daily revision 1.55
1#!/bin/sh - 2# 3# $NetBSD: daily,v 1.55 2003/12/08 01:17:37 perry Exp $ 4# @(#)daily 8.2 (Berkeley) 1/25/94 5# 6 7export PATH=/bin:/usr/bin:/sbin:/usr/sbin 8umask 077 9 10if [ -s /etc/daily.conf ]; then 11 . /etc/daily.conf 12fi 13 14host=`hostname` 15date=`date` 16 17echo "To: ${MAILTO:-root}" 18echo "Subject: $host daily output for $date" 19echo "" 20 21if [ -f /etc/rc.subr ]; then 22 . /etc/rc.subr 23else 24 echo "Can't read /etc/rc.subr; aborting." 25 exit 1; 26fi 27 28if [ -z "$MAILTO" -o "$USER" != "root" ]; then 29 MAILTO=root 30fi 31 32echo "" 33echo "Uptime: " `uptime` 34 35# Uncommenting any of the finds below would open up a race condition attack 36# based on symlinks, potentially allowing removal of any file on the system. 37# 38#echo "" 39#echo "Removing scratch and junk files:" 40#if [ -d /tmp -a ! -h /tmp ]; then 41# cd /tmp && { 42# find . -type f -atime +3 -exec rm -f -- {} \; 43# find . ! -name . -type d -mtime +1 -exec rmdir -- {} \; \ 44# >/dev/null 2>&1; } 45#fi 46 47#if [ -d /var/tmp -a ! -h /var/tmp ]; then 48# cd /var/tmp && { 49# find . ! -name . -atime +7 -exec rm -f -- {} \; 50# find . ! \( -name . -o -name vi.recover \) -type d \ 51# -mtime +1 -exec rmdir -- {} \; \ 52# >/dev/null 2>&1; } 53#fi 54 55# Additional junk directory cleanup would go like this: 56#if [ -d /scratch -a ! -h /scratch ]; then 57# cd /scratch && { 58# find . ! -name . -atime +1 -exec rm -f -- {} \; 59# find . ! -name . -type d -mtime +1 -exec rmdir -- {} \; \ 60# >/dev/null 2>&1; } 61#fi 62 63#if [ -d /var/rwho -a ! -h /var/rwho ] ; then 64# cd /var/rwho && { 65# find . ! -name . -mtime +7 -exec rm -f -- {} \; ; } 66#fi 67 68DAILYDIR=`mktemp -d /tmp/_daily.XXXXXX` || exit 1 69 70trap "/bin/rm -rf $DAILYDIR ; exit 0" EXIT INT QUIT 71 72if ! cd "$DAILYDIR"; then 73 echo "Can not cd to $DAILYDIR". 74 exit 1 75fi 76 77TMP=daily.$$ 78TMP2=daily2.$$ 79 80if checkyesno find_core; then 81 find / \( ! -fstype local -o -fstype rdonly -o -fstype fdesc \ 82 -o -fstype null \ 83 -o -fstype kernfs -o -fstype procfs \) -prune -o \ 84 -name 'lost+found' -prune -o \ 85 \( -name '*.core' -o -name 'core' \) -type f -print > $TMP 86# \( -name '[#,]*' -o -name '.#*' -o -name a.out \ 87# -o -name '*.CKP' -o -name '.emacs_[0-9]*' \) \ 88# -a -atime +3 -exec rm -f -- {} \; -a -print > $TMP 89 90 egrep '\.core$|^core$' $TMP > $TMP2 91 if [ -s $TMP2 ]; then 92 echo "" 93 echo "Possible core dumps:" 94 cat $TMP2 95 fi 96 97# egrep -v '\.core' $TMP > $TMP2 98# if [ -s $TMP2 ]; then 99# echo "" 100# echo "Deleted files:" 101# cat $TMP2 102# fi 103 104 rm -f $TMP $TMP2 105fi 106 107if checkyesno run_msgs; then 108 msgs -c 109fi 110 111if checkyesno expire_news && [ -f /etc/news.expire ]; then 112 /etc/news.expire 113fi 114 115if checkyesno purge_accounting && [ -f /var/account/acct ]; then 116 echo "" 117 echo "Purging accounting records:" 118 mv /var/account/acct.2 /var/account/acct.3 2>/dev/null 119 mv /var/account/acct.1 /var/account/acct.2 2>/dev/null 120 mv /var/account/acct.0 /var/account/acct.1 2>/dev/null 121 cp /var/account/acct /var/account/acct.0 122 sa -sq 123fi 124 125if checkyesno run_calendar; then 126 calendar -a > $TMP 2>&1 127 if [ -s $TMP ]; then 