d/freebsd-dev
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Add -s -a and -m flags for supressing the subject line, ignoring amd

Browse Source 
mounts and ignoring mfs mounts.
Default functionality stays the same.
This commit is contained in:
Brian Somers 2000-06-23 01:16:49 +00:00
parent c1a4ed010b
commit 32ee60d7b8
Notes: svn2git 2020-12-20 02:59:44 +00:00 
svn path=/head/; revision=61980
1 changed files with 17 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

23
etc/security
View File

@ -11,10 +11,20 @@ separator () {
echo ''
}
sflag=FALSE ignore=
while getopts ams c
do
case "$c" in
a) ignore="$ignore|^amd:";;
m) ignore="$ignore|^mfs:";;
s) sflag=TRUE;;
esac
done
yesterday=`date -v-1d "+%b %e "`
host=`hostname`
echo "Subject: ${host} security check output"
[ $sflag = FALSE ] && echo "Subject: ${host} security check output"
LOG=/var/log
TMP=/var/run/_secure.$$
@ -43,7 +53,7 @@ if [ ! -f ${LOG}/setuid.today ]; then
cp ${TMP} ${LOG}/setuid.today
fi
if cmp ${LOG}/setuid.today ${TMP} >/dev/null; then :; else
if ! cmp ${LOG}/setuid.today ${TMP} >/dev/null; then
separator
echo "${host} setuid diffs:"
diff -b ${LOG}/setuid.today ${TMP}
@ -53,13 +63,14 @@ fi
# Show changes in the way filesystems are mounted
#
if mount -p > $TMP; then
[ -n "$ignore" ] && cmd="egrep -v ${ignore#|}" || cmd=cat
if mount -p | $cmd > $TMP; then
if [ ! -f $LOG/mount.today ]; then
separator
echo "no $LOG/mount.today"
cp $TMP $LOG/mount.today
fi
if cmp $LOG/mount.today $TMP >/dev/null 2>&1; then :; else
if ! cmp $LOG/mount.today $TMP >/dev/null 2>&1; then
separator
echo "$host changes in mounted filesystems:"
diff -b $LOG/mount.today $TMP
@ -85,7 +96,7 @@ if ipfw -a l 2>/dev/null | egrep "deny|reset|unreach" > ${TMP}; then
cp ${TMP} ${LOG}/ipfw.today
fi
if cmp ${LOG}/ipfw.today ${TMP} >/dev/null; then :; else
if ! cmp ${LOG}/ipfw.today ${TMP} >/dev/null; then
separator
echo "${host} denied packets:"
diff -b ${LOG}/ipfw.today ${TMP} | egrep "^>"
@ -116,7 +127,7 @@ if dmesg 2>/dev/null > ${TMP}; then
cp ${TMP} ${LOG}/dmesg.today
fi
if cmp ${LOG}/dmesg.today ${TMP} >/dev/null 2>&1; then :; else
if ! cmp ${LOG}/dmesg.today ${TMP} >/dev/null 2>&1; then
separator
echo "${host} kernel log messages:"
diff -b ${LOG}/dmesg.today ${TMP} | egrep "^>"