daily revision 1.59 
1#!/bin/sh -
2#
3#	$NetBSD: daily,v 1.59 2004/04/02 13:13:47 jmmv Exp $
4#	@(#)daily	8.2 (Berkeley) 1/25/94
5#
6
7export PATH=/bin:/usr/bin:/sbin:/usr/sbin
8umask 077
9
10if [ -s /etc/daily.conf ]; then
11	. /etc/daily.conf
12fi
13
14host=`hostname`
15date=`date`
16rcvar_manpage='daily.conf(5)'
17
18echo "To: ${MAILTO:-root}"
19echo "Subject: $host daily output for $date"
20echo ""
21
22if [ -f /etc/rc.subr ]; then
23	. /etc/rc.subr
24else
25	echo "Can't read /etc/rc.subr; aborting."
26	exit 1;
27fi
28
29if [ -z "$MAILTO" -o "$USER" != "root" ]; then
30	MAILTO=root
31fi
32
33echo ""
34echo "Uptime: " `uptime`
35
36# Uncommenting any of the finds below would open up a race condition attack
37# based on symlinks, potentially allowing removal of any file on the system.
38#
39#echo ""
40#echo "Removing scratch and junk files:"
41#if [ -d /tmp -a ! -h /tmp ]; then
42#	cd /tmp && {
43#	find . -type f -atime +3 -exec rm -f -- {} \;
44#	find . ! -name . -type d -mtime +1 -exec rmdir -- {} \; \
45#	    >/dev/null 2>&1; }
46#fi
47
48#if [ -d /var/tmp -a ! -h /var/tmp ]; then
49#	cd /var/tmp && {
50#	find . ! -name . -atime +7 -exec rm -f -- {} \;
51#	find . ! \( -name . -o -name vi.recover \) -type d \
52#		-mtime +1 -exec rmdir -- {} \; \
53#	    >/dev/null 2>&1; }
54#fi
55
56# Additional junk directory cleanup would go like this:
57#if [ -d /scratch -a ! -h /scratch ]; then
58#	cd /scratch && {
59#	find . ! -name . -atime +1 -exec rm -f -- {} \;
60#	find . ! -name . -type d -mtime +1 -exec rmdir -- {} \; \
61#	    >/dev/null 2>&1; }
62#fi
63
64#if [ -d /var/rwho -a ! -h /var/rwho ] ; then
65#	cd /var/rwho && {
66#	find . ! -name . -mtime +7 -exec rm -f -- {} \; ; }
67#fi
68
69DAILYDIR=`mktemp -d /tmp/_daily.XXXXXX` || exit 1
70
71trap "/bin/rm -rf $DAILYDIR ; exit 0" EXIT INT QUIT
72
73if ! cd "$DAILYDIR"; then
74	echo "Can not cd to $DAILYDIR".
75	exit 1
76fi
77
78TMP=daily.$$
79TMP2=daily2.$$
80
81if checkyesno find_core; then
82	find / \( ! -fstype local -o -fstype rdonly -o -fstype fdesc \
83		-o -fstype null \
84		-o -fstype kernfs -o -fstype procfs \) -prune -o \
85		-name 'lost+found' -prune -o \
86		\( -name '*.core' -o -name 'core' \) -type f -print > $TMP
87#		\( -name '[#,]*' -o -name '.#*' -o -name a.out \
88#		   -o -name '*.CKP' -o -name '.emacs_[0-9]*' \) \
89#			-a -atime +3 -exec rm -f -- {} \; -a -print > $TMP
90
91	egrep '\.core$|^core$' $TMP > $TMP2
92	if [ -s $TMP2 ]; then
93		echo ""
94		echo "Possible core dumps:"
95		cat $TMP2
96	fi
97
98#	egrep -v '\.core' $TMP > $TMP2
99#	if [ -s $TMP2 ]; then
100#		echo ""
101#		echo "Deleted files:"
102#		cat $TMP2
103#	fi
104
105	rm -f $TMP $TMP2
106fi
107
108if checkyesno run_msgs; then
109	msgs -c
110fi
111
112if checkyesno expire_news && [ -f /etc/news.expire ]; then
113	/etc/news.expire
114fi
115
116if checkyesno purge_accounting && [ -f /var/account/acct ]; then
117	echo ""
118	echo "Purging accounting records:"
119	if [ -f /var/account/acct.0.gz ]; then
120		mv /var/account/acct.2.gz /var/account/acct.3.gz 2>/dev/null
121		mv /var/account/acct.1.gz /var/account/acct.2.gz 2>/dev/null
122		mv /var/account/acct.0.gz /var/account/acct.1.gz 2>/dev/null
123	else
124		mv /var/account/acct.2 /var/account/acct.3 2>/dev/null
125		mv /var/account/acct.1 /var/account/acct.2 2>/dev/null
126		mv /var/account/acct.0 /var/account/acct.1 2>/dev/null
127	fi
128	cp /var/account/acct /var/account/acct.0
129	sa -sq
130	if [ -f /var/account/acct.1.gz ]; then
