aula_code_listings/0040775000076500007650000000000007735111472013417 5ustar kirkkirkaula_code_listings/chapter02/0040775000076500007650000000000007733416461015213 5ustar kirkkirkaula_code_listings/chapter02/accounts.pl0100664000076500007650000000670507733415701017370 0ustar kirkkirk#!/usr/bin/perl -w use strict; # Set the location of the configuration file here my $config = "/usr/local/etc/ssh/accounts"; # Where the key fingerprints will be stored # (for purposes of log analysis) my $prints = "/usr/local/etc/ssh/prints"; # Set the path to a user's public key relative to # their home directory my $public_key = ".ssh/id_rsa.pub"; # This function takes one scalar parameter (hence the $ # within the parenthesis). The parameter is stored in # the local variable $username. The home directory # is returned, or undef is returned if the user does # not exist. sub GetHomeDir ($) { my ($username) = @_; my $homedir = (getpwnam($username))[7]; unless ($homedir) { print STDERR "Account $username doesn't exist!\n"; } return $homedir; } # This function takes in an account and the home directory and logs # the key fingerprint (by running ssh-keygen -l), which has output: # 2048 85:2c:6e:cb:f6:e1:39:66:99:15:b1:20:9e:4a:00:bc ... sub StorePrint ($$) { my ($account, $homedir) = @_; my $print = `ssh-keygen -l -f $homedir/$public_key`; # Remove the carriage return chomp($print); # Keep the fingerprint only $print =~ s/^\d+ ([0-9a-f:]+) .*$/$1/; print PRINTS "$account $print\n"; } # This function takes one line from the config file and # sets up that specific account. sub ProcessLine ($) { my ($line) = @_; # A colon separates the account name and the users with access my ($account, $users) = split (/:/, $line); my $homedir = GetHomeDir($account); return unless ($homedir); print "Account $account: "; # First, make sure the directory exists, is owned # by root, and is only accessible by root my $group = 0; if (-d "$homedir/.ssh") { $group = (stat("$homedir/.ssh"))[5]; system("chown root:root $homedir/.ssh"); system("chmod 0700 $homedir/.ssh"); } else { mkdir("$homedir/.ssh", 0700); } # Remove the existing file unlink ("$homedir/.ssh/authorized_keys"); # Create the new file by appending other users' public keys my ($user, $homedir2); foreach $user (split /,/, $users) { # Get this other user's home directory too $homedir2 = GetHomeDir($user); next unless ($homedir2); if ((not -f "$homedir2/$public_key") or ( -l "$homedir2/$public_key") ) { print "\nUser $user public key not found or not a file!\n"; next; } print "$user "; my $outfile = "$homedir/.ssh/authorized_keys"; system("cat $homedir2/$public_key >> $outfile"); StorePrint($user, $homedir2); } print "\n"; # Now, fix the permissions to their proper values system("chmod 0600 $homedir/.ssh/authorized_keys"); system("chown $account $homedir/.ssh/authorized_keys"); system("chown $account $homedir/.ssh"); if ($group) { # We saved its previous group ownership... restore it. system("chgrp $group $homedir/.ssh"); } } # Open the fingerprint file open (PRINTS, ">$prints") or die "Can't create $prints: $!\n"; # Open the config file and process each non-empty line open (CONF, "$config") or die "Can't open $config: $!\n"; my $line; # The angle operators (<>) read one line at a time while ($line = ) { chomp($line); # Remove any comments $line =~ s/\#.*$//; # Remove leading and trailing whitespace $line =~ s/^\s+//; $line =~ s/\s+$//; # Process the line (if anything is left) $line and ProcessLine($line); } close (CONF); close (PRINTS); exit 0; aula_code_listings/chapter02/sshreport.pl0100664000076500007650000000233007733415701017570 0ustar kirkkirk#!/usr/bin/perl -w use strict; # The logfile to analyze my $log = "/var/log/secure"; # Where the key fingerprints are stored my $prints = "/usr/local/etc/ssh/prints"; # First, read and store the fingerprints in a hash table # Duplicate lines will not hurt anything open (PRINTS, "$prints") or die "Can't open $prints: $!\n"; my (%Prints, $line); while ($line = ) { chomp($line); my ($account, $print) = split / /, $line; $Prints{$print} = $account; } close (PRINTS); # Open the logfile and process each line # Store results in a two-tier hash table open (LOG, "$log") or die "Can't open $log: $!\n"; my (%Results, $user); while ($line = ) { chomp ($line); if ($line =~ /Found matching \S+ key: ([0-9a-f:]+)/) { # Determine user from print-lookup hash (if possible) if ($Prints{$1}) { $user = $Prints{$1}; } else { $user = 'Unknown'; } } elsif ($line =~ /Accepted publickey for (\S+)/) { $Results{$1}{$user}++; } } close (LOG); # Display the results my $account; foreach $account (keys %Results) { print "$account:\n"; foreach $user (keys %{$Results{$account}}) { print " $user: $Results{$account}{$user} connection(s)\n"; } } exit 0; aula_code_listings/readme.txt0100664000076500007650000004103007735111423015404 0ustar kirkkirkThank you for your interest in Automating UNIX and Linux Administration. This book was published in September 2003 by Apress and written by Kirk Bauer. You can submit corrections on the Apress website (www.apress.com) as well as ask questions in the forums also found there. You can also contact the author directly at: kirk@kaybee.org. Don't forget: all of the example scripts assume the following binaries are located in the following locations. You will need to change the