daily revision 1.44
11.1Scgd#!/bin/sh -
21.1Scgd#
31.44Slukem#	$NetBSD: daily,v 1.44 2001/12/18 00:48:05 lukem Exp $
41.21Smikel#	@(#)daily	8.2 (Berkeley) 1/25/94
51.1Scgd#
61.18Smrg
71.27Smycroftexport PATH=/bin:/usr/bin:/sbin:/usr/sbin
81.28Slukemumask 077
91.28Slukem
101.28Slukemif [ -s /etc/daily.conf ]; then
111.28Slukem	. /etc/daily.conf
121.28Slukemfi
131.28Slukem
141.20Smikelhost=`hostname`
151.28Slukemdate=`date`
161.1Scgd
171.28Slukemecho "To: ${MAILTO:-root}"
181.28Slukemecho "Subject: $host daily output for $date"
191.28Slukemecho ""
201.18Smrg
211.25Slukemif [ -f /etc/rc.subr ]; then
221.25Slukem	. /etc/rc.subr
231.25Slukemelse
241.25Slukem	echo "Can't read /etc/rc.subr; aborting."
251.25Slukem	exit 1;
261.25Slukemfi
271.25Slukem
281.23Sphilif [ -z "$MAILTO" -o "$USER" != "root" ]; then
291.27Smycroft	MAILTO=root
301.23Sphilfi
311.23Sphil
321.22Slukemecho ""
331.22Slukemecho "Uptime: " `uptime`
341.18Smrg
351.29Sabs# Uncommenting any of the finds below would open up a race condition attack
361.29Sabs# based on symlinks, potentially allowing removal of any file on the system.
371.29Sabs#
381.17Sjtc#echo ""
391.17Sjtc#echo "Removing scratch and junk files:"
401.17Sjtc#if [ -d /tmp -a ! -h /tmp ]; then
411.17Sjtc#	cd /tmp && {
421.17Sjtc#	find . -type f -atime +3 -exec rm -f -- {} \;
431.17Sjtc#	find . ! -name . -type d -mtime +1 -exec rmdir -- {} \; \
441.17Sjtc#	    >/dev/null 2>&1; }
451.17Sjtc#fi
461.1Scgd
471.17Sjtc#if [ -d /var/tmp -a ! -h /var/tmp ]; then
481.17Sjtc#	cd /var/tmp && {
491.17Sjtc#	find . ! -name . -atime +7 -exec rm -f -- {} \;
501.35Saymeric#	find . ! \( -name . -o -name vi.recover \) -type d \
511.35Saymeric#		-mtime +1 -exec rmdir -- {} \; \
521.17Sjtc#	    >/dev/null 2>&1; }
531.17Sjtc#fi
541.10Scgd
551.15Spk# Additional junk directory cleanup would go like this:
561.15Spk#if [ -d /scratch -a ! -h /scratch ]; then
571.15Spk#	cd /scratch && {
581.15Spk#	find . ! -name . -atime +1 -exec rm -f -- {} \;
591.15Spk#	find . ! -name . -type d -mtime +1 -exec rmdir -- {} \; \
601.15Spk#	    >/dev/null 2>&1; }
611.15Spk#fi
621.10Scgd
631.17Sjtc#if [ -d /var/rwho -a ! -h /var/rwho ] ; then
641.17Sjtc#	cd /var/rwho && {
651.17Sjtc#	find . ! -name . -mtime +7 -exec rm -f -- {} \; ; }
661.17Sjtc#fi
671.10Scgd
681.36SlukemDAILYDIR=`mktemp -d /tmp/_daily.XXXXXX` || exit 1
691.18Smrg
701.36Slukemtrap "/bin/rm -rf $DAILYDIR ; exit 0" EXIT INT QUIT
711.18Smrg
721.36Slukemif ! cd "$DAILYDIR"; then
731.36Slukem	echo "Can not cd to $DAILYDIR".
741.18Smrg	exit 1
751.18Smrgfi
761.18Smrg
771.10ScgdTMP=daily.$$
781.18SmrgTMP2=daily2.$$
791.18Smrg
801.25Slukemif checkyesno find_core; then
811.18Smrg	find / \( ! -fstype local -o -fstype rdonly -o -fstype fdesc \
821.43Slukem		-o -fstype null \
831.14Smycroft		-o -fstype kernfs -o -fstype procfs \) -a -prune -o \
841.18Smrg		-name 'lost+found' -a -prune -o \
851.26Snathanw		\( -name '*.core' -o -name 'core' \) -a -print > $TMP
861.18Smrg#		\( -name '[#,]*' -o -name '.#*' -o -name a.out \
871.18Smrg#		   -o -name '*.CKP' -o -name '.emacs_[0-9]*' \) \
881.18Smrg#			-a -atime +3 -exec rm -f -- {} \; -a -print > $TMP
891.18Smrg
901.26Snathanw	egrep '\.core$|^core$' $TMP > $TMP2
911.18Smrg	if [ -s $TMP2 ]; then
921.18Smrg		echo ""
931.18Smrg		echo "Possible core dumps:"
941.18Smrg		cat $TMP2
951.18Smrg	fi
961.18Smrg
971.18Smrg#	egrep -v '\.core' $TMP > $TMP2
981.18Smrg#	if [ -s $TMP2 ]; then
991.18Smrg#		echo ""
1001.18Smrg#		echo "Deleted files:"
1011.18Smrg#		cat $TMP2
1021.18Smrg#	fi
1031.10Scgd
1041.18Smrg	rm -f $TMP $TMP2
1051.18Smrgfi
1061.10Scgd
1071.25Slukemif checkyesno run_msgs; then
1081.18Smrg	msgs -c
1091.18Smrgfi
1101.1Scgd
