daily revision 1.64
1#!/bin/sh - 2# 3# $NetBSD: daily,v 1.64 2005/01/09 13:07:14 sketch Exp $ 4# @(#)daily 8.2 (Berkeley) 1/25/94 5# 6 7export PATH=/bin:/usr/bin:/sbin:/usr/sbin 8umask 077 9 10if [ -s /etc/daily.conf ]; then 11 . /etc/daily.conf 12fi 13 14host=`hostname` 15date=`date` 16rcvar_manpage='daily.conf(5)' 17 18echo "To: ${MAILTO:-root}" 19echo "Subject: $host daily output for $date" 20echo "" 21 22if [ -f /etc/rc.subr ]; then 23 . /etc/rc.subr 24else 25 echo "Can't read /etc/rc.subr; aborting." 26 exit 1; 27fi 28 29if [ -z "$MAILTO" -o "$USER" != "root" ]; then 30 MAILTO=root 31fi 32 33echo "" 34echo "Uptime: " `uptime` 35 36# Uncommenting any of the finds below would open up a race condition attack 37# based on symlinks, potentially allowing removal of any file on the system. 38# 39#echo "" 40#echo "Removing scratch and junk files:" 41#if [ -d /tmp -a ! -h /tmp ]; then 42# cd /tmp && { 43# find . -type f -atime +3 -exec rm -f -- {} \; 44# find . ! -name . -type d -mtime +1 -exec rmdir -- {} \; \ 45# >/dev/null 2>&1; } 46#fi 47 48#if [ -d /var/tmp -a ! -h /var/tmp ]; then 49# cd /var/tmp && { 50# find . ! -name . -atime +7 -exec rm -f -- {} \; 51# find . ! \( -name . -o -name vi.recover \) -type d \ 52# -mtime +1 -exec rmdir -- {} \; \ 53# >/dev/null 2>&1; } 54#fi 55 56# Additional junk directory cleanup would go like this: 57#if [ -d /scratch -a ! -h /scratch ]; then 58# cd /scratch && { 59# find . ! -name . -atime +1 -exec rm -f -- {} \; 60# find . ! -name . -type d -mtime +1 -exec rmdir -- {} \; \ 61# >/dev/null 2>&1; } 62#fi 63 64#if [ -d /var/rwho -a ! -h /var/rwho ] ; then 65# cd /var/rwho && { 66# find . ! -name . -mtime +7 -exec rm -f -- {} \; ; } 67#fi 68 69DAILYDIR=`mktemp -d /tmp/_daily.XXXXXX` || exit 1 70 71trap "/bin/rm -rf $DAILYDIR ; exit 0" EXIT INT QUIT 72 73if ! cd "$DAILYDIR"; then 74 echo "Can not cd to $DAILYDIR". 75 exit 1 76fi 77 78TMP=daily.$$ 79TMP2=daily2.$$ 80 81if checkyesno find_core; then 82 # Turn "foo !bar bax" into "-fstype foo -o ! -fstype bar -o -fstype bax" 83 ignfstypes=`echo $find_core_ignore_fstypes | \ 84 sed -e's/\(!*\)\([^[:space:]]\{1,\}\)/-o \1 -fstype \2/g' \ 85 -e's/^-o //'` 86 find / \( $ignfstypes \) -prune -o \ 87 -name 'lost+found' -prune -o \ 88 \( -name '*.core' -o -name 'core' \) -type f -print > $TMP 89# \( -name '[#,]*' -o -name '.#*' -o -name a.out \ 90# -o -name '*.CKP' -o -name '.emacs_[0-9]*' \) \ 91# -a -atime +3 -exec rm -f -- {} \; -a -print > $TMP 92 93 egrep '\.core$|^core$' $TMP > $TMP2 94 if [ -s $TMP2 ]; then 95 echo "" 96 echo "Possible core dumps:" 97 cat $TMP2 98 fi 99 100# egrep -v '\.core' $TMP > $TMP2 101# if [ -s $TMP2 ]; then 102# echo "" 103# echo "Deleted files:" 104# cat $TMP2 105# fi 106 107 rm -f $TMP $TMP2 108fi 109 110if checkyesno run_msgs; then 111 msgs -c 112fi 113 114if checkyesno expire_news && [ -f /etc/news.expire ]; then 115 /etc/news.expire 116fi 117 118if checkyesno purge_accounting && [ -f /var/account/acct ]; then 119 echo "" 120 echo "Purging accounting records:" 121 if [ -f /var/account/acct.0.gz ]; then 122 mv /var/account/acct.2.gz /var/account/acct.3.gz 2>/dev/null 123 mv /var/account/acct.1.gz /var/account/acct.2.gz 2>/dev/null 124 mv /var/account/acct.0.gz /var/account/acct.1.gz 2>/dev/null 125 else 126 mv /var/account/acct.2 /var/account/acct.3 2>/dev/null 127 mv /var/account/acct.1 /var/account/acct.2 2>/dev/null 128 mv /var/account/acct.0 /var/account/acct.1 2>/dev/null 129 fi 130 cp /var/account/acct /var/account/acct.0 