first line of each applicable script if the locations in your environment differ: /usr/bin/perl /bin/bash All files are in the UNIX file format. If you are viewing these in Windows, you must either convert them or use a real editor like Vim (www.vim.org) or Emacs. Here is a summary of the program listings provided in this archive. The easiest way to find the code that you are looking for is to scan backwards from the code listing in the book until you find a section heading. Then, search for the section number or title in this file. Note that program listings consisting of 10 lines or less are generally not included. But, in several chapters, there are a bunch of small code listings that make up a single script. These are included as one big script in this archive. Chapter 2: Using SSH to Securely Automate System Administration 2.12 Using SSH for Common Accounts (should be 2.6) 2.12.1 Preparing for Common Accounts Perl Script: chapter02/accounts.pl 2.12.2 Monitoring the Common Accounts Perl Script: chapter02/sshreport.pl Chapter 3: Creatin Login and Shell Scripts 3.1 Tailoring the Command Prompt 3.1.2 Using Colored Prompts Bash Script: chapter03/example_bashrc1 Bash Script: chapter03/example_bashrc2 3.2 Using Tab Completion 3.2.3 Using Custom Completion Functions Bash Script: chapter03/umount_function.sh 3.4 Creating Commands That Affect Multiple Systems 3.4.1 Simple Multi-SSH Bash Script: chapter03/mssh.sh 3.4.2 Group-Based Multi-SSH 3.4.2.2 Executing Commands Bash Script: chapter03/gssh.sh 3.4.2.3 Copying Files Bash Script: chapter03/gscp.sh 3.5 Distributing Your Login Scripts 3.5.2 Distributing Login Scripts 3.5.2.2 Creating the Distribution Script Bash Script: chapter03/distrib.sh Chapter 4: Pre-Installation: Network Preparation and Management 4.3 Using Locking to Prevent Conflicts Bash Script: chapter04/locking.example 4.4 Base Pre-Installation Script Bash Script: chapter04/prepare.sh 4.5 The Pre-Installation Component Scripts 4.5.1 Requesting the MAC Address Bash Script: chapter04/components/00getmac.sh 4.5.2 Allocating an IP Bash Script: chapter04/components/05allocate_ip.sh 4.5.3 Classifying the System Bash Script: chapter04/components/10classify.sh 4.5.4 Gathering Contact Information Bash Script: chapter04/components/15getcontact.sh 4.5.5 Adding to the /etc/hosts File Bash Script: chapter04/components/20hosts_file.sh 4.5.6 Configuring a DHCP Server Perl Script: chapter04/components/30dhcp_config.pl 4.5.7 Updating your DNS Configuration Bash Script: chapter04/components/40dns_config.sh 4.7 Removing Machines Bash Script: chapter04/remove.sh 4.7.1 Removing MAC Addresses Bash Script: chapter04/rm_comps/00rmmac.sh 4.7.2 Reclaiming IP Bash Script: chapter04/rm_comps/05take_ip.sh 4.7.3 Declassifying a System Bash Script: chapter04/rm_comps/10declassify.sh 4.7.4 Removing Contact Entry Bash Script: chapter04/rm_comps/15rmcontact.sh 4.7.5 Modifying Hosts File Bash Script: chapter04/rm_comps/20hosts_file.sh 4.7.6 Configuring DHCP Perl Script: chapter04/rm_comps/30dhcp_config.pl 4.7.7 Updating your DNS Configuration Bash Script: chapter04/rm_comps/40dns_config.sh Chapter 5: Automating and Customizing Installation 5.3 Preparing for Automated Administration 5.3.1 Remotely Configuring a New System 5.3.1.2 Transferring Data Bash Script: prepare_system.sh 5.3.1.3 Configuring the System Bash Script: initial_setup.sh 5.3.2 New Systems That Configure Themselves 5.3.2.2 Creating the Automatic Preparation Script Bash Script: postinst.sh Chapter 6: System Configuration 6.3 Custom Configuration Approach 6.3.3 Presenting the Configuration Script 6.3.3.1 The config_all_systems Script Bash Script: chapter06/config_all_systems.sh 6.3.3.2 The configure_system Functions Bash Script: chapter06/functions.sh 6.3.3.3 The configure_system Script Bash Script: chapter06/configure_system.sh 6.4 Configuring Systems with GNU cfengine 6.4.2 Basic Setup 6.4.2.3 Creating Configuration Files 6.4.2.3.2 Basic update.conf Cfengine Config File: chapter06/update.conf 6.4.2.3.3 Framework for cfagent.conf Cfengine Config File: chapter06/cfagent.conf Chapter 7: Sharing Data Between Systems 7.7 Sharing Data with cfengine 7.7.1 Distributing Files Cfengine Config File: chapter07/cfagent-distrib.conf 7.7.2 Managing NFS Mounts Cfengine Config File: chapter07/cfagent-nfs.conf 7.8 Synchronizing Data with rsync 7.8.4 Example rsync Usage 7.8.4.2 Pulling /usr/local Bash Script: chapter07/pull_usr_local.sh 7.10 HTTP/FTP 7.10.2 Simple Example: Transferring System Configuration Bash Script: chapter07/lftpget.sh 7.10.3 Advanced Example: Transferring System Configuration 7.10.3.1 Setting up the Server Perl Script: chapter07/package_files.pl 7.10.3.2 The Client Retrieval Script Perl Script: chapter07/http_update.pl 7.10.3.3 Being Aware of Security Concerns 7.10.3.3.1 Adding Access Control Apache Configuration Directive: chapter07/httpd.conf Chapter 8: Packages and Patches 8.4 Updating Systems with Patches 8.4.1 Understanding and Applying Solaris Patches 8.4.1.4 The Automatic Patching Script Perl Script: chapter08/sunpatch.pl 8.4.2 Custom Patches 8.4.2.2 Example patch Bash Script: chapter08/check Bash Script: chapter08/apply Bash Script: chapter08/remove Bash Script: chapter08/verify 8.4.2.4 The mypatch Script Bash Script: chapter08/mypatch 8.5 Understanding and Installing Packages 8.5.1 Red