daily revision 1.73 
1#!/bin/sh -
2#
3#	$NetBSD: daily,v 1.73 2010/01/19 22:08:11 jmmv Exp $
4#	@(#)daily	8.2 (Berkeley) 1/25/94
5#
6
7export PATH=/bin:/usr/bin:/sbin:/usr/sbin
8umask 077
9
10if [ -s /etc/daily.conf ]; then
11	. /etc/daily.conf
12fi
13
14host=`hostname`
15date=`date`
16rcvar_manpage='daily.conf(5)'
17
18echo "To: ${MAILTO:-root}"
19echo "Subject: $host daily output for $date"
20echo ""
21
22if [ -f /etc/rc.subr ]; then
23	. /etc/rc.subr
24else
25	echo "Can't read /etc/rc.subr; aborting."
26	exit 1;
27fi
28
29if [ -z "$MAILTO" -o "$USER" != "root" ]; then
30	MAILTO=root
31fi
32
33echo ""
34echo "Uptime: " `uptime`
35
36# Uncommenting any of the finds below would open up a race condition attack
37# based on symlinks, potentially allowing removal of any file on the system.
38#
39#echo ""
40#echo "Removing scratch and junk files:"
41#if [ -d /tmp -a ! -h /tmp ]; then
42#	cd /tmp && {
43#	find . -type f -atime +3 -exec rm -f -- {} \;
44#	find . ! -name . -type d -mtime +1 -exec rmdir -- {} \; \
45#	    >/dev/null 2>&1; }
46#fi
47
48#if [ -d /var/tmp -a ! -h /var/tmp ]; then
49#	cd /var/tmp && {
50#	find . ! -name . -atime +7 -exec rm -f -- {} \;
51#	find . ! \( -name . -o -name vi.recover \) -type d \
52#		-mtime +1 -exec rmdir -- {} \; \
53#	    >/dev/null 2>&1; }
54#fi
55
56# Additional junk directory cleanup would go like this:
57#if [ -d /scratch -a ! -h /scratch ]; then
58#	cd /scratch && {
59#	find . ! -name . -atime +1 -exec rm -f -- {} \;
60#	find . ! -name . -type d -mtime +1 -exec rmdir -- {} \; \
61#	    >/dev/null 2>&1; }
62#fi
63
64#if [ -d /var/rwho -a ! -h /var/rwho ] ; then
65#	cd /var/rwho && {
66#	find . ! -name . -mtime +7 -exec rm -f -- {} \; ; }
67#fi
68
69DAILYDIR=$(mktemp -d -t _daily) || exit 1
70
71trap "/bin/rm -rf $DAILYDIR ; exit 0" EXIT INT QUIT
72
73if ! cd "$DAILYDIR"; then
74	echo "Can not cd to $DAILYDIR".
75	exit 1
76fi
77
78TMP=daily.$$
79TMP2=daily2.$$
80
81if checkyesno find_core; then
82	# Turn "foo !bar bax" into "-fstype foo -o ! -fstype bar -o -fstype bax"
83	ignfstypes=`echo $find_core_ignore_fstypes | \
84		sed -e's/\(!*\)\([^[:space:]]\{1,\}\)/-o \1 -fstype \2/g' \
85		    -e's/^-o //'`
86	find / \( $ignfstypes \) -prune -o \
87		-name 'lost+found' -prune -o \
88		\( -name '*.core' -o -name 'core' \) -type f -print > $TMP
89#		\( -name '[#,]*' -o -name '.#*' -o -name a.out \
90#		   -o -name '*.CKP' -o -name '.emacs_[0-9]*' \) \
91#			-a -atime +3 -exec rm -f -- {} \; -a -print > $TMP
92
93	egrep '\.core$|^core$' $TMP > $TMP2
94	if [ -s $TMP2 ]; then
95		echo ""
96		echo "Possible core dumps:"
97		cat $TMP2
98	fi
99
100#	egrep -v '\.core' $TMP > $TMP2
101#	if [ -s $TMP2 ]; then
102#		echo ""
103#		echo "Deleted files:"
104#		cat $TMP2
105#	fi
106
107	rm -f $TMP $TMP2
108fi
109
110if checkyesno run_msgs; then
111	msgs -c
112fi
113
114if checkyesno expire_news && [ -f /etc/news.expire ]; then
115	/etc/news.expire
116fi
117
118if checkyesno purge_accounting && [ -f /var/account/acct ]; then
119	echo ""
120	echo "Purging accounting records:"
121	if [ -f /var/account/acct.0.gz ]; then
122		mv /var/account/acct.2.gz /var/account/acct.3.gz 2>/dev/null
123		mv /var/account/acct.1.gz /var/account/acct.2.gz 2>/dev/null
124		mv /var/account/acct.0.gz /var/account/acct.1.gz 2>/dev/null
125	else
126		mv /var/account/acct.2 /var/account/acct.3 2>/dev/null
127		mv /var/account/acct.1 /var/account/acct.2 2>/dev/null
128		mv /var/account/acct.0 /var/account/acct.1 2>/dev/null
129	fi
130	cp /var/account/acct /var/account/acct.0
