|
version 1.1, 2005/07/09 10:40:58
|
version 1.5, 2005/07/09 11:21:11
|
|
|
|
| |
#!/bin/sh |
| |
|
| |
#Audit Script - grabs useful info and packs it away |
| |
#(c) Rizwan Kassim 2005 |
| |
|
| |
mkdir /tmp/audit_ait |
| |
cd /tmp/audit_ait |
| |
touch $HOSTNAME.overall.log |
| |
echo "########## HOSTNAME, uname, w, whoami, id" >> $HOSTNAME.overall.log |
| |
echo $HOSTNAME >> $HOSTNAME.overall.log |
| |
uname -a >> $HOSTNAME.overall.log |
| |
w >> $HOSTNAME.overall.log |
| |
id >> $HOSTNAME.overall.log |
| |
echo "######### df mounts" |
| |
df >> $HOSTNAME.overall.log |
| |
touch $HOSTNAME.network.log |
| |
echo "######### Network settings - netstat,services,chkconfig,ifconfig" >> $HOSTNAME.network.log |
| |
netstat -an >> $HOSTNAME.network.log |
| |
services --status-all >> $HOSTNAME.network.log |
| |
chkconfig --list >> $HOSTNAME.network.log |
| |
ps -aux >> $HOSTNAME.tasklist.log |
| |
ifconfig >> $HOSTNAME.network.log |
| |
echo "######## cronlist + cron jobs" >> $HOSTNAME.overall.log |
| |
crontab -l >> $HOSTNAME.overall.log |
| |
echo "## crontabs in var" >> $HOSTNAME.overall.log |
| |
cat /var/spool/cron/* >> $HOSTNAME.overall.log |
| |
ls /etc/cron* >> $HOSTNAME.overall.log |
| |
cp -r /etc/cron* . |
| |
du -b --max-depth=5 / > $HOSTNAME.dudir.log |
| |
/etc/cron.daily/rpm |
| |
cp /var/logs/rpm* . |
| |
cp /etc/grou* . |
| |
cp /etc/gsh* . |
| |
tar -cvf $HOSTNAME |
| |
|