Hat Package Manager (RPM) 8.5.1.3 Simple Automation 8.5.1.3.1 Package Bundles 8.5.1.3.1.1 Creating Bundles Bash Script: chapter08/findrequires.sh 8.5.1.3.1.2 Installing Bundles Bash Script: chapter08/install_bundles.sh Bash Script: chapter08/install_bundles2.sh 8.5.2 Debian Packages 8.5.2.3 Advanced Packaging Tool Bash Script: chapter08/apt_install.sh 8.6 Automatic Package Installations with AutoRPM 8.6.4 Example Configuration Files 8.6.4.1 Simple System Upgrades AutoRPM Configuration: chapter08/autorpm/autorpm.conf-simple 8.6.4.2 Caching Updates Locally AutoRPM Configuration: chapter08/autorpm/autorpm.conf-caching 8.6.4.3 Updating Systems from Previously-Downloaded Package Cache AutoRPM Configuration: chapter08/autorpm/autorpm.conf-apply_cached 8.6.4.4 Precise Package Installation AutoRPM Configuration: chapter08/autorpm/autorpm.conf-exact 8.6.4.5 Advanced Uses 8.6.4.5.1 Install Only Needed RPMs Perl Script: chapter08/autorpm/determine_needed_rpms.pl Chapter 9: System Maintenance and Changes 9.2 Managing Accounts 9.2.2 Laying Out the Account Management Configuration File Example Configuration File: chapter09/usertool.conf 9.2.3 Account Management Helper Functions 9.2.4 Account Management Main Script Bash Script: chapter09/usertool.sh 9.2.5 Account Management Data Components 9.2.5.1 Allocating UID/GID Perl Script: chapter09/data/getuid.pl 9.2.5.2 Requesting a Full Username Bash Script: chapter09/data/fullname.sh 9.2.5.3 Selecting a Shell Bash Script: chapter09/data/shell.sh 9.2.5.4 Allocating Extra Groups Bash Script: chapter09/data/extragroups.sh 9.2.5.5 Determining the Home Directory Bash Script: chapter09/data/homedir.sh 9.2.5.6 Choosing Mail Aliases Bash Script: chapter09/data/aliases.sh 9.2.6 The Modification Components 9.2.6.1 Basic Account Setup Script Bash Script: chapter09/mod/basic.sh 9.2.6.2 The Extra Groups Script Bash Script: chapter09/mod/extragroups.sh 9.2.6.3 Adding and Removing from Automount Files Bash Script: chapter09/mod/automount.sh 9.2.6.4 The NIS Update Script Bash Script: chapter09/mod/zupdate.sh 9.2.6.5 The Home Directory Creation Script Bash Script: chapter09/mod/homedir.sh 9.2.6.6 The Mail Aliases Script Bash Script: chapter09/mod/aliases.sh 9.2.6.7 Setting the Passwords Bash Script: chapter09/mod/zzpasswords.sh 9.2.7 Deleted User Cleanup Bash Script: chapter09/full-user-delete.sh 9.4 Removing Files 9.4.1 Custom Drive Cleaning 9.4.1.2 Cleaning Home Directories Bash Script: chapter09/filecheck.sh Chapter 10: System Monitoring 10.1 General System Monitoring 10.1.1 Creating a General Reporting Facility Perl Script: chapter10/report.pl 10.1.3 Watching Available Disk Space Bash Script: chapter10/check_drives.sh 10.1.4 Monitoring System Services Example Configuration File: chapter10/services/services.conf Bash Script: chapter10/services/services.sh Bash Script: chapter10/services/web.sh 10.1.5 Watching for Package Changes Bash Script: chapter10/check_packages.sh Bash Script: chapter10/check_packages_multi.sh 10.1.6 Drive Failures Bash Script: chapter10/check_for_failures.sh 10.2 Monitoring System Logs 10.2.1 Log Monitoring with Logwatch 10.2.1.4 Running Logwatch on a Log Host Bash Script: chapter10/logwatch_all.sh 10.2.1.5 Writing Your Own Filter 10.2.1.5.2 Creating a New Service Bash Script: logwatch_example.sh 10.2.1.5.3 Simple Example Service Filter Perl Script: logwatch_startups.pl 10.3 Monitoring Network Services 10.3.1 Custom Monitoring and Automatic Repairs 10.3.1.1 Checking for a Process Bash Script: chapter10/check_process.sh 10.3.1.2 Checking a Port Bash Script: chapter10/check_port.sh 10.3.1.3 Checking a Web Server Bash Script: chapter10/check_apache.sh 10.3.2 NetSaint (a.k.a. Nagios) 10.3.2.2 NetSaint Configuration 10.3.2.2.2 Command Declarations 10.3.2.2.2.6 Service Event Handler Bash Script: chapter10/restart-httpd.sh 10.3.2.3 Writing Your Own Plugins Bash Script: chapter10/netsaint_plugin.sh 10.3.3 Mon 10.3.3.4 Real-world Example Example Configuration File: chapter10/mon.conf 10.3.3.5 Custom Monitoring Script Bash Script: chapter10/mon-custom.sh Chapter 11: Improving System Security 10.2 Configuring System-Level Firewalls 10.2.2 Firewall Configuration Script Bash Script: chapter11/firewall-setup 11.2.3 Groups of Systems Bash Script (optional add-on for firewall-setup): chapter11/groups Chapter 12: Backing Up and Restoring Data 12.3 Using rsync to Back Up Data 10.3.2 Incremental Backups Bash Script: chapter12/incremental.sh 12.4 Backup Up Data with rdiff-backup 10.4.2 Removing Old Backup Data Bash Script: chapter12/rdiff-remove.sh 12.5 Tape Backups With tar 12.5.2 Incremental Backups Bash Script: chapter12/tar_incremental.sh Chapter 13: User Interfaces 13.2 Creating the Underlying Scripts Working Scripts Bash Script: chapter13/add_new_user.sh 13.3 Executing Commands as root 13.3.1 Executing Commands with setuid Wrapper C Program: chapter13/wrapper.c 13.4 Designing and Using Common Data Files 13.4.1 Common File Format for Storing Settings 13.4.1.3 Reading in Perl Perl Program: chapter13/read_name_value.pl 13.4.2 Designing Interface Specifications 13.4.2.2 Reading in Perl Perl Program: chapter13/read_int_spec.pl 13.5 Text-based Interface 13.5.1 Menu Interface Shell Script: chapter13/menu.sh 13.5.2 Configuring Your Text-Based Interface 13.5.2.2 The Configuration Script Shell Script: chapter13/config.sh 