Home | History | Annotate | Line # | Download | only in etc
daily revision 1.41
      1   1.1      cgd #!/bin/sh -
      2   1.1      cgd #
      3  1.41    perry #	$NetBSD: daily,v 1.41 2001/10/23 18:39:03 perry Exp $
      4  1.21    mikel #	@(#)daily	8.2 (Berkeley) 1/25/94
      5   1.1      cgd #
      6  1.18      mrg 
      7  1.27  mycroft export PATH=/bin:/usr/bin:/sbin:/usr/sbin
      8  1.28    lukem umask 077
      9  1.28    lukem 
     10  1.28    lukem if [ -s /etc/daily.conf ]; then
     11  1.28    lukem 	. /etc/daily.conf
     12  1.28    lukem fi
     13  1.28    lukem 
     14  1.20    mikel host=`hostname`
     15  1.28    lukem date=`date`
     16   1.1      cgd 
     17  1.28    lukem echo "To: ${MAILTO:-root}"
     18  1.28    lukem echo "Subject: $host daily output for $date"
     19  1.28    lukem echo ""
     20  1.18      mrg 
     21  1.25    lukem if [ -f /etc/rc.subr ]; then
     22  1.25    lukem 	. /etc/rc.subr
     23  1.25    lukem else
     24  1.25    lukem 	echo "Can't read /etc/rc.subr; aborting."
     25  1.25    lukem 	exit 1;
     26  1.25    lukem fi
     27  1.25    lukem 
     28  1.23     phil if [ -z "$MAILTO" -o "$USER" != "root" ]; then
     29  1.27  mycroft 	MAILTO=root
     30  1.23     phil fi
     31  1.23     phil 
     32  1.22    lukem echo ""
     33  1.22    lukem echo "Uptime: " `uptime`
     34  1.18      mrg 
     35  1.29      abs # Uncommenting any of the finds below would open up a race condition attack
     36  1.29      abs # based on symlinks, potentially allowing removal of any file on the system.
     37  1.29      abs #
     38  1.17      jtc #echo ""
     39  1.17      jtc #echo "Removing scratch and junk files:"
     40  1.17      jtc #if [ -d /tmp -a ! -h /tmp ]; then
     41  1.17      jtc #	cd /tmp && {
     42  1.17      jtc #	find . -type f -atime +3 -exec rm -f -- {} \;
     43  1.17      jtc #	find . ! -name . -type d -mtime +1 -exec rmdir -- {} \; \
     44  1.17      jtc #	    >/dev/null 2>&1; }
     45  1.17      jtc #fi
     46   1.1      cgd 
     47  1.17      jtc #if [ -d /var/tmp -a ! -h /var/tmp ]; then
     48  1.17      jtc #	cd /var/tmp && {
     49  1.17      jtc #	find . ! -name . -atime +7 -exec rm -f -- {} \;
     50  1.35  aymeric #	find . ! \( -name . -o -name vi.recover \) -type d \
     51  1.35  aymeric #		-mtime +1 -exec rmdir -- {} \; \
     52  1.17      jtc #	    >/dev/null 2>&1; }
     53  1.17      jtc #fi
     54  1.10      cgd 
     55  1.15       pk # Additional junk directory cleanup would go like this:
     56  1.15       pk #if [ -d /scratch -a ! -h /scratch ]; then
     57  1.15       pk #	cd /scratch && {
     58  1.15       pk #	find . ! -name . -atime +1 -exec rm -f -- {} \;
     59  1.15       pk #	find . ! -name . -type d -mtime +1 -exec rmdir -- {} \; \
     60  1.15       pk #	    >/dev/null 2>&1; }
     61  1.15       pk #fi
     62  1.10      cgd 
     63  1.17      jtc #if [ -d /var/rwho -a ! -h /var/rwho ] ; then
     64  1.17      jtc #	cd /var/rwho && {
     65  1.17      jtc #	find . ! -name . -mtime +7 -exec rm -f -- {} \; ; }
     66  1.17      jtc #fi
     67  1.10      cgd 
     68  1.36    lukem DAILYDIR=`mktemp -d /tmp/_daily.XXXXXX` || exit 1
     69  1.18      mrg 
     70  1.36    lukem trap "/bin/rm -rf $DAILYDIR ; exit 0" EXIT INT QUIT
     71  1.18      mrg 
     72  1.36    lukem if ! cd "$DAILYDIR"; then
     73  1.36    lukem 	echo "Can not cd to $DAILYDIR".
