daily revision 1.41
11.1Scgd#!/bin/sh -
21.1Scgd#
31.41Sperry#	$NetBSD: daily,v 1.41 2001/10/23 18:39:03 perry Exp $
41.21Smikel#	@(#)daily	8.2 (Berkeley) 1/25/94
51.1Scgd#
61.18Smrg
71.27Smycroftexport PATH=/bin:/usr/bin:/sbin:/usr/sbin
81.28Slukemumask 077
91.28Slukem
101.28Slukemif [ -s /etc/daily.conf ]; then
111.28Slukem	. /etc/daily.conf
121.28Slukemfi
131.28Slukem
141.20Smikelhost=`hostname`
151.28Slukemdate=`date`
161.1Scgd
171.28Slukemecho "To: ${MAILTO:-root}"
181.28Slukemecho "Subject: $host daily output for $date"
191.28Slukemecho ""
201.18Smrg
211.25Slukemif [ -f /etc/rc.subr ]; then
221.25Slukem	. /etc/rc.subr
231.25Slukemelse
241.25Slukem	echo "Can't read /etc/rc.subr; aborting."
251.25Slukem	exit 1;
261.25Slukemfi
271.25Slukem
281.23Sphilif [ -z "$MAILTO" -o "$USER" != "root" ]; then
291.27Smycroft	MAILTO=root
301.23Sphilfi
311.23Sphil
321.22Slukemecho ""
331.22Slukemecho "Uptime: " `uptime`
341.18Smrg
351.29Sabs# Uncommenting any of the finds below would open up a race condition attack
361.29Sabs# based on symlinks, potentially allowing removal of any file on the system.
371.29Sabs#
381.17Sjtc#echo ""
391.17Sjtc#echo "Removing scratch and junk files:"
401.17Sjtc#if [ -d /tmp -a ! -h /tmp ]; then
411.17Sjtc#	cd /tmp && {
421.17Sjtc#	find . -type f -atime +3 -exec rm -f -- {} \;
431.17Sjtc#	find . ! -name . -type d -mtime +1 -exec rmdir -- {} \; \
441.17Sjtc#	    >/dev/null 2>&1; }
451.17Sjtc#fi
461.1Scgd
471.17Sjtc#if [ -d /var/tmp -a ! -h /var/tmp ]; then
481.17Sjtc#	cd /var/tmp && {
491.17Sjtc#	find . ! -name . -atime +7 -exec rm -f -- {} \;
501.35Saymeric#	find . ! \( -name . -o -name vi.recover \) -type d \
511.35Saymeric#		-mtime +1 -exec rmdir -- {} \; \
521.17Sjtc#	    >/dev/null 2>&1; }
531.17Sjtc#fi
541.10Scgd
551.15Spk# Additional junk directory cleanup would go like this:
561.15Spk#if [ -d /scratch -a ! -h /scratch ]; then
571.15Spk#	cd /scratch && {
581.15Spk#	find . ! -name . -atime +1 -exec rm -f -- {} \;
591.15Spk#	find . ! -name . -type d -mtime +1 -exec rmdir -- {} \; \
601.15Spk#	    >/dev/null 2>&1; }
611.15Spk#fi
621.10Scgd
631.17Sjtc#if [ -d /var/rwho -a ! -h /var/rwho ] ; then
641.17Sjtc#	cd /var/rwho && {
651.17Sjtc#	find . ! -name . -mtime +7 -exec rm -f -- {} \; ; }
661.17Sjtc#fi
671.10Scgd
681.36SlukemDAILYDIR=`mktemp -d /tmp/_daily.XXXXXX` || exit 1
691.18Smrg
701.36Slukemtrap "/bin/rm -rf $DAILYDIR ; exit 0" EXIT INT QUIT
711.18Smrg
721.36Slukemif ! cd "$DAILYDIR"; then
731.36Slukem	echo "Can not cd to $DAILYDIR".
741.18Smrg	exit 1
751.18Smrgfi
761.18Smrg
771.10ScgdTMP=daily.$$
781.18SmrgTMP2=daily2.$$
791.18Smrg
801.25Slukemif checkyesno find_core; then
811.18Smrg	find / \( ! -fstype local -o -fstype rdonly -o -fstype fdesc \
821.14Smycroft		-o -fstype kernfs -o -fstype procfs \) -a -prune -o \
831.18Smrg		-name 'lost+found' -a -prune -o \
841.26Snathanw		\( -name '*.core' -o -name 'core' \) -a -print > $TMP
851.18Smrg#		\( -name '[#,]*' -o -name '.#*' -o -name a.out \
861.18Smrg#		   -o -name '*.CKP' -o -name '.emacs_[0-9]*' \) \
871.18Smrg#			-a -atime +3 -exec rm -f -- {} \; -a -print > $TMP
881.18Smrg
891.26Snathanw	egrep '\.core$|^core$' $TMP > $TMP2
901.18Smrg	if [ -s $TMP2 ]; then
911.18Smrg		echo ""
921.18Smrg		echo "Possible core dumps:"
931.18Smrg		cat $TMP2
941.18Smrg	fi
951.18Smrg
961.18Smrg#	egrep -v '\.core' $TMP > $TMP2
971.18Smrg#	if [ -s $TMP2 ]; then
981.18Smrg#		echo ""
991.18Smrg#		echo "Deleted files:"
1001.18Smrg#		cat $TMP2
1011.18Smrg#	fi
1021.10Scgd
1031.18Smrg	rm -f $TMP $TMP2
1041.18Smrgfi
1051.10Scgd
1061.25Slukemif checkyesno run_msgs; then
1071.18Smrg	msgs -c
1081.18Smrgfi
1091.1Scgd
1101.25Slukemif checkyesno expire_news && [ -f /etc/news.expire ]; then