13.5.2.4 Extended Data Checking Shell Script: chapter13/extended_check_value.sh 13.6 Creating a Web-Based Interface 13.6.2 Introduction to Mason 13.6.2.3 Expanded Examples Mason HTML File: chapter13/mason/getinfo.mhtml Mason HTML File: chapter13/mason/showinfo.mhtml Mason Component File: chapter13/mason/shoreinfo.comp 13.6.3 Security with HTTP Authentication 13.6.3.2 Restricting Access Apache Configuration Directives: chapter13/mason/httpd.conf 13.6.4 Logging Web Activity Mason Component File: chapter13/mason/log.comp 13.6.5 Creating and Using a Custom Perl Library Perl Library: chapter13/MyLib.pm 13.6.6 Web-Based Overall Status and System Listing Example Configuration File: chapter13/status/status.conf Mason HTML File: chapter13/status/status.mhtml Mason Component File: chapter13/status/pinghost.comp Mason Component File: chapter13/status/checkport.comp 13.6.7 Web Interface for System Configuration Example Configuration File: chapter13/config/config.conf Mason HTML File: chapter13/config/config.mhtml Mason HTML File: chapter13/config/submit.mhtml 13.6.8 Executing Shell Commands on the Web 13.6.8.1 Executing Local Commands Example Configuration File: chapter13/run/run.conf Mason HTML File: chapter13/run/run.mhtml Mason HTML File: chapter13/run/docmd.mhtml 13.6.8.2 Executing Remote Commands 13.6.8.2.1 Building a Remote Execution Daemon Example Configuration File: chapter13/remoted/remoted.conf Perl Script: chapter13/remoted/remoted.pl 13.6.8.2.2 Building a Remote Execution Client Example Configuration File: chapter13/rrun/run.conf Mason HTML File: chapter13/rrun/run.mhtml Mason HTML File: chapter13/rrun/docmd.mhtml Mason Component File: chapter13/rrun/remote.comp Appendix A: Introduction to Basic Tools A.1 The bash Shell A.1.2 Creating Simple bash Shell Scripts Bash Script: appendix_a/bash_example.sh A.2 Perl A.2.1 Basic Usage Perl Script: appendix_a/perl_example.pl Appendix B: Customizing and Automating Red Hat Linux Installation A.1 Customizing Red Hat Linux (should have been B.1) B.1.2 Understanding the Red Hat Installation Data Files B.1.2.1 The comps File Example 'comps' File: appendix_b/example_comps A.2 Automating Red Hat Linux Installation with Kickstart (should have been B.2) B.2.1 Creating a Kickstart File B.2.1.1 Generalizing a Kickstart File Example kickstart File: appendix_b/example.ks Appendix C: Building RPMs C.3 Using an RPM Build Root Partial RPM SPEC File: appendix_c/build_root.spec Partial RPM SPEC File: appendix_c/build_root_GNU.spec C.6 More Advanced RPM Concepts C.6.4 Taking Action with RPM Triggers Partial RPM SPEC File: appendix_c/triggers RPM SPEC File (for test package): appendix_c/trigger_test.spec C.6.6 Relocatable RPM Packages Partial RPM SPEC File: appendix_c/relocation.spec C.6.7 RPM Subpackages Example RPM SPEC File: appendix_c/sub_packages.spec C.7 Automating Package Builds Example RPM SPEC File: appendix_c/auto_build.spec Bash Script: appendix_c/build.sh aula_code_listings/chapter05/0040775000076500007650000000000007733421075015213 5ustar kirkkirkaula_code_listings/chapter05/postinst.sh0100664000076500007650000000151607733421040017422 0ustar kirkkirk#!/bin/sh # Mount Linux data and binaries via NFS mount nfsserver:/linux/usr/local /usr/local # Configure SSH access mkdir -p ~/.ssh ~/setup cp /usr/local/etc/global_auth_keys ~/.ssh/authorized_keys chmod og-rwx ~ ~/.ssh ~/.ssh/* # Install any RPMs that need to be added rpm -i /usr/local/src/RPMS/to_install/*.rpm # Now, run 'autorpm' to install system updates /usr/local/sbin/autorpm auto # Generate cfengine key for this client (and copy to server) mkdir -p /var/cfengine/ppkeys /usr/local/sbin/cfkey MY_IP=`ifconfig eth0 | sed -n 's/.*inet addr:\([^ ]*\).*/\1/p'` cp /var/cfengine/ppkeys/localhost.pub \ /usr/local/var/cfengine/ppkeys/root-$MY_IP.pub # Finally, run cfengine to perform all other configuration tasks /usr/local/sbin/cfagent # All done (prevent this script from running again) rm -f /etc/rc.d/rc3.d/S99prepare_system aula_code_listings/chapter05/prepare_system.sh0100664000076500007650000000327507733421040020605 0ustar kirkkirk#!/bin/bash # Local directory containing files to be transferred file_dir='/usr/local/lib/sys_prep_files' # Assumes .shosts is configured on new system alias rsh="/usr/bin/ssh -1 -o 'UsePrivilegedPort yes'" alias rcp="/usr/bin/scp -1 -o 'UsePrivilegedPort yes'" die() { echo >&2 for i in "$@" ; do echo "$i" >&2 done echo >&2 exit 99 } echo ' ** New System Preparation ** ' echo echo -n "Enter new system's hostname: " read -e HOST echo "Checking hostname: $HOST" RESULT=`ping -w2 $HOST 2>&1` if [ $? -ne 0 ] ; then if echo $RESULT | grep -q 'unknown host' ; then die 'Host does not exist (no DNS entry)' fi IPADDR=`host "$HOST" | sed 's/^.* \([0-9.]*\)$/\1/'` die 'Host not responding... is the correct IP configured?' \ "The registered IP address for $HOST is $IPADDR" fi # Create new directories (if necessary) rsh -l root $HOST 'mkdir -p ~/.ssh ~/setup' || \ die 'Could not create ~/.ssh and ~/setup dirs' # Copy files cd $file_dir 2>/dev/null || die "Directory $file_dir not found!" rcp ssh_public_key root@$HOST:~/.ssh/authorized_keys || \ die 'Could not create authorized keys file' rcp *.rpm sysadmin_crontab initial_setup.sh \ root@$HOST:~/setup || die 'Could not transfer files' # Make sure permissions on .ssh and contents are correct rsh -l root $HOST 'chmod og-rwx ~ ~/.ssh ~/.ssh/*' || \ die 'Could not set permissions on .ssh directory' # Install any RPMs that were copied over rsh -l root $HOST 'rpm -Uvh ~/setup/*.rpm' || \ die 'Failed to install RPMs' # Now, run initial setup script rsh -l root $HOST 'bash ~/setup/initial_setup.sh' || die 'Execution of initial_setup script failed!' echo "Host $HOST Configuration Complete" exit 0 aula_code_listings/chapter05/initial_setup.sh0100664000076500007650000000122207733421040020402 0ustar kirkkirk#!