d/freebsd-skq
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
137,815 Commits 4 Branches 49 Tags 2 GiB
19a29bc737
Commit Graph

159 Commits

Author SHA1 Message Date
Dag-Erling Smørgrav
43085e37e4 Eliminate xargs in favor of find -exec {} + 2008-02-03 00:33:05 +00:00
Dag-Erling Smørgrav
a4afe9200c Rewrite to consume significantly less memory, by using find -s instead of 
find | sort.  As a bonus, this simplifies the logic considerably.  Also
remove the bogus "overruning the args to ls" comment and the corresponding
"-n 20" argument to xargs; the whole point with xargs is precisely that it
knows how large the argument list can safely get.

Note that the first run of the updated script may hypotheticall produce
false positives due to differences between find's and sort's sorting
algorithm.  I haven't seen this during testing, but others might.

MFC after:	2 weeks
 2008-02-02 12:27:37 +00:00
Diomidis Spinellis
f029c53a5c A new configuration variable, daily_status_mail_rejects_shorten, allows 
the rejected mail reports to tally the rejects per blacklist without
providing details about individual sender hosts.  The default configuration
keeps the reports in their original form.

MFC after:	1 week
 2008-01-08 07:22:43 +00:00
Ruslan Ermilov
5f3a6945d4 Also check setuid executables on ZFS. 2007-11-23 13:00:31 +00:00
Maxim Konovalov
f629328d0a o Install 480.status-ntpd. 
Pointed out by:	Henrik Brix Anders
 2007-05-14 17:34:59 +00:00
Maxim Konovalov
c7cc017f3b o Add a script to check ntpd(8) state. Default is off. 
PR:		conf/112604
Submitted by:	Oliver Fromme
MFC after:	1 month
 2007-05-13 09:33:35 +00:00
Pawel Jakub Dawidek
0daa3e3561 Add ZFS periodic scripts that monitors status of ZFS pools. 
Submitted by:	des
 2007-04-06 02:33:06 +00:00
Remko Lodder
217d9e4862 Only match on log messages containing fail,invalid, 
bad or illegal. This prevents matching on systems that
have a name that matches the query.

PR:		conf/107560
Submitted by:	Christian Laursen <cfsl at pil dot dk>
MFC after:	3 days
Approved by:	imp (mentor)
 2007-02-23 21:42:54 +00:00
Remko Lodder
4ee46876eb Move to the preferred syntax for nice (-n) instead 
of the depricated one.

PR:		conf/108611
Submitted by:	TAOKA Fumiyoshi <fmysh at iijmio-mail dot jp>
Approved by:	imp (mentor)
 2007-02-23 18:44:20 +00:00
John Polstra
bd4dbd7879 Use egrep instead of grep so that reporting of login failures (broken 
by revision 1.6) works again.  This fix is already in RELENG_6, but was
never committed to HEAD.
 2007-02-05 16:36:25 +00:00
Ruslan Ermilov
ca7f20f57f The kvm_mkdb(8) is long dead. 2006-08-29 08:49:58 +00:00
Tom Rhodes
b5aea37f80 Add login.conf checking to periodic security scripts. If the login.conf file 
is not UID/GID 0, limits will be ignored and a strange error sent to auth.log.

Head nod:	ru, rwatson
 2006-08-25 07:34:36 +00:00
Maxim Konovalov
e64917677e o Add missed $start variable in the grep statement back. 
PR:		conf/96658
Submitted by:	James Snow
MFC after:	1 week
 2006-06-11 20:39:12 +00:00
Max Laier
9277da52e1 Move etc/rc.firewall6 to ipfw2+v6, update related rc.d and periodic scripts. 
Since ipfw2 now does dual-stack, statistics for IPv6 come from the ipfw
scripts as well.
 2006-05-12 19:17:34 +00:00
Matteo Riondato
846bc8c6f4 Fix output and exit status when daily_mailq_shorten is set to YES 
PR:		conf/93472
MFC after:	3
 2006-03-08 17:26:53 +00:00
Matteo Riondato
fe468fe9c0 Enhance loginfail: it will catch sshd, proftpd and su errors, as well as other programs 
PR: conf/70973
Submitted by:	Ryan Sommers" <ryans@gamersimpact.com>
Approved by:	philip (mentor)
MFC after:	3 days
 2006-03-05 15:45:38 +00:00
Christian Brueffer
9ccfd1e437 Add periodic scripts that check the status of graid3(8), gstripe(8) 
and gconcat(8) devices, respectively.

