daily revision 1.58 1 #!/bin/sh -
2 #
3 # $NetBSD: daily,v 1.58 2004/03/29 02:17:26 mrg Exp $
4 # @(#)daily 8.2 (Berkeley) 1/25/94
5 #
6
7 export PATH=/bin:/usr/bin:/sbin:/usr/sbin
8 umask 077
9
10 if [ -s /etc/daily.conf ]; then
11 . /etc/daily.conf
12 fi
13
14 host=`hostname`
15 date=`date`
16
17 echo "To: ${MAILTO:-root}"
18 echo "Subject: $host daily output for $date"
19 echo ""
20
21 if [ -f /etc/rc.subr ]; then
22 . /etc/rc.subr
23 else
24 echo "Can't read /etc/rc.subr; aborting."
25 exit 1;
26 fi
27
28 if [ -z "$MAILTO" -o "$USER" != "root" ]; then
29 MAILTO=root
30 fi
31
32 echo ""
33 echo "Uptime: " `uptime`
34
35 # Uncommenting any of the finds below would open up a race condition attack
36 # based on symlinks, potentially allowing removal of any file on the system.
37 #
38 #echo ""
39 #echo "Removing scratch and junk files:"
40 #if [ -d /tmp -a ! -h /tmp ]; then
41 # cd /tmp && {
42 # find . -type f -atime +3 -exec rm -f -- {} \;
43 # find . ! -name . -type d -mtime +1 -exec rmdir -- {} \; \
44 # >/dev/null 2>&1; }
45 #fi
46
47 #if [ -d /var/tmp -a ! -h /var/tmp ]; then
48 # cd /var/tmp && {
49 # find . ! -name . -atime +7 -exec rm -f -- {} \;
50 # find . ! \( -name . -o -name vi.recover \) -type d \
51 # -mtime +1 -exec rmdir -- {} \; \
52 # >/dev/null 2>&1; }
53 #fi
54
55 # Additional junk directory cleanup would go like this:
56 #if [ -d /scratch -a ! -h /scratch ]; then
57 # cd /scratch && {
58 # find . ! -name . -atime +1 -exec rm -f -- {} \;
59 # find . ! -name . -type d -mtime +1 -exec rmdir -- {} \; \
60 # >/dev/null 2>&1; }
61 #fi
62
63 #if [ -d /var/rwho -a ! -h /var/rwho ] ; then
64 # cd /var/rwho && {
65 # find . ! -name . -mtime +7 -exec rm -f -- {} \; ; }
66 #fi
67
68 DAILYDIR=`mktemp -d /tmp/_daily.XXXXXX` || exit 1
69
70 trap "/bin/rm -rf $DAILYDIR ; exit 0" EXIT INT QUIT
71
72 if ! cd "$DAILYDIR"; then
73 echo "Can not cd to $DAILYDIR".
74 exit 1
75 fi
76
77 TMP=daily.$$
78 TMP2=daily2.$$
79
80 if checkyesno find_core; then
81 find / \( ! -fstype local -o -fstype rdonly -o -fstype fdesc \
82 -o -fstype null \
83 -o -fstype kernfs -o -fstype procfs \) -prune -o \
84 -name 'lost+found' -prune -o \
85 \( -name '*.core' -o -name 'core' \) -type f -print > $TMP
86 # \( -name '[#,]*' -o -name '.#*' -o -name a.out \
87 # -o -name '*.CKP' -o -name '.emacs_[0-9]*' \) \
88 # -a -atime +3 -exec rm -f -- {} \; -a -print > $TMP
89
90 egrep '\.core$|^core$' $TMP > $TMP2
91 if [ -s $TMP2 ]; then
92 echo ""
93 echo "Possible core dumps:"
94 cat $TMP2
95 fi
96
97 # egrep -v '\.core' $TMP > $TMP2
98 # if [ -s $TMP2 ]; then
99 # echo ""
100 # echo "Deleted files:"
101 # cat $TMP2
102 # fi
103
104 rm -f $TMP $TMP2
105 fi
106
107 if checkyesno run_msgs; then
108 msgs -c
109 fi
110
111 if checkyesno expire_news && [ -f /etc/news.expire ]; then
112 /etc/news.expire
113 fi
114
115 if checkyesno purge_accounting && [ -f /var/account/acct ]; then
116 echo ""
117 echo "Purging accounting records:"
118 if [ -f /var/account/acct.0.gz ]; then
119 mv /var/account/acct.2.gz /var/account/acct.3.gz 2>/dev/null
120 mv /var/account/acct.1.gz /var/account/acct.2.gz 2>/dev/null
121 mv /var/account/acct.0.gz /var/account/acct.1.gz 2>/dev/null
122 else
123 mv /var/account/acct.2 /var/account/acct.3 2>/dev/null
124 mv /var/account/acct.1 /var/account/acct.2 2>/dev/null
125 mv /var/account/acct.0 /var/account/acct.1 2>/dev/null
126 fi
127 cp /var/account/acct /var/account/acct.0
128 sa -sq