/bin/bash # First, run 'autorpm' to install additional new software autorpm auto # Add 'sysadmin' account if it doesn't exist grep -q '^sysadmin:' /etc/passwd || { useradd sysadmin } # Update the sysadmin user's crontab crontab -u sysadmin ~/setup/sysadmin_crontab # Disable .rhosts/.shosts authentication on this host rm -f ~/.rhosts rm -f ~/.shosts cp -p /etc/ssh/sshd_config /etc/ssh/sshd_config.new sed -e 's/RhostsAuthentication.*/RhostsAuthentication no/' \ -e 's/IgnoreRhosts.*/IgnoreRhosts yes/' \ /etc/ssh/sshd_config > /etc/ssh/sshd_config.new && \ mv /etc/ssh/sshd_config.new /etc/ssh/sshd_config /etc/init.d/sshd restart aula_code_listings/chapter07/0040775000076500007650000000000007734702226015216 5ustar kirkkirkaula_code_listings/chapter07/cfagent-distrib.conf0100664000076500007650000000100607733423140021116 0ustar kirkkirkcontrol: domain = ( mydomain.com ) cfserver = ( cfserver.mydomain.com ) copy: !cfserver_mydomain_com:: /etc/shadow dest=/etc/shadow mode=600 server=${cfserver} encrypt=true verify=true /etc dest=/etc mode=644 recurse=1 server=${cfserver} verify=true include=passwd include=group aula_code_listings/chapter07/http_update.pl0100644000076500007650000000606407733424227020076 0ustar kirkkirk#!/usr/bin/perl -w use strict; use File::Copy; my $URL = "http://configserver.mydomain.com/sysconfig/manifest.html"; my $TempDir = "/usr/local/var/http_update"; my $wget = 'wget -q --recursive --no-host-directories'; unless (-d $TempDir) { mkdir $TempDir, 0700 or die "Could not create temporary directory $TempDir: $!\n"; } # Go into our temporary directory chdir $TempDir or die "Could not enter temporary directory $TempDir: $!\n"; # Retrieve the manifest (and other files) unless (system ("$wget '$URL'") == 0) { die "wget could not retrieve $URL\n"; } chdir "sysconfig" or die "Could not enter sysconfig directory: $!\n"; # Load data from manifest file my ($line, $entryhash, @Entries, $name, $value); open (MANIFEST, 'manifest.html'); while ($line = ) { chomp($line); # First, look for name/value pairs on this line while ($line =~ s/^.*?([^\s=]+)="([^"]+)"//) { # Found a name/value pair $name = $1; $value = $2; # Add to hash table $entryhash->{$name} = $value; } if ($line =~ /<\/A>/) { # Ending an entry, add what we have to the list push @Entries, $entryhash; $entryhash = undef; } } close (MANIFEST); # Delete manifest file unlink 'manifest.html'; # Okay, now we have all the information we need in @Entries # We have one entry per file, and each entry is a hash reference my $ret = 0; foreach my $entry (@Entries) { my ($uid, $gid, $perms, $checksum); my $file = $entry->{'href'}; print "$file: "; # First, make sure the file we received is valid unless ((-s $file) == $entry->{'size'}) { print "FAILED!\n"; print STDERR "Size of $file not correct... Skipping.\n"; $ret++; next; } print "[Size OK] "; # Check the md5sum $checksum = `md5sum "$file"`; chomp($checksum); # Strip off everything after the first whitespace $checksum =~ s/\s+.*$//; unless ($checksum eq $entry->{'md5sum'}) { print "FAILED!\n"; print STDERR "MD5 checksum of $file failed... Skipping.\n"; $ret++; next; } print "[MD5 OK] "; # Next, set the permissions/ownership on the new file unless (defined($uid = getpwnam $entry->{'user'})) { print "FAILED!\n"; print STDERR "Could not lookup user $entry->{'user'}\n"; $ret++; next; } unless (defined($gid = getgrnam $entry->{'group'})) { print "FAILED!\n"; print STDERR "Could not lookup group $entry->{'group'}\n"; $ret++; next; } unless (chown $uid, $gid, $file) { print "FAILED!\n"; print STDERR "Could not set user/group to $uid:$gid: $!\n"; $ret++; next; } $perms = $entry->{'perms'}; unless (chmod oct($perms), $file) { print "FAILED!\n"; print STDERR "Could not set permissions to $perms: $!\n"; $ret++; next; } # Now, move the file to its new destination unless (move $file, $entry->{'dest'}) { print "FAILED!\n"; print STDERR "Could not move $file to $entry->{'dest'}: $!\n"; $ret++; next; } print "Done!\n"; } exit $ret; aula_code_listings/chapter07/cfagent-nfs.conf0100664000076500007650000000215407733423602020254 0ustar kirkkirkcontrol: domain = ( mysite.com ) sysadm = ( kirk ) netmask = ( 255.255.255.0 ) actionsequence = ( mountall mountinfo addmounts mountall links ) mountpattern = ( /mysite/$(host) ) homepattern = ( u? ) homeservers: fileserver1 fileserver2 binservers: linux:: linux1 solaris:: solaris1 all:: fileserver1 mailserver: mail:/var/spool/mail mountables: fileserver1:/mysite/fileserver1/u1 fileserver1:/mysite/fileserver1/scripts fileserver2:/mysite/fileserver2/u2 fileserver2:/mysite/fileserver2/u3 linux1:/mysite/linux1/local solaris1:/mysite/solaris1/local links: /usr/local -> /mysite/${binserver}/local tidy: home pattern=core recurse=inf age=0 home pattern=*~ recurse=inf age=7 home/.netscape/cache pattern=* recurse=inf age=3 type=atime files: home mode=751 action=fixall home mode=o-w recurse=inf action=fixall home/.ssh mode=600 recurse=inf action=fixall home/public_html mode=644 recurse=inf action=fixall aula_code_listings/chapter07/pull_usr_local.sh0100664000076500007650000000060707733424052020566 0ustar kirkkirk#!