Approved by:	rwatson (mentor)
 2006-03-02 14:44:19 +00:00
Matteo Riondato
2da6fa9f1f When there are no interesting information in output, exit with 0. 
PR:		conf/92299
Submitted by:	Petr Rehor <prehor@gmail.com>
Approved by:	philip (mentor)
MFC after:	3 days
 2006-02-07 08:21:06 +00:00
Maxim Konovalov
eb6b185e1e o Add 406.status-gmirror, sort. 
Submitted by:	brueffer
 2006-01-21 20:16:30 +00:00
Garrett Wollman
9960bd718b Add a daily script to show the status of gmirror(8) devices. 2006-01-13 18:07:52 +00:00
Doug Barton
a2362f35f6 Update the test for failed zone transfers to reflect BIND 9.3.1 semantics 
Simplify the shell scripting a bit, and remove a useless grep | sed

The problem was pointed out by the PR, and I used part of the solution
suggested there, but the semantics changed again for 9.2.x -> 9.3.x.

PR:		conf/74228
Submitted by:	Jeremy Chadwick <freebsd@jdc.parodius.com>
 2005-11-22 22:24:27 +00:00
Maxim Konovalov
17793b6ae5 A new version of rev. 1.4: postpone a temporary file creation 
until we realize if ipfw(4) ever used.

PR:		bin/85970
Submitted by:	Andre Albsmeier
MFC after:	3 days
 2005-09-11 14:29:58 +00:00
Gleb Smirnoff
fcb3c1b182 Fix braino in last commit. Print nothing if ipfw(4) is not present. 2005-08-31 08:31:14 +00:00
Colin Percival
d7883da19f When looking for new lines in diff output, grep for '^[>+]' instead of 
'^>', in order to catch both normal and unified diffs.

Problem reported by:	volker at vwsoft dot com via -stable
MFC after:	3 days
 2005-08-22 09:33:36 +00:00
Gleb Smirnoff
07d6ed30ec - Correctly parse output, when logging amount is limited in the 
rule itself, not in verbose_limit sysctl. [1]
- Do check rules, even if verbose_limit is set 0. Rules may have
  their own log limits.

PR:		conf/77929
Submitted by:	Andriy Gapon [1]
Reviewed by:	matteo
 2005-08-20 09:41:49 +00:00
Ruslan Ermilov
8aad57438b Purge orphan catpages. 
PR:		conf/35242
Submitted by:	Annihilator <annihilator.c@usa.net>
 2005-03-30 18:02:49 +00:00
Suleiman Souhlal
71b7f1cffb Replace "ipfw l", which is now deprecated, with "ipfw list". 
Approved by:	grehan (mentor)
 2005-02-23 15:07:36 +00:00
Gleb Smirnoff
aed9792fae Don't do setuid checks on file systems mounted with noexec option. 
Reviewed by:	brian, ru
MFC after:	1 week
 2005-01-13 15:07:35 +00:00
Brian Somers
b96d69488c Sed doesn't grok '[ \t]' -- it doesn't expand the \t :( 
As there are no tabs in maillog, reduce the expression so that only spaces
are used.

Problem raised by:      Leif Neland root at internet dot dk
 2005-01-12 01:31:21 +00:00
Brian Somers
b389bf7570 Oops, the < in arg1=< is optional - treat it as such! 2005-01-11 10:54:38 +00:00
Brian Somers
cd3384a7ec Adjust the mail reject output so that it gives an abreviated reason for the 
reject.  For example:

Checking for rejected mail hosts:
  48 getherbalnow.info (451... resolve)
  46 absorb.com (451... resolve)
   4 tgmart01.codns.com (553... exist)
   3 kali.com.cn (451... resolve)
   2 genie.com (451... resolve)
   1 zv.qy (553... exist)
   1 zd.hinet.hr (553... exist)
   ....

The bit in parenthesis is the reject code and the last word on the line -
enough to give the admin a better chance of seeing real problems (hopefully!).

While I'm here, remove the "<" at the start of rejects coming from "from"
addresses without a name@ part.

I had to rewrite the patch given by the submitter as this script has been
sed'ified (used to be perl) and I think the reject code is useful....

PR:		17377
Idea from:	root at ns dot internet dot dk
MFC after:	7 days
 2005-01-11 02:08:53 +00:00
Brian Somers
ea7e63ea87 Collapse "fgrep | egrep | sed" down to a single sed. 
This also trims extraneous commas from domain names.

