daily revision 1.64 1 #!/bin/sh -
2 #
3 # $NetBSD: daily,v 1.64 2005/01/09 13:07:14 sketch Exp $
4 # @(#)daily 8.2 (Berkeley) 1/25/94
5 #
6
7 export PATH=/bin:/usr/bin:/sbin:/usr/sbin
8 umask 077
9
10 if [ -s /etc/daily.conf ]; then
11 . /etc/daily.conf
12 fi
13
14 host=`hostname`
15 date=`date`
16 rcvar_manpage='daily.conf(5)'
17
18 echo "To: ${MAILTO:-root}"
19 echo "Subject: $host daily output for $date"
20 echo ""
21
22 if [ -f /etc/rc.subr ]; then
23 . /etc/rc.subr
24 else
25 echo "Can't read /etc/rc.subr; aborting."
26 exit 1;
27 fi
28
29 if [ -z "$MAILTO" -o "$USER" != "root" ]; then
30 MAILTO=root
31 fi
32
33 echo ""
34 echo "Uptime: " `uptime`
35
36 # Uncommenting any of the finds below would open up a race condition attack
37 # based on symlinks, potentially allowing removal of any file on the system.
38 #
39 #echo ""
40 #echo "Removing scratch and junk files:"
41 #if [ -d /tmp -a ! -h /tmp ]; then
42 # cd /tmp && {
43 # find . -type f -atime +3 -exec rm -f -- {} \;
44 # find . ! -name . -type d -mtime +1 -exec rmdir -- {} \; \
45 # >/dev/null 2>&1; }
46 #fi
47
48 #if [ -d /var/tmp -a ! -h /var/tmp ]; then
49 # cd /var/tmp && {
50 # find . ! -name . -atime +7 -exec rm -f -- {} \;
51 # find . ! \( -name . -o -name vi.recover \) -type d \
52 # -mtime +1 -exec rmdir -- {} \; \
53 # >/dev/null 2>&1; }
54 #fi
55
56 # Additional junk directory cleanup would go like this:
57 #if [ -d /scratch -a ! -h /scratch ]; then
58 # cd /scratch && {
59 # find . ! -name . -atime +1 -exec rm -f -- {} \;
60 # find . ! -name . -type d -mtime +1 -exec rmdir -- {} \; \
61 # >/dev/null 2>&1; }
62 #fi
63
64 #if [ -d /var/rwho -a ! -h /var/rwho ] ; then
65 # cd /var/rwho && {
66 # find . ! -name . -mtime +7 -exec rm -f -- {} \; ; }
67 #fi
68
69 DAILYDIR=`mktemp -d /tmp/_daily.XXXXXX` || exit 1
70
71 trap "/bin/rm -rf $DAILYDIR ; exit 0" EXIT INT QUIT
72
73 if ! cd "$DAILYDIR"; then
74 echo "Can not cd to $DAILYDIR".
75 exit 1
76 fi
77
78 TMP=daily.$$
79 TMP2=daily2.$$
80
81 if checkyesno find_core; then
82 # Turn "foo !bar bax" into "-fstype foo -o ! -fstype bar -o -fstype bax"
83 ignfstypes=`echo $find_core_ignore_fstypes | \
84 sed -e's/\(!*\)\([^[:space:]]\{1,\}\)/-o \1 -fstype \2/g' \
85 -e's/^-o //'`
86 find / \( $ignfstypes \) -prune -o \
87 -name 'lost+found' -prune -o \
88 \( -name '*.core' -o -name 'core' \) -type f -print > $TMP
89 # \( -name '[#,]*' -o -name '.#*' -o -name a.out \
90 # -o -name '*.CKP' -o -name '.emacs_[0-9]*' \) \
91 # -a -atime +3 -exec rm -f -- {} \; -a -print > $TMP
92
93 egrep '\.core$|^core$' $TMP > $TMP2
94 if [ -s $TMP2 ]; then
95 echo ""
96 echo "Possible core dumps:"
97 cat $TMP2
98 fi
99
100 # egrep -v '\.core' $TMP > $TMP2
101 # if [ -s $TMP2 ]; then
102 # echo ""
103 # echo "Deleted files:"
104 # cat $TMP2
105 # fi
106
107 rm -f $TMP $TMP2
108 fi
109
110 if checkyesno run_msgs; then
111 msgs -c
112 fi
113
114 if checkyesno expire_news && [ -f /etc/news.expire ]; then
115 /etc/news.expire
116 fi
117
118 if checkyesno purge_accounting && [ -f /var/account/acct ]; then
119 echo ""
120 echo "Purging accounting records:"
121 if [ -f /var/account/acct.0.gz ]; then
122 mv /var/account/acct.2.gz /var/account/acct.3.gz 2>/dev/null
123 mv /var/account/acct.1.gz /var/account/acct.2.gz 2>/dev/null
124 mv /var/account/acct.0.gz /var/account/acct.1.gz 2>/dev/null
125 else
126 mv /var/account/acct.2 /var/account/acct.3 2>/dev/null
127 mv /var/account/acct.1 /var/account/acct.2 2>/dev/null
128 mv /var/account/acct.0 /var/account/acct.1 2>/dev/null
129 fi