/bin/bash # First, determine our system type host_type=`uname` # Now, isolate our fileserver with sed and remove the beginning of the line source=`sed -n "s/^$host_type //p" /usr/local/etc/fileservers` # Make sure a valid remote filesystem was found (would contain a colon) echo "$source" | grep -q ':' && { # Finally, transfer the files rsync -a --delete $source/ /usr/local/ } aula_code_listings/chapter07/lftpget.sh0100664000076500007650000000042007733424145017210 0ustar kirkkirk#!/bin/bash mkdir -p /etc/new_files cd /etc/new_files for file in hosts resolv.conf nsswitch.conf ; do if lftpget "http://server.mydomain.com/$file" ; then if [ -s "$file" ] ; then cat "$file" > "/etc/$file" fi fi done rm -rf /etc/new_files aula_code_listings/chapter07/package_files.pl0100664000076500007650000000401007733424227020321 0ustar kirkkirk#!/usr/bin/perl -w use strict; use File::Copy; my $WebRoot = "/var/www/html/sysconfig"; my @Files = ( "/etc/hosts", "/etc/ssh/sshd_config", "/etc/resolv.conf" ); # First, erase the manifest file # (so clients cannot update during this build process) unlink "$WebRoot/manifest.html"; # Create new manifest file (with temporary name) open (MANIFEST, ">$WebRoot/manifest.new.html") or die "Could not create $WebRoot/manifest.new.html: $!\n"; my $ret = 0; foreach my $file (@Files) { # Get information on the file my ($mode, $uid, $gid, $size, $checksum); unless ( (undef, undef, $mode, undef, $uid, $gid, undef, $size) = stat $file) { # There was an error, skip this file print STDERR "WARNING: Could not stat $file: $!\n"; $ret++; next; } # Isolate permissions from mode and convert to octal string $mode = sprintf "%04o", $mode & 07777; # Turn UID and GID into user/group names $uid = getpwuid($uid); $gid = getgrgid($gid); # Get a checksum for the file $checksum = `md5sum "$file"`; chomp($checksum); # Strip off everything after the first whitespace $checksum =~ s/\s+.*$//; # Now, copy the file unless (copy "$file", "$WebRoot") { print STDERR "Could not copy $file to $WebRoot: $!\n"; $ret++; next; } # Remove the path from the file my $basename = $file; $basename =~ s/^.*\///; # Make sure it is publicly readable chmod 0644, "$WebRoot/$basename"; # Okay, create the manifest entry print MANIFEST "\n\n"; print "Packaged $file\n"; } close (MANIFEST); # Now rename the file so clients can update themselves again move "$WebRoot/manifest.new.html", "$WebRoot/manifest.html" or die "Could not create $WebRoot/manifest.html: $!\n"; # Make sure it is publicly readable chmod 0644, "$WebRoot/manifest.html"; print "Packaging Complete!\n"; exit $ret; aula_code_listings/chapter07/httpd.conf0100664000076500007650000000045607733424526017215 0ustar kirkkirk AuthUserFile /etc/htpasswd AuthType Basic AuthName "Configuration Access" require valid-user order deny,allow allow from 192.168.0.0/255.255.0.0 allow from 127.0.0.1 deny from all # Must pass both password and source-host checks Satisfy all aula_code_listings/chapter08/0040775000076500007650000000000007733426047015222 5ustar kirkkirkaula_code_listings/chapter08/apply0100664000076500007650000000117507733424572016274 0ustar kirkkirk#!/bin/bash # Exit immediately on an error set -e # Install appropriate executable install_file bash2.`uname -s` /bin/bash2 0755 # Install the man page if [ -d "/usr/share/man" ] ; then install_file bash2.1.gz /usr/share/man/man1/bash2.1.gz 0644 else install_file bash2.1.gz /usr/man/man1/bash2.1.gz 0644 fi # Install the info page if [ -d "/usr/share/info" ] ; then install_file bash2.info.gz /usr/share/info/bash2.info.gz 0644 else install_file bash2.info.gz /usr/info/bash2.info.gz 0644 fi # Add an entry to /etc/shells... if ! grep -q '^/bin/bash2$' /etc/shells ; then echo "/bin/bash2" >> /etc/shells fi exit 0 aula_code_listings/chapter08/apt_install.sh0100664000076500007650000000065307733424572020072 0ustar kirkkirk#!/bin/bash LIST_DIR="/usr/local/etc/pkglists" list='' for resp in `cat /etc/responsibilities` ; do echo "Installing packages for responsibility $resp... " if [ -f "$LIST_DIR/$resp" ] ; then for pkg in `cat $LIST_DIR/$resp` ; do echo "Installing package $pkg... " apt-get --yes install $pkg echo "Done with package $pkg." done fi echo "Done with responsibility $resp." done aula_code_listings/chapter08/check0100664000076500007650000000056007733424572016221 0ustar kirkkirk#!/bin/bash case `uname -s` in Linux) case `uname -m` in i?86) exit 0 ;; *) exit 1 ;; esac ;; Solaris) case `uname -m` in sparc) exit 0 ;; *) exit 1 ;; esac ;; *) exit 1 ;; esac aula_code_listings/chapter08/findrequires.sh0100664000076500007650000000041007733424572020247 0ustar kirkkirk#!/bin/bash for installed in "$@" ; do for require in `rpm -q --requires "$installed"` ; do pkg=`rpm -q --whatprovides "$require" 2>/dev/null` if [[ $pkg != "no package provides "* ]] ; then echo "$pkg" fi done done | sort | uniq aula_code_listings/chapter08/install_bundles2.sh0100664000076500007650000000136607733424572021026 0ustar kirkkirk#!