daily revision 1.58 
1#!/bin/sh -
2#
3#	$NetBSD: daily,v 1.58 2004/03/29 02:17:26 mrg Exp $
4#	@(#)daily	8.2 (Berkeley) 1/25/94
5#
6
7export PATH=/bin:/usr/bin:/sbin:/usr/sbin
8umask 077
9
10if [ -s /etc/daily.conf ]; then
11	. /etc/daily.conf
12fi
13
14host=`hostname`
15date=`date`
16
17echo "To: ${MAILTO:-root}"
18echo "Subject: $host daily output for $date"
19echo ""
20
21if [ -f /etc/rc.subr ]; then
22	. /etc/rc.subr
23else
24	echo "Can't read /etc/rc.subr; aborting."
25	exit 1;
26fi
27
28if [ -z "$MAILTO" -o "$USER" != "root" ]; then
29	MAILTO=root
30fi
31
32echo ""
33echo "Uptime: " `uptime`
34
35# Uncommenting any of the finds below would open up a race condition attack
36# based on symlinks, potentially allowing removal of any file on the system.
37#
38#echo ""
39#echo "Removing scratch and junk files:"
40#if [ -d /tmp -a ! -h /tmp ]; then
41#	cd /tmp && {
42#	find . -type f -atime +3 -exec rm -f -- {} \;
43#	find . ! -name . -type d -mtime +1 -exec rmdir -- {} \; \
44#	    >/dev/null 2>&1; }
45#fi
46
47#if [ -d /var/tmp -a ! -h /var/tmp ]; then
48#	cd /var/tmp && {
49#	find . ! -name . -atime +7 -exec rm -f -- {} \;
50#	find . ! \( -name . -o -name vi.recover \) -type d \
51#		-mtime +1 -exec rmdir -- {} \; \
52#	    >/dev/null 2>&1; }
53#fi
54
55# Additional junk directory cleanup would go like this:
56#if [ -d /scratch -a ! -h /scratch ]; then
57#	cd /scratch && {
58#	find . ! -name . -atime +1 -exec rm -f -- {} \;
59#	find . ! -name . -type d -mtime +1 -exec rmdir -- {} \; \
60#	    >/dev/null 2>&1; }
61#fi
62
63#if [ -d /var/rwho -a ! -h /var/rwho ] ; then
64#	cd /var/rwho && {
65#	find . ! -name . -mtime +7 -exec rm -f -- {} \; ; }
66#fi
67
68DAILYDIR=`mktemp -d /tmp/_daily.XXXXXX` || exit 1
69
70trap "/bin/rm -rf $DAILYDIR ; exit 0" EXIT INT QUIT
71
72if ! cd "$DAILYDIR"; then
73	echo "Can not cd to $DAILYDIR".
74	exit 1
75fi
76
77TMP=daily.$$
78TMP2=daily2.$$
79
80if checkyesno find_core; then
81	find / \( ! -fstype local -o -fstype rdonly -o -fstype fdesc \
82		-o -fstype null \
83		-o -fstype kernfs -o -fstype procfs \) -prune -o \
84		-name 'lost+found' -prune -o \
85		\( -name '*.core' -o -name 'core' \) -type f -print > $TMP
86#		\( -name '[#,]*' -o -name '.#*' -o -name a.out \
87#		   -o -name '*.CKP' -o -name '.emacs_[0-9]*' \) \
88#			-a -atime +3 -exec rm -f -- {} \; -a -print > $TMP
89
90	egrep '\.core$|^core$' $TMP > $TMP2
91	if [ -s $TMP2 ]; then
92		echo ""
93		echo "Possible core dumps:"
94		cat $TMP2
95	fi
96
97#	egrep -v '\.core' $TMP > $TMP2
98#	if [ -s $TMP2 ]; then
99#		echo ""
100#		echo "Deleted files:"
101#		cat $TMP2
102#	fi
103
104	rm -f $TMP $TMP2
105fi
106
107if checkyesno run_msgs; then
108	msgs -c
109fi
110
111if checkyesno expire_news && [ -f /etc/news.expire ]; then
112	/etc/news.expire
113fi
114
115if checkyesno purge_accounting && [ -f /var/account/acct ]; then
116	echo ""
117	echo "Purging accounting records:"
118	if [ -f /var/account/acct.0.gz ]; then
119		mv /var/account/acct.2.gz /var/account/acct.3.gz 2>/dev/null
120		mv /var/account/acct.1.gz /var/account/acct.2.gz 2>/dev/null
121		mv /var/account/acct.0.gz /var/account/acct.1.gz 2>/dev/null
122	else
123		mv /var/account/acct.2 /var/account/acct.3 2>/dev/null
124		mv /var/account/acct.1 /var/account/acct.2 2>/dev/null
125		mv /var/account/acct.0 /var/account/acct.1 2>/dev/null
126	fi
127	cp /var/account/acct /var/account/acct.0
128	sa -sq
129	if [ -f /var/account/acct.1.gz ]; then