1111.1Scgd	/etc/news.expire
1121.1Scgdfi
1131.1Scgd
1141.25Slukemif checkyesno purge_accounting && [ -f /var/account/acct ]; then
1151.21Smikel	echo ""
1161.21Smikel	echo "Purging accounting records:"
1171.21Smikel	mv /var/account/acct.2 /var/account/acct.3
1181.21Smikel	mv /var/account/acct.1 /var/account/acct.2
1191.21Smikel	mv /var/account/acct.0 /var/account/acct.1
1201.21Smikel	cp /var/account/acct /var/account/acct.0
1211.21Smikel	sa -sq
1221.1Scgdfi
1231.1Scgd
1241.25Slukemif checkyesno run_calendar; then
1251.18Smrg	calendar -a > $TMP
1261.18Smrg	if [ -s $TMP ]; then
1271.18Smrg		echo ""
1281.18Smrg		echo "Running calendar:"
1291.18Smrg		cat $TMP
1301.18Smrg	fi
1311.18Smrg	rm -f $TMP
1321.18Smrgfi
1331.1Scgd
1341.25Slukemif checkyesno check_uucp && \
1351.25Slukem    [ -d /var/spool/uucp -a -f /usr/libexec/uucp/clean.daily ]; then
1361.1Scgd	echo ""
1371.1Scgd	echo "Cleaning up UUCP:"
1381.24Slukem	su daemon -c /usr/libexec/uucp/clean.daily
1391.1Scgdfi
1401.1Scgd
1411.25Slukemif checkyesno check_disks; then
1421.18Smrg	df -k > $TMP 
1431.40Sperry	dump -W > $TMP2
1441.18Smrg	if [ -s $TMP -o -s $TMP2 ]; then
1451.18Smrg		echo ""
1461.18Smrg		echo "Checking subsystem status:"
1471.18Smrg		echo ""
1481.18Smrg		echo "disks:"
1491.18Smrg		if [ -s $TMP ]; then
1501.18Smrg			cat $TMP
1511.18Smrg			echo ""
1521.18Smrg		fi
1531.18Smrg		if [ -s $TMP2 ]; then
1541.18Smrg			cat $TMP2
1551.18Smrg			echo ""
1561.18Smrg		fi
1571.18Smrg		echo ""
1581.18Smrg	fi
1591.18Smrgfi
1601.18Smrg
1611.18Smrgrm -f $TMP $TMP2
1621.18Smrg
1631.25Slukemif checkyesno check_mailq; then
1641.18Smrg	mailq > $TMP
1651.18Smrg	if ! grep -q "^Mail queue is empty$" $TMP; then
1661.18Smrg		echo ""
1671.18Smrg		echo "mail:"
1681.18Smrg		cat $TMP
1691.18Smrg	fi
1701.18Smrgfi
1711.18Smrg
1721.18Smrgrm -f $TMP
1731.1Scgd
1741.25Slukemif checkyesno check_uucp && [ -d /var/spool/uucp ]; then
1751.41Sperry	(cd /tmp; su -m uucp -c "uustat -a") > $TMP
1761.18Smrg	if [ -s $TMP ]; then
1771.18Smrg		echo ""
1781.18Smrg		echo "uucp:"
1791.21Smikel		cat $TMP
1801.18Smrg	fi
1811.18Smrgfi
1821.1Scgd
1831.18Smrgrm -f $TMP
1841.1Scgd
1851.25Slukemif checkyesno check_network; then
1861.18Smrg	echo ""
1871.18Smrg	echo "network:"
1881.33Sitojun	netstat -inv
1891.1Scgd	echo ""
1901.18Smrg	t=/var/rwho/*
1911.18Smrg	if [ "$t" != '/var/rwho/*' ]; then
1921.18Smrg		ruptime
1931.18Smrg	fi
1941.1Scgdfi
1951.1Scgd
1961.25Slukemif checkyesno run_fsck; then
1971.18Smrg	echo ""
1981.18Smrg	echo "Checking filesystems:"
1991.37Slukem	fsck -n -f | grep -v '^\*\* Phase'
2001.18Smrgfi
2011.1Scgd
2021.1Scgdecho ""
2031.25Slukemif checkyesno run_rdist && [ -f /etc/Distfile ]; then
2041.1Scgd	echo "Running rdist:"
2051.20Smikel	if [ -d /var/log/rdist ]; then
2061.30Senami		logf=`date +%Y.%b.%d`
2071.20Smikel		rdist -f /etc/Distfile 2>&1 | tee /var/log/rdist/$logf
2081.20Smikel	else
2091.20Smikel		rdist -f /etc/Distfile 
2101.20Smikel	fi
2111.1Scgdfi
2121.1Scgd
2131.25Slukemif checkyesno run_security; then
2141.36Slukem	SECOUT="$DAILYDIR/sec"
2151.36Slukem	sh /etc/security 2>&1 > "$SECOUT"
2161.36Slukem	if [ ! -s "$SECOUT" ]; then
2171.36Slukem		echo "Nothing to report on $date" > "$SECOUT"
2181.28Slukem	fi
2191.36Slukem	mail -s "$host daily insecurity output for $date" $MAILTO < "$SECOUT"
2201.34Shubertffi
2211.34Shubertf
2221.34Shubertfif checkyesno run_skeyaudit; then
2231.34Shubertf	echo ""
2241.34Shubertf	echo "Checking remaining s/key OTPs:"
2251.34Shubertf	skeyaudit
2261.31Sadfi
2271.31Sad
2281.31Sadif [ -f /etc/daily.local ]; then
2291.31Sad	echo ""
2301.31Sad	echo "Running /etc/daily.local:"
2311.31Sad	. /etc/daily.local
2321.18Smrgfi
233