/bin/bash BUNDLE_DIR="/usr/local/packages/bundles" list='' for resp in `cat /etc/responsibilities` ; do if [ -d "$BUNDLE_DIR/$resp" ] ; then echo "Installing bundle $resp... " for pkg in "$BUNDLE_DIR/$resp/"* ; do name=`rpm -q --queryformat '%{name}' -p $pkg` installed=`rpm -q "$name" >/dev/null` if [ $? -eq 0 ] ; then # Is instaled, see if it is a different version if [ "$installed" != "$(rpm -q -p $pkg)" ] ; then # Different versions... assume an upgrade list="$list $pkg" fi else # Not installed list="$list $pkg" fi done [ -n "$list" ] && rpm -Uvh $list echo "Done." fi done aula_code_listings/chapter08/install_bundles.sh0100664000076500007650000000107207733424572020736 0ustar kirkkirk#!/bin/bash BUNDLE_DIR="/usr/local/packages/bundles" list='' for resp in `cat /etc/responsibilities` ; do if [ -d "$BUNDLE_DIR/$resp" ] ; then echo "Installing bundle $resp... " for pkg in "$BUNDLE_DIR/$resp/"*.rpm ; do name=`rpm -q --queryformat '%{name}' -p $pkg` if ! rpm -q "$name" >/dev/null ; then list="$list $pkg" fi done [ -n "$list" ] && rpm -ivh $list # Now, use the -F option to upgrade any packages as necessary rpm -Fvh "$BUNDLE_DIR/$resp/"*.rpm echo "Done." fi done aula_code_listings/chapter08/mypatch0100664000076500007650000001135307733425144016607 0ustar kirkkirk#!/bin/bash PATCH_DIR="/usr/local/patches" DATA_DIR="/var/lib/mypatch" usage() { echo "Usage: $0 [--recheck] --apply|--check [file|dir ...]" >&2 echo " --recheck: re-check every patch (rebuild cache)" >&2 echo " --apply: Apply any applicable patches" >&2 echo " --check: Check to see if a patch should be installed" >&2 echo "Query: [--fix] --list|--verify" >&2 echo " --fix: fix any verification problems by re-applying" >&2 echo " --list: list the currently installed patches" >&2 echo " --verify: verify that installed patches are okay" >&2 echo "Remove: --remove pkgname" >&2 exit 1 } [ "$1" = "--help" ] && usage mkdir -p "$DATA_DIR/tmp" recheck=''; check=''; apply=''; verify=''; list=''; fix=''; remove='' while [ -n "$1" ] ; do case $1 in --fix) fix=1 ;; --recheck) recheck=1 ;; --check) check=1 ;; --apply) apply=1 ;; --verify) verify=1 ;; --list) list=1 ;; --remove) remove=1 ;; --*) echo "Unknown option: $1" >&2 usage ;; *) break ;; esac shift done install_file() { cp -f $1 $2 || return 1 chmod $3 $2 || return 1 } verify_file() { [ -f "$1" ] || return 1 perm=`stat $1 | sed -n 's/^Access: (\([0123456789]*\)\/.*$/\1/p'` [ "$2" = "$perm" ] } remove_patch() { echo -n "Removing $1... " file="$PATCH_DIR/$1.mypatch" if ! grep -q "^$1$" $DATA_DIR/installed 2>/dev/null ; then echo "Not installed!" >&2 return 1 fi [ -r $file ] || { echo "Unable to find patch file!" >&2 return 1 } cd $DATA_DIR/tmp tar -xf $file remove chmod u+x remove if ./remove ; then rm -f remove echo "Removed." grep -v "^$1$" $DATA_DIR/installed > $DATA_DIR/installed.new \ && mv $DATA_DIR/installed.new $DATA_DIR/installed return 0 else rm -f remove echo "FAIL!" return 1 fi } verify_patch() { echo -n "Verifying $1... " file="$PATCH_DIR/$1.mypatch" [ -r $file ] || { echo "Unable to verify!" >&2 return 0 } cd $DATA_DIR/tmp tar -xf $file verify chmod u+x verify export -f verify_file if ./verify ; then rm -f verify echo "Good." return 0 else rm -f verify echo "FAIL!" if [ -n "$fix" ] ; then install_patch $file return $? else return 1 fi fi } install_patch() { name="$(basename $1 .mypatch)" echo "Installing $name..." tar -xOf $1 desc cd $DATA_DIR/tmp tar -xf $1 chmod u+x apply export -f install_file if ./apply ; then rm -rf * echo "SUCCESS!" if ! grep -q "^$name$" $DATA_DIR/installed 2>/dev/null ; then echo "$name" >> $DATA_DIR/installed fi return 0 else rm -rf * echo "FAILURE!" return 1 fi } check_patch() { name="$(basename $1 .mypatch)" if [ -n "$recheck" ] ; then grep -v "^$name$" $DATA_DIR/not_needed > \ $DATA_DIR/not_needed.new mv $DATA_DIR/not_needed.new $DATA_DIR/not_needed else if grep -q "^$name$" $DATA_DIR/not_needed 2>/dev/null ; then return 1 fi fi cd $DATA_DIR/tmp tar -xf $1 check chmod u+x check if ./check ; then rm -f check return 0 else rm -f check echo "$name" >> $DATA_DIR/not_needed return 1 fi } process_file() { name="$(basename $1 .mypatch)" if grep -q "^$name$" $DATA_DIR/installed 2>/dev/null ; then [ -n "$check" ] && echo "$name: already installed" return 0 fi if check_patch $1 ; then if [ -n "$check" ] ; then echo "$name: need to install" tar -xOf $1 desc return 1 else install_patch $1 return $? fi else [ -n "$check" ] && echo "$name: not needed" return 0 fi } ret=0 if [ -n "$remove" ] ; then # We need to remove a package remove_patch $1 ret="$?" fi if [ -n "$list" -o -n "$verify" ] ; then # We need to loop through all installed patches for patch in `cat $DATA_DIR/installed` ; do if [ -n "$list" ] ; then echo $patch else verify_patch $patch ret="$[$ret+$?]" fi done fi if [ -n "$check" -o -n "$apply" ] ; then list="$*" [ -z "$list" ] && { list=$PATCH_DIR } for arg in $list ; do if [ -d "$arg" ] ; then for file in $arg/* ; do process_file $file ret="$[$ret+$?]" done elif [ -f "$arg" ] ; then process_file $arg ret="$[$ret+$?]" else echo "Not a valid file or directory: $arg" fi done fi exit $ret aula_code_listings/chapter08/remove0100664000076500007650000000050407733424572016437 0ustar kirkkirk#!