131		gzip /var/account/acct.0
132	fi
133fi
134
135if checkyesno run_calendar; then
136	calendar -a > $TMP 2>&1
137	if [ -s $TMP ]; then
138		echo ""
139		echo "Running calendar:"
140		cat $TMP
141	fi
142	rm -f $TMP
143fi
144
145if checkyesno check_uucp && \
146    [ -d /var/spool/uucp -a -f /usr/libexec/uucp/clean.daily ]; then
147	echo ""
148	echo "Cleaning up UUCP:"
149	su daemon -c /usr/libexec/uucp/clean.daily
150fi
151
152if checkyesno check_disks; then
153	if checkyesno show_remote_fs; then
154		df -hi -t nokernfs,procfs,null,fdesc > $TMP
155	else
156		df -hil -t nokernfs,procfs,null,fdesc > $TMP
157	fi
158	if [ -s /etc/dumpdates ] ; then
159		dump -W > $TMP2
160	fi
161	if [ -s $TMP -o -s $TMP2 ]; then
162		echo ""
163		echo "Checking subsystem status:"
164		echo ""
165		echo "disks:"
166		if [ -s $TMP ]; then
167			cat $TMP
168			echo ""
169		fi
170		if [ -s $TMP2 ]; then
171			cat $TMP2
172			echo ""
173		fi
174		echo ""
175	fi
176	rm -f $TMP $TMP2
177	touch $TMP2
178	for dev in `iostat -x | awk '/^raid/ { print $1 }'`; do
179		raidctl -s $dev | awk '/^.*: failed$/ {print $0}' > $TMP
180		if [ -s $TMP ]; then
181			echo "$dev:" >> $TMP2
182			cat $TMP >> $TMP2
183		fi
184		rm -f $TMP
185	done
186	if [ -s $TMP2 ]; then
187		echo "failed RAIDframe component(s):"
188			cat $TMP2
189	fi
190	rm -f $TMP2
191fi
192
193if checkyesno check_mailq; then
194	mailq > $TMP
195	if ! grep -q "queue is empty$" $TMP; then
196		echo ""
197		echo "mail:"
198		cat $TMP
199	fi
200fi
201
202rm -f $TMP
203
204if checkyesno check_uucp && [ -d /var/spool/uucp ]; then
205	(cd /tmp; su -m uucp -c "uustat -a") > $TMP
206	if [ -s $TMP ]; then
207		echo ""
208		echo "uucp:"
209		cat $TMP
210	fi
211fi
212
213rm -f $TMP
214
215if checkyesno check_network; then
216	echo ""
217	echo "network:"
218	if checkyesno full_netstat; then
219		netstat -inv
220	else
221		netstat -in | awk 'BEGIN {
222			ifs[""] = 0;
223		}
224		/^[^\*]* / {
225			if (NR == 1) {
226				printf("%-8s %10s %6s %10s %6s %6s\n",
227				  $1, $(NF-4), $(NF-3), $(NF-2), $(NF-1), $NF);
228				next;
229			}
230			if (!($1 in ifs)) {
231				printf("%-8s %10d %6d %10d %6d %6d\n",
232				  $1, $(NF-4), $(NF-3), $(NF-2), $(NF-1), $NF);
233				ifs[$1] = 1;
234			}
235		}'
236	fi
237	echo ""
238	t=/var/rwho/*
239	if [ "$t" != '/var/rwho/*' ]; then
240		ruptime
241	fi
242fi
243
244if checkyesno run_fsck; then
245	echo ""
246	echo "Checking filesystems:"
247	fsck -n -f | grep -v '^\*\* Phase'
248fi
249
250echo ""
251if checkyesno run_rdist && [ -f /etc/Distfile ]; then
252	echo "Running rdist:"
253	if [ -d /var/log/rdist ]; then
254		logf=`date +%Y.%b.%d`
255		rdist -f /etc/Distfile 2>&1 | tee /var/log/rdist/$logf
256	else
257		rdist -f /etc/Distfile 
258	fi
259fi
260
261if checkyesno run_security; then
262	SECOUT="$DAILYDIR/sec"
263	sh /etc/security > "$SECOUT" 2>&1
264	if [ ! -s "$SECOUT" ]; then
265		if checkyesno send_empty_security; then
266			echo "Nothing to report on $date" > "$SECOUT"
267		else
268			echo ""
269			echo "Suppressing empty security report."
270		fi
271	fi
272	if [ -s "$SECOUT" ]; then
273		mail -s "$host daily insecurity output for $date" \
274		    $MAILTO < "$SECOUT"
275	fi
276fi
277
278if checkyesno run_skeyaudit; then
279	if [ -s /etc/skeykeys ]; then
280		echo ""
281		echo "Checking remaining s/key OTPs:"
282		skeyaudit
283	fi
284fi
285
286if [ -f /etc/daily.local ]; then
287	echo ""
288	echo "Running /etc/daily.local:"
289	. /etc/daily.local
290fi
291