131 sa -sq 132 if [ -f /var/account/acct.1.gz ]; then 133 gzip /var/account/acct.0 134 fi 135fi 136 137if checkyesno run_calendar; then 138 calendar -a > $TMP 2>&1 139 if [ -s $TMP ]; then 140 echo "" 141 echo "Running calendar:" 142 cat $TMP 143 fi 144 rm -f $TMP 145fi 146 147if checkyesno check_uucp && \ 148 [ -d /var/spool/uucp -a -f /usr/libexec/uucp/clean.daily ]; then 149 echo "" 150 echo "Cleaning up UUCP:" 151 su daemon -c /usr/libexec/uucp/clean.daily 152fi 153 154if checkyesno check_disks; then 155 if checkyesno show_remote_fs; then 156 df -hi -t nokernfs,procfs,null,fdesc > $TMP 157 else 158 df -hil -t nokernfs,procfs,null,fdesc > $TMP 159 fi 160 if [ -s /etc/dumpdates ] ; then 161 dump -W > $TMP2 162 fi 163 if [ -s $TMP -o -s $TMP2 ]; then 164 echo "" 165 echo "Checking subsystem status:" 166 echo "" 167 echo "disks:" 168 if [ -s $TMP ]; then 169 cat $TMP 170 echo "" 171 fi 172 if [ -s $TMP2 ]; then 173 cat $TMP2 174 echo "" 175 fi 176 echo "" 177 fi 178 rm -f $TMP $TMP2 179 touch $TMP2 180 for dev in `iostat -x | awk '/^raid/ { print $1 }'`; do 181 raidctl -s $dev | awk '/^.*: failed$/ {print $0}' > $TMP 182 if [ -s $TMP ]; then 183 echo "$dev:" >> $TMP2 184 cat $TMP >> $TMP2 185 fi 186 rm -f $TMP 187 done 188 if [ -s $TMP2 ]; then 189 echo "failed RAIDframe component(s):" 190 cat $TMP2 191 fi 192 rm -f $TMP2 193fi 194 195if checkyesno check_mailq; then 196 mailq > $TMP 197 if ! grep -q "queue is empty$" $TMP; then 198 echo "" 199 echo "mail:" 200 cat $TMP 201 fi 202fi 203 204rm -f $TMP 205 206if checkyesno check_uucp && [ -d /var/spool/uucp ]; then 207 (cd /tmp; su -m uucp -c "uustat -a") > $TMP 208 if [ -s $TMP ]; then 209 echo "" 210 echo "uucp:" 211 cat $TMP 212 fi 213fi 214 215rm -f $TMP 216 217if checkyesno check_network; then 218 echo "" 219 echo "network:" 220 if checkyesno full_netstat; then 221 netstat -inv 222 else 223 netstat -inv | awk 'BEGIN { 224 ifs[""] = 0; 225 } 226 /^[^\*]* / { 227 if (NR == 1) { 228 printf("%-8s %10s %6s %10s %6s %6s\n", 229 $1, $(NF-4), $(NF-3), $(NF-2), $(NF-1), $NF); 230 next; 231 } 232 if (!($1 in ifs)) { 233 printf("%-8s %10s %6s %10s %6s %6s\n", 234 $1, $(NF-4), $(NF-3), $(NF-2), $(NF-1), $NF); 235 ifs[$1] = 1; 236 } 237 }' 238 fi 239 echo "" 240 t=/var/rwho/* 241 if [ "$t" != '/var/rwho/*' ]; then 242 ruptime 243 fi 244fi 245 246if checkyesno run_fsck; then 247 echo "" 248 echo "Checking filesystems:" 249 fsck -n -f | grep -v '^\*\* Phase' 250fi 251 252echo "" 253if checkyesno run_rdist && [ -f /etc/Distfile ]; then 254 echo "Running rdist:" 255 if [ -d /var/log/rdist ]; then 256 logf=`date +%Y.%b.%d` 257 rdist -f /etc/Distfile 2>&1 | tee /var/log/rdist/$logf 258 else 259 rdist -f /etc/Distfile 260 fi 261fi 262 263if checkyesno run_security; then 264 SECOUT="$DAILYDIR/sec" 265 sh /etc/security > "$SECOUT" 2>&1 266 if [ ! -s "$SECOUT" ]; then 267 if checkyesno send_empty_security; then 268 echo "Nothing to report on $date" > "$SECOUT" 269 else 270 echo "" 271 echo "Suppressing empty security report." 272 fi 273 fi 274 if [ -s "$SECOUT" ]; then 275 mail -s "$host daily insecurity output for $date" \ 276 "$MAILTO" < "$SECOUT" 277 fi 278fi 279 280if checkyesno run_skeyaudit; then 281 if [ -s /etc/skeykeys ]; then 282 echo "" 283 echo "Checking remaining s/key OTPs:" 284 skeyaudit 285 fi 286fi 287 288if [ -f /etc/daily.local ]; then 289 . /etc/daily.local > $TMP 2>&1 290 if [ -s $TMP ] ; then 291 printf "\nRunning /etc/daily.local:\n" 292 cat $TMP 293 fi 294 rm -f $TMP 295fi 296