130 cp /var/account/acct /var/account/acct.0
131 sa -sq
132 if [ -f /var/account/acct.1.gz ]; then
133 gzip /var/account/acct.0
134 fi
135 fi
136
137 if checkyesno run_calendar; then
138 calendar -a > $TMP 2>&1
139 if [ -s $TMP ]; then
140 echo ""
141 echo "Running calendar:"
142 cat $TMP
143 fi
144 rm -f $TMP
145 fi
146
147 if checkyesno check_uucp && \
148 [ -d /var/spool/uucp -a -f /usr/libexec/uucp/clean.daily ]; then
149 echo ""
150 echo "Cleaning up UUCP:"
151 su daemon -c /usr/libexec/uucp/clean.daily
152 fi
153
154 if checkyesno check_disks; then
155 if checkyesno show_remote_fs; then
156 df -hi -t nokernfs,procfs,null,fdesc > $TMP
157 else
158 df -hil -t nokernfs,procfs,null,fdesc > $TMP
159 fi
160 if [ -s /etc/dumpdates ] ; then
161 dump -W > $TMP2
162 fi
163 if [ -s $TMP -o -s $TMP2 ]; then
164 echo ""
165 echo "Checking subsystem status:"
166 echo ""
167 echo "disks:"
168 if [ -s $TMP ]; then
169 cat $TMP
170 echo ""
171 fi
172 if [ -s $TMP2 ]; then
173 cat $TMP2
174 echo ""
175 fi
176 echo ""
177 fi
178 rm -f $TMP $TMP2
179 touch $TMP2
180 for dev in `iostat -x | awk '/^raid/ { print $1 }'`; do
181 raidctl -s $dev | awk '/^.*: failed$/ {print $0}' > $TMP
182 if [ -s $TMP ]; then
183 echo "$dev:" >> $TMP2
184 cat $TMP >> $TMP2
185 fi
186 rm -f $TMP
187 done
188 if [ -s $TMP2 ]; then
189 echo "failed RAIDframe component(s):"
190 cat $TMP2
191 fi
192 rm -f $TMP2
193 fi
194
195 if checkyesno check_mailq; then
196 mailq > $TMP
197 if ! grep -q "queue is empty$" $TMP; then
198 echo ""
199 echo "mail:"
200 cat $TMP
201 fi
202 fi
203
204 rm -f $TMP
205
206 if checkyesno check_uucp && [ -d /var/spool/uucp ]; then
207 (cd /tmp; su -m uucp -c "uustat -a") > $TMP
208 if [ -s $TMP ]; then
209 echo ""
210 echo "uucp:"
211 cat $TMP
212 fi
213 fi
214
215 rm -f $TMP
216
217 if checkyesno check_network; then
218 echo ""
219 echo "network:"
220 if checkyesno full_netstat; then
221 netstat -inv
222 else
223 netstat -inv | awk 'BEGIN {
224 ifs[""] = 0;
225 }
226 /^[^\*]* / {
227 if (NR == 1) {
228 printf("%-8s %10s %6s %10s %6s %6s\n",
229 $1, $(NF-4), $(NF-3), $(NF-2), $(NF-1), $NF);
230 next;
231 }
232 if (!($1 in ifs)) {
233 printf("%-8s %10s %6s %10s %6s %6s\n",
234 $1, $(NF-4), $(NF-3), $(NF-2), $(NF-1), $NF);
235 ifs[$1] = 1;
236 }
237 }'
238 fi
239 echo ""
240 t=/var/rwho/*
241 if [ "$t" != '/var/rwho/*' ]; then
242 ruptime
243 fi
244 fi
245
246 if checkyesno run_fsck; then
247 echo ""
248 echo "Checking filesystems:"
249 fsck -n -f | grep -v '^\*\* Phase'
250 fi
251
252 echo ""
253 if checkyesno run_rdist && [ -f /etc/Distfile ]; then
254 echo "Running rdist:"
255 if [ -d /var/log/rdist ]; then
256 logf=`date +%Y.%b.%d`
257 rdist -f /etc/Distfile 2>&1 | tee /var/log/rdist/$logf
258 else
259 rdist -f /etc/Distfile
260 fi
261 fi
262
263 if checkyesno run_security; then
264 SECOUT="$DAILYDIR/sec"
265 sh /etc/security > "$SECOUT" 2>&1
266 if [ ! -s "$SECOUT" ]; then
267 if checkyesno send_empty_security; then
268 echo "Nothing to report on $date" > "$SECOUT"
269 else
270 echo ""
271 echo "Suppressing empty security report."
272 fi
273 fi
274 if [ -s "$SECOUT" ]; then
275 mail -s "$host daily insecurity output for $date" \
276 "$MAILTO" < "$SECOUT"
277 fi
278 fi
279
280 if checkyesno run_skeyaudit; then
281 if [ -s /etc/skeykeys ]; then
282 echo ""
283 echo "Checking remaining s/key OTPs:"
284 skeyaudit
285 fi
286 fi
287
288 if [ -f /etc/daily.local ]; then
289 . /etc/daily.local > $TMP 2>&1
290 if [ -s $TMP ] ; then
291 printf "\nRunning /etc/daily.local:\n"
292 cat $TMP
293 fi
294 rm -f $TMP
295 fi
296