     74  1.18      mrg 	exit 1
     75  1.18      mrg fi
     76  1.18      mrg 
     77  1.10      cgd TMP=daily.$$
     78  1.18      mrg TMP2=daily2.$$
     79  1.18      mrg 
     80  1.25    lukem if checkyesno find_core; then
     81  1.18      mrg 	find / \( ! -fstype local -o -fstype rdonly -o -fstype fdesc \
     82  1.14  mycroft 		-o -fstype kernfs -o -fstype procfs \) -a -prune -o \
     83  1.18      mrg 		-name 'lost+found' -a -prune -o \
     84  1.26  nathanw 		\( -name '*.core' -o -name 'core' \) -a -print > $TMP
     85  1.18      mrg #		\( -name '[#,]*' -o -name '.#*' -o -name a.out \
     86  1.18      mrg #		   -o -name '*.CKP' -o -name '.emacs_[0-9]*' \) \
     87  1.18      mrg #			-a -atime +3 -exec rm -f -- {} \; -a -print > $TMP
     88  1.18      mrg 
     89  1.26  nathanw 	egrep '\.core$|^core$' $TMP > $TMP2
     90  1.18      mrg 	if [ -s $TMP2 ]; then
     91  1.18      mrg 		echo ""
     92  1.18      mrg 		echo "Possible core dumps:"
     93  1.18      mrg 		cat $TMP2
     94  1.18      mrg 	fi
     95  1.18      mrg 
     96  1.18      mrg #	egrep -v '\.core' $TMP > $TMP2
     97  1.18      mrg #	if [ -s $TMP2 ]; then
     98  1.18      mrg #		echo ""
     99  1.18      mrg #		echo "Deleted files:"
    100  1.18      mrg #		cat $TMP2
    101  1.18      mrg #	fi
    102  1.10      cgd 
    103  1.18      mrg 	rm -f $TMP $TMP2
    104  1.18      mrg fi
    105  1.10      cgd 
    106  1.25    lukem if checkyesno run_msgs; then
    107  1.18      mrg 	msgs -c
    108  1.18      mrg fi
    109   1.1      cgd 
    110  1.25    lukem if checkyesno expire_news && [ -f /etc/news.expire ]; then
    111   1.1      cgd 	/etc/news.expire
    112   1.1      cgd fi
    113   1.1      cgd 
    114  1.25    lukem if checkyesno purge_accounting && [ -f /var/account/acct ]; then
    115  1.21    mikel 	echo ""
    116  1.21    mikel 	echo "Purging accounting records:"
    117  1.21    mikel 	mv /var/account/acct.2 /var/account/acct.3
    118  1.21    mikel 	mv /var/account/acct.1 /var/account/acct.2
    119  1.21    mikel 	mv /var/account/acct.0 /var/account/acct.1
    120  1.21    mikel 	cp /var/account/acct /var/account/acct.0
    121  1.21    mikel 	sa -sq
    122   1.1      cgd fi
    123   1.1      cgd 
    124  1.25    lukem if checkyesno run_calendar; then
    125  1.18      mrg 	calendar -a > $TMP
    126  1.18      mrg 	if [ -s $TMP ]; then
    127  1.18      mrg 		echo ""
    128  1.18      mrg 		echo "Running calendar:"
    129  1.18      mrg 		cat $TMP
    130  1.18      mrg 	fi
    131  1.18      mrg 	rm -f $TMP
    132  1.18      mrg fi
    133   1.1      cgd 
    134  1.25    lukem if checkyesno check_uucp && \
    135  1.25    lukem     [ -d /var/spool/uucp -a -f /usr/libexec/uucp/clean.daily ]; then
    136   1.1      cgd 	echo ""
    137   1.1      cgd 	echo "Cleaning up UUCP:"
    138  1.24    lukem 	su daemon -c /usr/libexec/uucp/clean.daily
    139   1.1      cgd fi
    140   1.1      cgd 
    141  1.25    lukem if checkyesno check_disks; then
    142  1.18      mrg 	df -k > $TMP 
    143  1.40    perry 	dump -W > $TMP2
    144  1.18      mrg 	if [ -s $TMP -o -s $TMP2 ]; then
    145  1.18      mrg 		echo ""
    146  1.18      mrg 		echo "Checking subsystem status:"
    147  1.18      mrg 		echo ""
    148  1.18      mrg 		echo "disks:"