129 if [ -f /var/account/acct.1.gz ]; then
130 gzip /var/account/acct.0
131 fi
132 fi
133
134 if checkyesno run_calendar; then
135 calendar -a > $TMP 2>&1
136 if [ -s $TMP ]; then
137 echo ""
138 echo "Running calendar:"
139 cat $TMP
140 fi
141 rm -f $TMP
142 fi
143
144 if checkyesno check_uucp && \
145 [ -d /var/spool/uucp -a -f /usr/libexec/uucp/clean.daily ]; then
146 echo ""
147 echo "Cleaning up UUCP:"
148 su daemon -c /usr/libexec/uucp/clean.daily
149 fi
150
151 if checkyesno check_disks; then
152 if checkyesno show_remote_fs; then
153 df -hi -t nokernfs,procfs,null,fdesc > $TMP
154 else
155 df -hil -t nokernfs,procfs,null,fdesc > $TMP
156 fi
157 if [ -s /etc/dumpdates ] ; then
158 dump -W > $TMP2
159 fi
160 if [ -s $TMP -o -s $TMP2 ]; then
161 echo ""
162 echo "Checking subsystem status:"
163 echo ""
164 echo "disks:"
165 if [ -s $TMP ]; then
166 cat $TMP
167 echo ""
168 fi
169 if [ -s $TMP2 ]; then
170 cat $TMP2
171 echo ""
172 fi
173 echo ""
174 fi
175 rm -f $TMP $TMP2
176 touch $TMP2
177 for dev in `iostat -x | awk '/^raid/ { print $1 }'`; do
178 raidctl -s $dev | awk '/^.*: failed$/ {print $0}' > $TMP
179 if [ -s $TMP ]; then
180 echo "$dev:" >> $TMP2
181 cat $TMP >> $TMP2
182 fi
183 rm -f $TMP
184 done
185 if [ -s $TMP2 ]; then
186 echo "failed RAIDframe component(s):"
187 cat $TMP2
188 fi
189 rm -f $TMP2
190 fi
191
192 if checkyesno check_mailq; then
193 mailq > $TMP
194 if ! grep -q "queue is empty$" $TMP; then
195 echo ""
196 echo "mail:"
197 cat $TMP
198 fi
199 fi
200
201 rm -f $TMP
202
203 if checkyesno check_uucp && [ -d /var/spool/uucp ]; then
204 (cd /tmp; su -m uucp -c "uustat -a") > $TMP
205 if [ -s $TMP ]; then
206 echo ""
207 echo "uucp:"
208 cat $TMP
209 fi
210 fi
211
212 rm -f $TMP
213
214 if checkyesno check_network; then
215 echo ""
216 echo "network:"
217 if checkyesno full_netstat; then
218 netstat -inv
219 else
220 netstat -in | awk 'BEGIN {
221 ifs[""] = 0;
222 }
223 /^[^\*]* / {
224 if (NR == 1) {
225 printf("%-8s %10s %6s %10s %6s %6s\n",
226 $1, $(NF-4), $(NF-3), $(NF-2), $(NF-1), $NF);
227 next;
228 }
229 if (!($1 in ifs)) {
230 printf("%-8s %10d %6d %10d %6d %6d\n",
231 $1, $(NF-4), $(NF-3), $(NF-2), $(NF-1), $NF);
232 ifs[$1] = 1;
233 }
234 }'
235 fi
236 echo ""
237 t=/var/rwho/*
238 if [ "$t" != '/var/rwho/*' ]; then
239 ruptime
240 fi
241 fi
242
243 if checkyesno run_fsck; then
244 echo ""
245 echo "Checking filesystems:"
246 fsck -n -f | grep -v '^\*\* Phase'
247 fi
248
249 echo ""
250 if checkyesno run_rdist && [ -f /etc/Distfile ]; then
251 echo "Running rdist:"
252 if [ -d /var/log/rdist ]; then
253 logf=`date +%Y.%b.%d`
254 rdist -f /etc/Distfile 2>&1 | tee /var/log/rdist/$logf
255 else
256 rdist -f /etc/Distfile
257 fi
258 fi
259
260 if checkyesno run_security; then
261 SECOUT="$DAILYDIR/sec"
262 sh /etc/security > "$SECOUT" 2>&1
263 if [ ! -s "$SECOUT" ]; then
264 if checkyesno send_empty_security; then
265 echo "Nothing to report on $date" > "$SECOUT"
266 else
267 echo ""
268 echo "Suppressing empty security report."
269 fi
270 fi
271 if [ -s "$SECOUT" ]; then
272 mail -s "$host daily insecurity output for $date" \
273 $MAILTO < "$SECOUT"
274 fi
275 fi
276
277 if checkyesno run_skeyaudit; then
278 if [ -s /etc/skeykeys ]; then
279 echo ""
280 echo "Checking remaining s/key OTPs:"
281 skeyaudit
282 fi
283 fi
284
285 if [ -f /etc/daily.local ]; then
286 echo ""
287 echo "Running /etc/daily.local:"
288 . /etc/daily.local
289 fi
290