1111.25Slukemif checkyesno expire_news && [ -f /etc/news.expire ]; then
1121.1Scgd	/etc/news.expire
1131.1Scgdfi
1141.1Scgd
1151.25Slukemif checkyesno purge_accounting && [ -f /var/account/acct ]; then
1161.21Smikel	echo ""
1171.21Smikel	echo "Purging accounting records:"
1181.21Smikel	mv /var/account/acct.2 /var/account/acct.3
1191.21Smikel	mv /var/account/acct.1 /var/account/acct.2
1201.21Smikel	mv /var/account/acct.0 /var/account/acct.1
1211.21Smikel	cp /var/account/acct /var/account/acct.0
1221.21Smikel	sa -sq
1231.1Scgdfi
1241.1Scgd
1251.25Slukemif checkyesno run_calendar; then
1261.18Smrg	calendar -a > $TMP
1271.18Smrg	if [ -s $TMP ]; then
1281.18Smrg		echo ""
1291.18Smrg		echo "Running calendar:"
1301.18Smrg		cat $TMP
1311.18Smrg	fi
1321.18Smrg	rm -f $TMP
1331.18Smrgfi
1341.1Scgd
1351.25Slukemif checkyesno check_uucp && \
1361.25Slukem    [ -d /var/spool/uucp -a -f /usr/libexec/uucp/clean.daily ]; then
1371.1Scgd	echo ""
1381.1Scgd	echo "Cleaning up UUCP:"
1391.24Slukem	su daemon -c /usr/libexec/uucp/clean.daily
1401.1Scgdfi
1411.1Scgd
1421.25Slukemif checkyesno check_disks; then
1431.42Satatat	df -ki > $TMP 
1441.40Sperry	dump -W > $TMP2
1451.18Smrg	if [ -s $TMP -o -s $TMP2 ]; then
1461.18Smrg		echo ""
1471.18Smrg		echo "Checking subsystem status:"
1481.18Smrg		echo ""
1491.18Smrg		echo "disks:"
1501.18Smrg		if [ -s $TMP ]; then
1511.18Smrg			cat $TMP
1521.18Smrg			echo ""
1531.18Smrg		fi
1541.18Smrg		if [ -s $TMP2 ]; then
1551.18Smrg			cat $TMP2
1561.18Smrg			echo ""
1571.18Smrg		fi
1581.18Smrg		echo ""
1591.18Smrg	fi
1601.18Smrgfi
1611.18Smrg
1621.18Smrgrm -f $TMP $TMP2
1631.18Smrg
1641.25Slukemif checkyesno check_mailq; then
1651.18Smrg	mailq > $TMP
1661.44Slukem	if ! grep -q "queue is empty$" $TMP; then
1671.18Smrg		echo ""
1681.18Smrg		echo "mail:"
1691.18Smrg		cat $TMP
1701.18Smrg	fi
1711.18Smrgfi
1721.18Smrg
1731.18Smrgrm -f $TMP
1741.1Scgd
1751.25Slukemif checkyesno check_uucp && [ -d /var/spool/uucp ]; then
1761.41Sperry	(cd /tmp; su -m uucp -c "uustat -a") > $TMP
1771.18Smrg	if [ -s $TMP ]; then
1781.18Smrg		echo ""
1791.18Smrg		echo "uucp:"
1801.21Smikel		cat $TMP
1811.18Smrg	fi
1821.18Smrgfi
1831.1Scgd
1841.18Smrgrm -f $TMP
1851.1Scgd
1861.25Slukemif checkyesno check_network; then
1871.18Smrg	echo ""
1881.18Smrg	echo "network:"
1891.33Sitojun	netstat -inv
1901.1Scgd	echo ""
1911.18Smrg	t=/var/rwho/*
1921.18Smrg	if [ "$t" != '/var/rwho/*' ]; then
1931.18Smrg		ruptime
1941.18Smrg	fi
1951.1Scgdfi
1961.1Scgd
1971.25Slukemif checkyesno run_fsck; then
1981.18Smrg	echo ""
1991.18Smrg	echo "Checking filesystems:"
2001.37Slukem	fsck -n -f | grep -v '^\*\* Phase'
2011.18Smrgfi
2021.1Scgd
2031.1Scgdecho ""
2041.25Slukemif checkyesno run_rdist && [ -f /etc/Distfile ]; then
2051.1Scgd	echo "Running rdist:"
2061.20Smikel	if [ -d /var/log/rdist ]; then
2071.30Senami		logf=`date +%Y.%b.%d`
2081.20Smikel		rdist -f /etc/Distfile 2>&1 | tee /var/log/rdist/$logf
2091.20Smikel	else
2101.20Smikel		rdist -f /etc/Distfile 
2111.20Smikel	fi
2121.1Scgdfi
2131.1Scgd
2141.25Slukemif checkyesno run_security; then
2151.36Slukem	SECOUT="$DAILYDIR/sec"
2161.36Slukem	sh /etc/security 2>&1 > "$SECOUT"
2171.36Slukem	if [ ! -s "$SECOUT" ]; then
2181.36Slukem		echo "Nothing to report on $date" > "$SECOUT"
2191.28Slukem	fi
2201.36Slukem	mail -s "$host daily insecurity output for $date" $MAILTO < "$SECOUT"
2211.34Shubertffi
2221.34Shubertf
2231.34Shubertfif checkyesno run_skeyaudit; then
2241.34Shubertf	echo ""
2251.34Shubertf	echo "Checking remaining s/key OTPs:"
2261.34Shubertf	skeyaudit
2271.31Sadfi
2281.31Sad
2291.31Sadif [ -f /etc/daily.local ]; then
2301.31Sad	echo ""
2311.31Sad	echo "Running /etc/daily.local:"
2321.31Sad	. /etc/daily.local
2331.18Smrgfi
234