131	sa -sq
132	if [ -f /var/account/acct.1.gz ]; then
133		gzip /var/account/acct.0
134	fi
135fi
136
137if checkyesno run_calendar; then
138	calendar -a > $TMP 2>&1
139	if [ -s $TMP ]; then
140		echo ""
141		echo "Running calendar:"
142		cat $TMP
143	fi
144	rm -f $TMP
145fi
146
147if checkyesno check_disks; then
148	if checkyesno show_remote_fs; then
149		df -hi -t nokernfs,procfs,ptyfs,null,fdesc > $TMP
150	else
151		df -hil -t nokernfs,procfs,ptyfs,null,fdesc > $TMP
152	fi
153	if [ -s /etc/dumpdates ] ; then
154		dump -W > $TMP2
155	fi
156	if [ -s $TMP -o -s $TMP2 ]; then
157		echo ""
158		echo "Checking subsystem status:"
159		echo ""
160		echo "disks:"
161		if [ -s $TMP ]; then
162			cat $TMP | sed 's/Mounted on/Mount/'
163			echo ""
164		fi
165		if [ -s $TMP2 ]; then
166			cat $TMP2
167			echo ""
168		fi
169		echo ""
170	fi
171	rm -f $TMP $TMP2
172	touch $TMP2
173	for dev in `iostat -x | awk '/^raid/ { print $1 }'`; do
174		raidctl -s $dev | awk '/^.*: failed$/ {print $0}' > $TMP
175		if [ -s $TMP ]; then
176			echo "$dev:" >> $TMP2
177			cat $TMP >> $TMP2
178		fi
179		rm -f $TMP
180	done
181	if [ -s $TMP2 ]; then
182		echo "failed RAIDframe component(s):"
183			cat $TMP2
184	fi
185	rm -f $TMP2
186fi
187
188if checkyesno check_mailq; then
189	mailq > $TMP
190	if ! grep -q "queue is empty$" $TMP; then
191		echo ""
192		echo "mail:"
193		cat $TMP
194	fi
195fi
196
197rm -f $TMP
198
199if checkyesno check_network; then
200	echo ""
201	echo "network:"
202	if checkyesno full_netstat; then
203		netstat -inv
204	else
205		netstat -inv | awk 'BEGIN {
206			ifs[""] = 0;
207		}
208		/^[^\*]* / {
209			if (NR == 1) {
210				printf("%-8s %12s %6s %12s %6s %6s\n",
211				  $1, $(NF-4), $(NF-3), $(NF-2), $(NF-1), $NF);
212				next;
213			}
214			if (!($1 in ifs)) {
215				printf("%-8s %12s %6s %12s %6s %6s\n",
216				  $1, $(NF-4), $(NF-3), $(NF-2), $(NF-1), $NF);
217				ifs[$1] = 1;
218			}
219		}'
220	fi
221	echo ""
222	t=/var/rwho/*
223	if [ "$t" != '/var/rwho/*' ]; then
224		ruptime
225	fi
226fi
227
228if checkyesno run_fsck; then
229	echo ""
230	echo "Checking filesystems:"
231	fsck -n -f ${run_fsck_flags} | grep -v '^\*\* Phase'
232fi
233
234echo ""
235if checkyesno run_rdist && [ -f /etc/Distfile ]; then
236	echo "Running rdist:"
237	if [ -d /var/log/rdist ]; then
238		logf=`date +%Y.%b.%d`
239		rdist -f /etc/Distfile 2>&1 | tee /var/log/rdist/$logf
240	else
241		rdist -f /etc/Distfile 
242	fi
243fi
244
245: ${pkgdb_dir:=/var/db/pkg}
246
247if pkg_info -K ${pkgdb_dir} -q -E '*'; then
248	if checkyesno fetch_pkg_vulnerabilities; then
249		echo ""
250		echo "Fetching package vulnerabilities database:"
251		pkg_admin -K ${pkgdb_dir} fetch-pkg-vulnerabilities -u
252	fi
253fi
254
255if checkyesno run_security; then
256	SECOUT="$DAILYDIR/sec"
257	sh /etc/security > "$SECOUT" 2>&1
258	if [ ! -s "$SECOUT" ]; then
259		if checkyesno send_empty_security; then
260			echo "Nothing to report on $date" > "$SECOUT"
261		else
262			echo ""
263			echo "Suppressing empty security report."
264		fi
265	fi
266	if [ -s "$SECOUT" ]; then
267		mail -s "$host daily insecurity output for $date" \
268		    "$MAILTO" < "$SECOUT"
269	fi
270fi
271
272if checkyesno run_skeyaudit; then
273	if [ -s /etc/skeykeys ]; then
274		echo ""
275		echo "Checking remaining s/key OTPs:"
276		skeyaudit
277	fi
278fi
279
280if [ -f /etc/daily.local ]; then
281	( . /etc/daily.local ) > $TMP 2>&1
282	if [ -s $TMP ] ; then
283		printf "\nRunning /etc/daily.local:\n"
284		cat $TMP
285	fi
286	rm -f $TMP
287fi
288