xref: /freebsd/usr.sbin/periodic/etc/security/200.chkmounts (revision aa48259f337100e79933d660fec8856371f761ed)
1*81ea85a8SBrad Davis#!/bin/sh -
2*81ea85a8SBrad Davis#
3*81ea85a8SBrad Davis# Copyright (c) 2001  The FreeBSD Project
4*81ea85a8SBrad Davis# All rights reserved.
5*81ea85a8SBrad Davis#
6*81ea85a8SBrad Davis# Redistribution and use in source and binary forms, with or without
7*81ea85a8SBrad Davis# modification, are permitted provided that the following conditions
8*81ea85a8SBrad Davis# are met:
9*81ea85a8SBrad Davis# 1. Redistributions of source code must retain the above copyright
10*81ea85a8SBrad Davis#    notice, this list of conditions and the following disclaimer.
11*81ea85a8SBrad Davis# 2. Redistributions in binary form must reproduce the above copyright
12*81ea85a8SBrad Davis#    notice, this list of conditions and the following disclaimer in the
13*81ea85a8SBrad Davis#    documentation and/or other materials provided with the distribution.
14*81ea85a8SBrad Davis#
15*81ea85a8SBrad Davis# THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
16*81ea85a8SBrad Davis# ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
17*81ea85a8SBrad Davis# IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
18*81ea85a8SBrad Davis# ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
19*81ea85a8SBrad Davis# FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
20*81ea85a8SBrad Davis# DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
21*81ea85a8SBrad Davis# OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
22*81ea85a8SBrad Davis# HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
23*81ea85a8SBrad Davis# LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
24*81ea85a8SBrad Davis# OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
25*81ea85a8SBrad Davis# SUCH DAMAGE.
26*81ea85a8SBrad Davis#
27*81ea85a8SBrad Davis#
28*81ea85a8SBrad Davis
29*81ea85a8SBrad Davis# Show changes in the way filesystems are mounted
30*81ea85a8SBrad Davis#
31*81ea85a8SBrad Davis
32*81ea85a8SBrad Davis# If there is a global system configuration file, suck it in.
33*81ea85a8SBrad Davis#
34*81ea85a8SBrad Davisif [ -r /etc/defaults/periodic.conf ]
35*81ea85a8SBrad Davisthen
36*81ea85a8SBrad Davis    . /etc/defaults/periodic.conf
37*81ea85a8SBrad Davis    source_periodic_confs
38*81ea85a8SBrad Davisfi
39*81ea85a8SBrad Davis
40*81ea85a8SBrad Davis. /etc/periodic/security/security.functions
41*81ea85a8SBrad Davis
42*81ea85a8SBrad Davisignore="${security_status_chkmounts_ignore}"
43*81ea85a8SBrad Davisrc=0
44*81ea85a8SBrad Davis
45*81ea85a8SBrad Davisif check_yesno_period security_status_chkmounts_enable
46*81ea85a8SBrad Davisthen
47*81ea85a8SBrad Davis	case "$security_status_noamd" in
48*81ea85a8SBrad Davis	    [Yy][Ee][Ss])
49*81ea85a8SBrad Davis		ignore="${ignore}|^amd:"
50*81ea85a8SBrad Davis	esac
51*81ea85a8SBrad Davis	[ -n "$ignore" ] && cmd="egrep -v ${ignore#|}" || cmd=cat
52*81ea85a8SBrad Davis	if ! [ -f /etc/fstab ]; then
53*81ea85a8SBrad Davis		export PATH_FSTAB=/dev/null
54*81ea85a8SBrad Davis	fi
55*81ea85a8SBrad Davis	mount -p | sort | ${cmd} |
56*81ea85a8SBrad Davis	  check_diff mount - "${host} changes in mounted filesystems:"
57*81ea85a8SBrad Davis	rc=$?
58*81ea85a8SBrad Davisfi
59*81ea85a8SBrad Davis
60*81ea85a8SBrad Davisexit "$rc"
61