MFC after:	7 days
 2005-01-11 01:47:44 +00:00
Ruslan Ermilov
e653b48c80 Start the dreaded NOFOO -> NO_FOO conversion. 
OK'ed by:	core
 2004-12-21 08:47:35 +00:00
Max Laier
66754ab3f1 Teach periodic(8) security output to display information about blocked 
packet counts by pf(4).

This adds a ``daily_status_security_pfdenied_enable'' variable to
periodic.conf, which defaults to ``YES'' as the matching IPF(W) versions.

The output will look like this (line wrapped):

  pf denied packets:
  > block drop log on rl0 proto tcp all [ Evaluations: 504986 Packets: 0
    Bytes: 0 States: 0 ]
  > block drop log on rl0 all [ Evaluations: 18559 Packets: 427 Bytes: 140578
    States: 0 ]

Submitted by:	clive (thanks a lot!)
MFC after:	2 weeks
 2004-11-24 18:41:53 +00:00
Joseph Koshy
59583bf53c Add a knob 'daily_status_security_diff_flags' controlling the 
format of the 'diff' output generated during periodic(8) scripts.

Submitted by:	keramida (script changes)
Reviewed by:	keramida (man page changes)
 2004-09-23 02:00:52 +00:00
Josef Karthauser
bb1e7a5e19 Allow the location of the INDEX file to specified to pkg_version. 
This is particularly convenient on a cluster of machines to prevent
having to rebuild the INDEX file on each.

Reviewed by:	portmgr
 2004-05-19 09:18:08 +00:00
Darren Reed
167992ad9a Add script for checking ipv6 blocked packets from PR. 
PR:		misc/50154
Submitted by:	Kimura Fuyuki <fuyuki@hadaly.org>
 2004-04-20 13:44:57 +00:00
Andrey A. Chernov
6fec5a9e2a Don't remove empty dirs if their names are in $daily_clean_tmps_ignore 2004-02-28 04:58:40 +00:00
Gregory Neil Shapiro
75d80d9541 Use hoststat/purgestat instead of sendmail -bh/-bH so the calls can 
be properly mailwrapper'ed.

PR:		conf/60676
Submitted by:	Colin Percival <cperciva@daemonology.net>, maxim
MFC after:	4 days
 2004-01-02 18:50:22 +00:00
Ruslan Ermilov
9ef295f29e Use %e in the date(1) format string to eliminate the sed(1) command. 2003-11-07 21:55:35 +00:00
Jesper Skriver
9eebf81523 Add status checking of ATA raid to the daily periodic scripts. 2003-10-27 20:14:53 +00:00
Mike Makonnen
3b5ba84fd2 Have mktemp(1) construct the temporary file name for us instead 
of providing a template manually.

Submitted by:	Lars Eggert <larse@isi.edu>
 2003-06-30 22:06:26 +00:00
John Baldwin
711c2e1de2 Remove 220.backup-distfile since it has been deleted. 
Reported by:	mdodd
Pointy hat to:	jhb
 2003-04-01 20:32:01 +00:00
John Baldwin
3165d2ea56 Complete removal of 320.rdist by removing its entry from periodic.conf and 
removing the related 220.backup-distfile script and associatd periodic.conf
entry.

Discussed with:	obrien
 2003-04-01 17:45:27 +00:00
David E. O'Brien
1b79399c2b 320.rdist is OBE as we don't have rdist in the base system any more. 2003-03-29 03:28:28 +00:00
David E. O'Brien
d19c3acb44 This is OBE as we don't have rdist in the base system any longer. 2003-03-29 03:27:49 +00:00
Garrett Wollman
de1d122868 Do not do manually what sendmail(8) can do better automatically. 
Tell sendmail to clean up its own host status cache.
The error condition handling could probably be done better.
 2003-01-08 18:51:45 +00:00
Stefan Eßer
2068678af4 Add support for bzip2ed log files. 2003-01-05 21:32:50 +00:00
Giorgos Keramidas
0333ea509d Avoid using perl in the periodic & security scripts. This brings the 
base system one step closer to being totally perl-free.

Approved by:	re (jhb)
 2002-12-07 23:37:44 +00:00
Thomas Quinot
da509dd293 Do not emit a message on stderr when one of the compared files 
is shorter than the other.

Reviewed by:	roberto
MFC after:	3 days
 2002-11-16 14:58:39 +00:00