130		gzip /var/account/acct.0
131	fi
132fi
133
134if checkyesno run_calendar; then
135	calendar -a > $TMP 2>&1
136	if [ -s $TMP ]; then
137		echo ""
138		echo "Running calendar:"
139		cat $TMP
140	fi
141	rm -f $TMP
142fi
143
144if checkyesno check_uucp && \
145    [ -d /var/spool/uucp -a -f /usr/libexec/uucp/clean.daily ]; then
146	echo ""
147	echo "Cleaning up UUCP:"
148	su daemon -c /usr/libexec/uucp/clean.daily
149fi
150
151if checkyesno check_disks; then
152	if checkyesno show_remote_fs; then
153		df -hi -t nokernfs,procfs,null,fdesc > $TMP
154	else
155		df -hil -t nokernfs,procfs,null,fdesc > $TMP
156	fi
157	if [ -s /etc/dumpdates ] ; then
158		dump -W > $TMP2
159	fi
160	if [ -s $TMP -o -s $TMP2 ]; then
161		echo ""
162		echo "Checking subsystem status:"
163		echo ""
164		echo "disks:"
165		if [ -s $TMP ]; then
166			cat $TMP
167			echo ""
168		fi
169		if [ -s $TMP2 ]; then
170			cat $TMP2
171			echo ""
172		fi
173		echo ""
174	fi
175	rm -f $TMP $TMP2
176	touch $TMP2
177	for dev in `iostat -x | awk '/^raid/ { print $1 }'`; do
178		raidctl -s $dev | awk '/^.*: failed$/ {print $0}' > $TMP
179		if [ -s $TMP ]; then
180			echo "$dev:" >> $TMP2
181			cat $TMP >> $TMP2
182		fi
183		rm -f $TMP
184	done
185	if [ -s $TMP2 ]; then
186		echo "failed RAIDframe component(s):"
187			cat $TMP2
188	fi
189	rm -f $TMP2
190fi
191
192if checkyesno check_mailq; then
193	mailq > $TMP
194	if ! grep -q "queue is empty$" $TMP; then
195		echo ""
196		echo "mail:"
197		cat $TMP
198	fi
199fi
200
201rm -f $TMP
202
203if checkyesno check_uucp && [ -d /var/spool/uucp ]; then
204	(cd /tmp; su -m uucp -c "uustat -a") > $TMP
205	if [ -s $TMP ]; then
206		echo ""
207		echo "uucp:"
208		cat $TMP
209	fi
210fi
211
212rm -f $TMP
213
214if checkyesno check_network; then
215	echo ""
216	echo "network:"
217	if checkyesno full_netstat; then
218		netstat -inv
219	else
220		netstat -in | awk 'BEGIN {
221			ifs[""] = 0;
222		}
223		/^[^\*]* / {
224			if (NR == 1) {
225				printf("%-8s %10s %6s %10s %6s %6s\n",
226				  $1, $(NF-4), $(NF-3), $(NF-2), $(NF-1), $NF);
227				next;
228			}
229			if (!($1 in ifs)) {
230				printf("%-8s %10d %6d %10d %6d %6d\n",
231				  $1, $(NF-4), $(NF-3), $(NF-2), $(NF-1), $NF);
232				ifs[$1] = 1;
233			}
234		}'
235	fi
236	echo ""
237	t=/var/rwho/*
238	if [ "$t" != '/var/rwho/*' ]; then
239		ruptime
240	fi
241fi
242
243if checkyesno run_fsck; then
244	echo ""
245	echo "Checking filesystems:"
246	fsck -n -f | grep -v '^\*\* Phase'
247fi
248
249echo ""
250if checkyesno run_rdist && [ -f /etc/Distfile ]; then
251	echo "Running rdist:"
252	if [ -d /var/log/rdist ]; then
253		logf=`date +%Y.%b.%d`
254		rdist -f /etc/Distfile 2>&1 | tee /var/log/rdist/$logf
255	else
256		rdist -f /etc/Distfile 
257	fi
258fi
259
260if checkyesno run_security; then
261	SECOUT="$DAILYDIR/sec"
262	sh /etc/security > "$SECOUT" 2>&1
263	if [ ! -s "$SECOUT" ]; then
264		if checkyesno send_empty_security; then
265			echo "Nothing to report on $date" > "$SECOUT"
266		else
267			echo ""
268			echo "Suppressing empty security report."
269		fi
270	fi
271	if [ -s "$SECOUT" ]; then
272		mail -s "$host daily insecurity output for $date" \
273		    $MAILTO < "$SECOUT"
274	fi
275fi
276
277if checkyesno run_skeyaudit; then
278	if [ -s /etc/skeykeys ]; then
279		echo ""
280		echo "Checking remaining s/key OTPs:"
281		skeyaudit
282	fi
283fi
284
285if [ -f /etc/daily.local ]; then
286	echo ""
287	echo "Running /etc/daily.local:"
288	. /etc/daily.local
289fi
290