scgd# 31.36Slukem# $NetBSD: daily,v 1.36 2001/06/18 10:54:02 lukem Exp $ 41.21Smikel# @(#)daily 8.2 (Berkeley) 1/25/94 51.1Scgd# 61.18Smrg 71.27Smycroftexport PATH=/bin:/usr/bin:/sbin:/usr/sbin 81.28Slukemumask 077 91.28Slukem 101.28Slukemif [ -s /etc/daily.conf ]; then 111.28Slukem . /etc/daily.conf 121.28Slukemfi 131.28Slukem 141.20Smikelhost=`hostname` 151.28Slukemdate=`date` 161.1Scgd 171.28Slukemecho "To: ${MAILTO:-root}" 181.28Slukemecho "Subject: $host daily output for $date" 191.28Slukemecho "" 201.18Smrg 211.25Slukemif [ -f /etc/rc.subr ]; then 221.25Slukem . /etc/rc.subr 231.25Slukemelse 241.25Slukem echo "Can't read /etc/rc.subr; aborting." 251.25Slukem exit 1; 261.25Slukemfi 271.25Slukem 281.23Sphilif [ -z "$MAILTO" -o "$USER" != "root" ]; then 291.27Smycroft MAILTO=root 301.23Sphilfi 311.23Sphil 321.22Slukemecho "" 331.22Slukemecho "Uptime: " `uptime` 341.18Smrg 351.29Sabs# Uncommenting any of the finds below would open up a race condition attack 361.29Sabs# based on symlinks, potentially allowing removal of any file on the system. 371.29Sabs# 381.17Sjtc#echo "" 391.17Sjtc#echo "Removing scratch and junk files:" 401.17Sjtc#if [ -d /tmp -a ! -h /tmp ]; then 411.17Sjtc# cd /tmp && { 421.17Sjtc# find . -type f -atime +3 -exec rm -f -- {} \; 431.17Sjtc# find . ! -name . -type d -mtime +1 -exec rmdir -- {} \; \ 441.17Sjtc# >/dev/null 2>&1; } 451.17Sjtc#fi 461.1Scgd 471.17Sjtc#if [ -d /var/tmp -a ! -h /var/tmp ]; then 481.17Sjtc# cd /var/tmp && { 491.17Sjtc# find . ! -name . -atime +7 -exec rm -f -- {} \; 501.35Saymeric# find . ! \( -name . -o -name vi.recover \) -type d \ 511.35Saymeric# -mtime +1 -exec rmdir -- {} \; \ 521.17Sjtc# >/dev/null 2>&1; } 531.17Sjtc#fi 541.10Scgd 551.15Spk# Additional junk directory cleanup would go like this: 561.15Spk#if [ -d /scratch -a ! -h /scratch ]; then 571.15Spk# cd /scratch && { 581.15Spk# find . ! -name . -atime +1 -exec rm -f -- {} \; 591.15Spk# find . ! -name . -type d -mtime +1 -exec rmdir -- {} \; \ 601.15Spk# >/dev/null 2>&1; } 611.15Spk#fi 621.10Scgd 631.17Sjtc#if [ -d /var/rwho -a ! -h /var/rwho ] ; then 641.17Sjtc# cd /var/rwho && { 651.17Sjtc# find . ! -name . -mtime +7 -exec rm -f -- {} \; ; } 661.17Sjtc#fi 671.10Scgd 681.36SlukemDAILYDIR=`mktemp -d /tmp/_daily.XXXXXX` || exit 1 691.18Smrg 701.36Slukemtrap "/bin/rm -rf $DAILYDIR ; exit 0" EXIT INT QUIT 711.18Smrg 721.36Slukemif ! cd "$DAILYDIR"; then 731.36Slukem echo "Can not cd to $DAILYDIR". 741.18Smrg exit 1 751.18Smrgfi 761.18Smrg 771.10ScgdTMP=daily.$$ 781.18SmrgTMP2=daily2.$$ 791.18Smrg 801.25Slukemif checkyesno find_core; then 811.18Smrg find / \( ! -fstype local -o -fstype rdonly -o -fstype fdesc \ 821.14Smycroft -o -fstype kernfs -o -fstype procfs \) -a -prune -o \ 831.18Smrg -name 'lost+found' -a -prune -o \ 841.26Snathanw \( -name '*.core' -o -name 'core' \) -a -print > $TMP 851.18Smrg# \( -name '[#,]*' -o -name '.#*' -o -name a.out \ 861.18Smrg# -o -name '*.CKP' -o -name '.emacs_[0-9]*' \) \ 871.18Smrg# -a -atime +3 -exec rm -f -- {} \; -a -print > $TMP 881.18Smrg 891.26Snathanw egrep '\.core$|^core$' $TMP > $TMP2 901.18Smrg if [ -s $TMP2 ]; then 911.18Smrg echo "" 921.18Smrg echo "Possible core dumps:" 931.18Smrg cat $TMP2 941.18Smrg fi 951.18Smrg 961.18Smrg# egrep -v '\.core' $TMP > $TMP2 971.18Smrg# if [ -s $TMP2 ]; then 981.18Smrg# echo "" 991.18Smrg# echo "Deleted files:" 1001.18Smrg# cat $TMP2 1011.18Smrg# fi 1021.10Scgd 1031.18Smrg rm -f $TMP $TMP2 1041.18Smrgfi 1051.10Scgd 1061.25Slukemif checkyesno run_msgs; then 1071.18Smrg msgs -c 1081.18Smrgfi 1091.1Scgd 1101.25Slukemif checkyesno expire_news && [ -f /etc/news.expire ]; then 1111.1Scgd /etc/news.expire 1121.1Scgdfi 1131.1Scgd 1141.25Slukemif checkyesno purge_accounting && [ -f /var/account/acct ]; then 1151.21Smikel echo "" 1161.21Smikel echo "Purging accounting records:" 1171.21Smikel mv /var/account/acct.2 /var/account/acct.3 1181.21Smikel mv /var/account/acct.1 /var/account/acct.2 1191.21Smikel mv /var/account/acct.0 /var/account/acct.1 1201.21Smikel cp /var/account/acct /var/account/acct.0 1211.21Smikel sa -sq 1221.1Scgdfi 1231.1Scgd 1241.25Slukemif checkyesno run_calendar; then 1251.18Smrg calendar -a > $TMP 1261.18Smrg if [ -s $TMP ]; then 1271.18Smrg echo "" 1281.18Smrg echo "Running calendar:" 1291.18Smrg cat $TMP 1301.18Smrg fi 1311.18Smrg rm -f $TMP 1321.18Smrgfi 1331.1Scgd 1341.25Slukemif checkyesno check_uucp && \ 1351.25Slukem [ -d /var/spool/uucp -a -f /usr/libexec/uucp/clean.daily ]; then 1361.1Scgd echo "" 1371.1Scgd echo "Cleaning up UUCP:" 1381.24Slukem su daemon -c /usr/libexec/uucp/clean.daily 1391.1Scgdfi 1401.1Scgd 1411.25Slukemif checkyesno check_disks; then 1421.18Smrg df -k > $TMP 1431.18Smrg dump W > $TMP2 1441.18Smrg if [ -s $TMP -o -s $TMP2 ]; then 1451.18Smrg echo "" 1461.18Smrg echo "Checking subsystem status:" 1471.18Smrg echo "" 1481.18Smrg echo "disks:" 1491.18Smrg if [ -s $TMP ]; then 1501.18Smrg cat $TMP 1511.18Smrg echo "" 1521.18Smrg fi 1531.18Smrg if [ -s $TMP2 ]; then 1541.18Smrg cat $TMP2 1551.18Smrg echo "" 1561.18Smrg fi 1571.18Smrg echo "" 1581.18Smrg fi 1591.18Smrgfi 1601.18Smrg 1611.18Smrgrm -f $TMP $TMP2 1621.18Smrg 1631.25Slukemif checkyesno check_mailq; then 1641.18Smrg mailq > $TMP 1651.18Smrg if ! grep -q "^Mail queue is empty$" $TMP; then 1661.18Smrg echo "" 1671.18Smrg echo "mail:" 1681.18Smrg cat $TMP 1691.18Smrg fi 1701.18Smrgfi 1711.18Smrg 1721.18Smrgrm -f $TMP 1731.1Scgd 1741.25Slukemif checkyesno check_uucp && [ -d /var/spool/uucp ]; then 1751.18Smrg uustat -a > $TMP 1761.18Smrg if [ -s $TMP ]; then 1771.18Smrg echo "" 1781.18Smrg echo "uucp:" 1791.21Smikel cat $TMP 1801.18Smrg fi 1811.18Smrgfi 1821.1Scgd 1831.18Smrgrm -f $TMP 1841.1Scgd 1851.25Slukemif checkyesno check_network; then 1861.18Smrg echo "" 1871.18Smrg echo "network:" 1881.33Sitojun netstat -inv 1891.1Scgd echo "" 1901.18Smrg t=/var/rwho/* 1911.18Smrg if [ "$t" != '/var/rwho/*' ]; then 1921.18Smrg ruptime 1931.18Smrg fi 1941.1Scgdfi 1951.1Scgd 1961.25Slukemif checkyesno run_fsck; then 1971.18Smrg echo "" 1981.18Smrg echo "Checking filesystems:" 1991.18Smrg fsck -n | grep -v '^\*\* Phase' 2001.18Smrgfi 2011.1Scgd 2021.1Scgdecho "" 2031.25Slukemif checkyesno run_rdist && [ -f /etc/Distfile ]; then 2041.1Scgd echo "Running rdist:" 2051.20Smikel if [ -d /var/log/rdist ]; then 2061.30Senami logf=`date +%Y.%b.%d` 2071.20Smikel rdist -f /etc/Distfile 2>&1 | tee /var/log/rdist/$logf 2081.20Smikel else 2091.20Smikel rdist -f /etc/Distfile 2101.20Smikel fi 2111.1Scgdfi 2121.1Scgd 2131.25Slukemif checkyesno run_security; then 2141.36Slukem SECOUT="$DAILYDIR/sec" 2151.36Slukem sh /etc/security 2>&1 > "$SECOUT" 2161.36Slukem if [ ! -s "$SECOUT" ]; then 2171.36Slukem echo "Nothing to report on $date" > "$SECOUT" 2181.28Slukem fi 2191.36Slukem mail -s "$host daily insecurity output for $date" $MAILTO < "$SECOUT" 2201.34Shubertffi 2211.34Shubertf 2221.34Shubertfif checkyesno run_skeyaudit; then 2231.34Shubertf echo "" 2241.34Shubertf echo "Checking remaining s/key OTPs:" 2251.34Shubertf skeyaudit 2261.31Sadfi 2271.31Sad 2281.31Sadif [ -f /etc/daily.local ]; then 2291.31Sad echo "" 2301.31Sad echo "Running /etc/daily.local:" 2311.31Sad . /etc/daily.local 2321.18Smrgfi 233