xref: /freebsd/usr.sbin/periodic/etc/daily/450.status-security (revision d0b2dbfa0ecf2bbc9709efc5e20baf8e4b44bbbf)
1*81ea85a8SBrad Davis#!/bin/sh
2*81ea85a8SBrad Davis#
3*81ea85a8SBrad Davis#
4*81ea85a8SBrad Davis
5*81ea85a8SBrad Davis# If there is a global system configuration file, suck it in.
6*81ea85a8SBrad Davis#
7*81ea85a8SBrad Davisif [ -r /etc/defaults/periodic.conf ]
8*81ea85a8SBrad Davisthen
9*81ea85a8SBrad Davis    . /etc/defaults/periodic.conf
10*81ea85a8SBrad Davis    source_periodic_confs
11*81ea85a8SBrad Davisfi
12*81ea85a8SBrad Davis
13*81ea85a8SBrad Daviscase "$daily_status_security_enable" in
14*81ea85a8SBrad Davis    [Yy][Ee][Ss])
15*81ea85a8SBrad Davis	echo ""
16*81ea85a8SBrad Davis	echo "Security check:"
17*81ea85a8SBrad Davis
18*81ea85a8SBrad Davis	case "$daily_status_security_inline" in
19*81ea85a8SBrad Davis	    [Yy][Ee][Ss])
20*81ea85a8SBrad Davis		daily_status_security_output="";;
21*81ea85a8SBrad Davis	esac
22*81ea85a8SBrad Davis
23*81ea85a8SBrad Davis	export security_output="${daily_status_security_output}"
24*81ea85a8SBrad Davis	rc=0
25*81ea85a8SBrad Davis	case "${daily_status_security_output}" in
26*81ea85a8SBrad Davis	    "")
27*81ea85a8SBrad Davis		if tempfile=`mktemp ${TMPDIR:-/tmp}/450.status-security.XXXXXX`
28*81ea85a8SBrad Davis		then
29*81ea85a8SBrad Davis			periodic security > $tempfile || rc=3
30*81ea85a8SBrad Davis			if [ -s "$tempfile" ]; then
31*81ea85a8SBrad Davis				cat "$tempfile"
32*81ea85a8SBrad Davis				rc=3
33*81ea85a8SBrad Davis			fi
34*81ea85a8SBrad Davis			rm -f "$tempfile"
35*81ea85a8SBrad Davis		fi;;
36*81ea85a8SBrad Davis	    /*)
37*81ea85a8SBrad Davis		echo "    (output logged separately)"
38*81ea85a8SBrad Davis		periodic security || rc=3;;
39*81ea85a8SBrad Davis	    *)
40*81ea85a8SBrad Davis		echo "    (output mailed separately)"
41*81ea85a8SBrad Davis		periodic security || rc=3;;
42*81ea85a8SBrad Davis	esac;;
43*81ea85a8SBrad Davis    *)  rc=0;;
44*81ea85a8SBrad Davisesac
45*81ea85a8SBrad Davis
46*81ea85a8SBrad Davisexit $rc
47