128 echo "" 129 echo "Running calendar:" 130 cat $TMP 131 fi 132 rm -f $TMP 133fi 134 135if checkyesno check_uucp && \ 136 [ -d /var/spool/uucp -a -f /usr/libexec/uucp/clean.daily ]; then 137 echo "" 138 echo "Cleaning up UUCP:" 139 su daemon -c /usr/libexec/uucp/clean.daily 140fi 141 142if checkyesno check_disks; then 143 if checkyesno show_remote_fs; then 144 df -hi -t nokernfs,procfs > $TMP 145 else 146 df -hil -t nokernfs,procfs > $TMP 147 fi 148 if [ -s /etc/dumpdates ] ; then 149 dump -W > $TMP2 150 fi 151 if [ -s $TMP -o -s $TMP2 ]; then 152 echo "" 153 echo "Checking subsystem status:" 154 echo "" 155 echo "disks:" 156 if [ -s $TMP ]; then 157 cat $TMP 158 echo "" 159 fi 160 if [ -s $TMP2 ]; then 161 cat $TMP2 162 echo "" 163 fi 164 echo "" 165 fi 166 rm -f $TMP $TMP2 167 touch $TMP2 168 for dev in `iostat -x | awk '/^raid/ { print $1 }'`; do 169 raidctl -s $dev | awk '/^.*: failed$/ {print $0}' > $TMP 170 if [ -s $TMP ]; then 171 echo "$dev:" >> $TMP2 172 cat $TMP >> $TMP2 173 fi 174 rm -f $TMP 175 done 176 if [ -s $TMP2 ]; then 177 echo "failed RAIDframe component(s):" 178 cat $TMP2 179 fi 180 rm -f $TMP2 181fi 182 183if checkyesno check_mailq; then 184 mailq > $TMP 185 if ! grep -q "queue is empty$" $TMP; then 186 echo "" 187 echo "mail:" 188 cat $TMP 189 fi 190fi 191 192rm -f $TMP 193 194if checkyesno check_uucp && [ -d /var/spool/uucp ]; then 195 (cd /tmp; su -m uucp -c "uustat -a") > $TMP 196 if [ -s $TMP ]; then 197 echo "" 198 echo "uucp:" 199 cat $TMP 200 fi 201fi 202 203rm -f $TMP 204 205if checkyesno check_network; then 206 echo "" 207 echo "network:" 208 if checkyesno full_netstat; then 209 netstat -inv 210 else 211 netstat -in | awk 'BEGIN { 212 ifs[""] = 0; 213 } 214 /^[^\*]* / { 215 if (NR == 1) { 216 printf("%-8s %10s %6s %10s %6s %6s\n", 217 $1, $(NF-4), $(NF-3), $(NF-2), $(NF-1), $NF); 218 next; 219 } 220 if (!($1 in ifs)) { 221 printf("%-8s %10d %6d %10d %6d %6d\n", 222 $1, $(NF-4), $(NF-3), $(NF-2), $(NF-1), $NF); 223 ifs[$1] = 1; 224 } 225 }' 226 fi 227 echo "" 228 t=/var/rwho/* 229 if [ "$t" != '/var/rwho/*' ]; then 230 ruptime 231 fi 232fi 233 234if checkyesno run_fsck; then 235 echo "" 236 echo "Checking filesystems:" 237 fsck -n -f | grep -v '^\*\* Phase' 238fi 239 240echo "" 241if checkyesno run_rdist && [ -f /etc/Distfile ]; then 242 echo "Running rdist:" 243 if [ -d /var/log/rdist ]; then 244 logf=`date +%Y.%b.%d` 245 rdist -f /etc/Distfile 2>&1 | tee /var/log/rdist/$logf 246 else 247 rdist -f /etc/Distfile 248 fi 249fi 250 251if checkyesno run_security; then 252 SECOUT="$DAILYDIR/sec" 253 sh /etc/security > "$SECOUT" 2>&1 254 if [ ! -s "$SECOUT" ]; then 255 if checkyesno send_empty_security; then 256 echo "Nothing to report on $date" > "$SECOUT" 257 else 258 echo "" 259 echo "Supressing empty security report." 260 fi 261 fi 262 if [ -s "$SECOUT" ]; then 263 mail -s "$host daily insecurity output for $date" \ 264 $MAILTO < "$SECOUT" 265 fi 266fi 267 268if checkyesno run_skeyaudit; then 269 if [ -s /etc/skeykeys ]; then 270 echo "" 271 echo "Checking remaining s/key OTPs:" 272 skeyaudit 273 fi 274fi 275 276if [ -f /etc/daily.local ]; then 277 echo "" 278 echo "Running /etc/daily.local:" 279 . /etc/daily.local 280fi 281