    149  1.18      mrg 		if [ -s $TMP ]; then
    150  1.18      mrg 			cat $TMP
    151  1.18      mrg 			echo ""
    152  1.18      mrg 		fi
    153  1.18      mrg 		if [ -s $TMP2 ]; then
    154  1.18      mrg 			cat $TMP2
    155  1.18      mrg 			echo ""
    156  1.18      mrg 		fi
    157  1.18      mrg 		echo ""
    158  1.18      mrg 	fi
    159  1.18      mrg fi
    160  1.18      mrg 
    161  1.18      mrg rm -f $TMP $TMP2
    162  1.18      mrg 
    163  1.25    lukem if checkyesno check_mailq; then
    164  1.18      mrg 	mailq > $TMP
    165  1.18      mrg 	if ! grep -q "^Mail queue is empty$" $TMP; then
    166  1.18      mrg 		echo ""
    167  1.18      mrg 		echo "mail:"
    168  1.18      mrg 		cat $TMP
    169  1.18      mrg 	fi
    170  1.18      mrg fi
    171  1.18      mrg 
    172  1.18      mrg rm -f $TMP
    173   1.1      cgd 
    174  1.25    lukem if checkyesno check_uucp && [ -d /var/spool/uucp ]; then
    175  1.41    perry 	(cd /tmp; su -m uucp -c "uustat -a") > $TMP
    176  1.18      mrg 	if [ -s $TMP ]; then
    177  1.18      mrg 		echo ""
    178  1.18      mrg 		echo "uucp:"
    179  1.21    mikel 		cat $TMP
    180  1.18      mrg 	fi
    181  1.18      mrg fi
    182   1.1      cgd 
    183  1.18      mrg rm -f $TMP
    184   1.1      cgd 
    185  1.25    lukem if checkyesno check_network; then
    186  1.18      mrg 	echo ""
    187  1.18      mrg 	echo "network:"
    188  1.33   itojun 	netstat -inv
    189   1.1      cgd 	echo ""
    190  1.18      mrg 	t=/var/rwho/*
    191  1.18      mrg 	if [ "$t" != '/var/rwho/*' ]; then
    192  1.18      mrg 		ruptime
    193  1.18      mrg 	fi
    194   1.1      cgd fi
    195   1.1      cgd 
    196  1.25    lukem if checkyesno run_fsck; then
    197  1.18      mrg 	echo ""
    198  1.18      mrg 	echo "Checking filesystems:"
    199  1.37    lukem 	fsck -n -f | grep -v '^\*\* Phase'
    200  1.18      mrg fi
    201   1.1      cgd 
    202   1.1      cgd echo ""
    203  1.25    lukem if checkyesno run_rdist && [ -f /etc/Distfile ]; then
    204   1.1      cgd 	echo "Running rdist:"
    205  1.20    mikel 	if [ -d /var/log/rdist ]; then
    206  1.30    enami 		logf=`date +%Y.%b.%d`
    207  1.20    mikel 		rdist -f /etc/Distfile 2>&1 | tee /var/log/rdist/$logf
    208  1.20    mikel 	else
    209  1.20    mikel 		rdist -f /etc/Distfile 
    210  1.20    mikel 	fi
    211   1.1      cgd fi
    212   1.1      cgd 
    213  1.25    lukem if checkyesno run_security; then
    214  1.36    lukem 	SECOUT="$DAILYDIR/sec"
    215  1.36    lukem 	sh /etc/security 2>&1 > "$SECOUT"
    216  1.36    lukem 	if [ ! -s "$SECOUT" ]; then
    217  1.36    lukem 		echo "Nothing to report on $date" > "$SECOUT"
    218  1.28    lukem 	fi
    219  1.36    lukem 	mail -s "$host daily insecurity output for $date" $MAILTO < "$SECOUT"
    220  1.34  hubertf fi
    221  1.34  hubertf 
    222  1.34  hubertf if checkyesno run_skeyaudit; then
    223  1.34  hubertf 	echo ""
    224  1.34  hubertf 	echo "Checking remaining s/key OTPs:"
    225  1.34  hubertf 	skeyaudit
    226  1.31       ad fi
    227  1.31       ad 
    228  1.31       ad if [ -f /etc/daily.local ]; then
    229  1.31       ad 	echo ""
    230  1.31       ad 	echo "Running /etc/daily.local:"
    231  1.31       ad 	. /etc/daily.local
    232  1.18      mrg fi
    233