version 1.1.1.1, 2005/07/09 10:40:58
|
version 1.5, 2005/07/09 11:21:11
|
|
|
|
#!/bin/sh |
|
|
|
#Audit Script - grabs useful info and packs it away |
|
#(c) Rizwan Kassim 2005 |
|
|
|
mkdir /tmp/audit_ait |
|
cd /tmp/audit_ait |
|
touch $HOSTNAME.overall.log |
|
echo "########## HOSTNAME, uname, w, whoami, id" >> $HOSTNAME.overall.log |
|
echo $HOSTNAME >> $HOSTNAME.overall.log |
|
uname -a >> $HOSTNAME.overall.log |
|
w >> $HOSTNAME.overall.log |
|
id >> $HOSTNAME.overall.log |
|
echo "######### df mounts" |
|
df >> $HOSTNAME.overall.log |
|
touch $HOSTNAME.network.log |
|
echo "######### Network settings - netstat,services,chkconfig,ifconfig" >> $HOSTNAME.network.log |
|
netstat -an >> $HOSTNAME.network.log |
|
services --status-all >> $HOSTNAME.network.log |
|
chkconfig --list >> $HOSTNAME.network.log |
|
ps -aux >> $HOSTNAME.tasklist.log |
|
ifconfig >> $HOSTNAME.network.log |
|
echo "######## cronlist + cron jobs" >> $HOSTNAME.overall.log |
|
crontab -l >> $HOSTNAME.overall.log |
|
echo "## crontabs in var" >> $HOSTNAME.overall.log |
|
cat /var/spool/cron/* >> $HOSTNAME.overall.log |
|
ls /etc/cron* >> $HOSTNAME.overall.log |
|
cp -r /etc/cron* . |
|
du -b --max-depth=5 / > $HOSTNAME.dudir.log |
|
/etc/cron.daily/rpm |
|
cp /var/logs/rpm* . |
|
cp /etc/grou* . |
|
cp /etc/gsh* . |
|
tar -cvf $HOSTNAME |
|
|