/bin/bash rm -f /bin/bash2 rm -f /usr/share/man/man1/bash2.1.gz rm -f /usr/man/man1/bash2.1.gz rm -f /usr/share/info/bash2.info.gz rm -f /usr/info/bash2.info.gz # Remove entry from /etc/shells grep -v '^/bin/bash2$' /etc/shells > /etc/shells.new && { mv /etc/shells.new /etc/shells chmod a+r /etc/shells } exit 0 aula_code_listings/chapter08/sunpatch.pl0100664000076500007650000000663407733424731017410 0ustar kirkkirk#!/usr/bin/perl -w use strict; my $PatchDir = "/mnt/patches"; # Determine the current Solaris release my $Release = `uname -r`; chomp($Release); my (%Installed, %Available); sub StoreEntry ($$) { my ($hashref, $id) = @_; my $patch = $id; my $release = $id; $patch =~ s/-\d+$//; $release =~ s/^\d+-//; if ($hashref->{$patch}) { # Already exists... compare releases if ($release > $hashref->{$patch}) { $hashref->{$patch} = $release; } } else { # Doesn't exist yet $hashref->{$patch} = $release; } } sub InstallPatch { my ($patch) = @_; my $id = "$patch-$Available{$patch}"; my $PatchLocation = "$PatchDir/$Release/$id"; print " Installing $id...\n"; # Check for dependencies my %deps; unless (opendir(PATCHDIR, $PatchLocation)) { print STDERR " Could not open $PatchLocation: $!\n"; return 1; } while (my $pkg = readdir(PATCHDIR)) { next if ($pkg =~ /^\./); next unless (-d "$PatchLocation/$pkg"); unless (open(PKGINFO, "$PatchLocation/$pkg/pkginfo")) { print STDERR " Could not open $PatchLocation/$pkg/pkginfo: $!\n"; return 1; } while (my $line = ) { if ($line =~ s/^SUNW_REQUIRES\s*=\s*//) { chomp($line); if ($line) { # Yes, there are dependencies after the = sign foreach (split /\s+/, $line) { StoreEntry(\%deps, $_); } } } } close(PKGINFO); } closedir(PATCHDIR); # See if we have these dependencies foreach my $dep (keys %deps) { if ($Installed{$dep} and ($Installed{$dep} >= $deps{$dep})) { # Patch already installed... good! } elsif ($Available{$dep} and ($Available{$dep} >= $deps{$dep})) { # Patch available... install print " Installing Dependency: $dep-$Available{$dep}\n"; unless (InstallPatch($dep) == 0) { # Delete failed patch from available list delete $Available{$dep}; return 1; } } else { # Patch not available... print STDERR " Dependency $dep not found\n"; return 1; } } if (system("patchadd $PatchLocation") == 0) { print " Patch $id Installed!\n"; StoreEntry(\%Installed, "$id"); return 0; } else { print STDERR " Patch $id FAILED!\n"; return 1; } } # Apply is true if first arg is --apply my $Apply = ($ARGV[0] and ($ARGV[0] eq '--apply')); # Get list of installed patches foreach my $line (`patchadd -p`) { if ($line =~ /^Patch:\s+([\d-]+)/) { StoreEntry(\%Installed, $1); } } # Get list of available patches opendir(DIR, "$PatchDir/$Release") or die "Could not open directory: $PatchDir/$Release: $!\n"; while (my $entry = readdir(DIR)) { next if ($entry =~ /^\./); next unless (-d "$PatchDir/$Release/$entry"); StoreEntry(\%Available, $entry); } closedir(DIR); # Determine which patches need to be installed my $ret = 0; foreach my $patch (keys %Available) { # Skip if this patch has already failed next unless defined($Available{$patch}); unless ($Installed{$patch} and ($Installed{$patch} >= $Available{$patch})) { print "Need to install: $patch-$Available{$patch}\n"; if ($Apply) { $ret += InstallPatch($patch); } else { $ret++; } } } exit $ret; aula_code_listings/chapter08/verify0100664000076500007650000000076507733424572016457 0ustar kirkkirk#!/bin/bash # Exit immediately on an error set -e # Check the executable verify_file /bin/bash2 0755 # Check the man page if [ -d "/usr/share/man" ] ; then verify_file /usr/share/man/man1/bash2.1.gz 0644 else verify_file /usr/man/man1/bash2.1.gz 0644 fi # Install the info page if [ -d "/usr/share/info" ] ; then verify_file /usr/share/info/bash2.info.gz 0644 else verify_file /usr/info/bash2.info.gz 0644 fi # Check for the entry in /etc/shells... grep -q '^/bin/bash2$' /etc/shells aula_code_listings/chapter08/autorpm/0040775000076500007650000000000007734702270016705 5ustar kirkkirkaula_code_listings/chapter08/autorpm/autorpm.conf-apply_cached0100664000076500007650000000072407733425771023664 0ustar kirkkirkSet_Var("Path", "/usr/local/updates/"); Directory ("${Path}/${RHVersion}") { action (updated) { Install(Auto); PGP_Require(Yes); Auto_Follow_Deps(Yes); } action (new) { Install(Interactive); } } Set_Var("InstallPath", "/usr/local/updates/all"); Directory ("${InstallPath}") { action (updated) { Install (Auto); Auto_Follow_Deps(Yes); } action (new) { Install (Auto); Auto_Follow_Deps(Yes); } } aula_code_listings/chapter08/autorpm/autorpm.conf-caching0100664000076500007650000000070007733425655022637 0ustar kirkkirkSet_Var("Arch", "i686|i586|i386|noarch"); Set_Var("RHVersion", "7.2"); Set_Var("Lang", "en"); Set_Var("Path", "/usr/local/updates/"); ftppool ("redhat-updates") { Compare_To_Dir("${Path}/${Version}"); Recursive(Yes); Regex_Dir_Accept("${Arch}"); Delete_Old_Version(Yes); action (updated) { Install(No); Store("${Path}/${Version}"); } action (new) { Install(No); Store("${Path}/${Version}"); } } aula_code_listings/chapter08/autorpm/autorpm.conf-exact0100664000076500007650000000056707733426027022354 0ustar kirkkirkSet_Var("Source", "/usr/local/distribution/RedHat/RPMS"); Remove_Packages(Yes, "--nodeps"); Remove_Exclude("/usr/local/etc/autorpm.remove.exclude"); Directory ("${Source}") { action (updated) { Install(Auto); Auto_Follow_Deps(Yes); } action (new) { Install(Auto); Auto_Follow_Deps(Yes); } action (old) { Downgrade(Yes); } } aula_code_listings/chapter08/autorpm/autorpm.conf-simple0100664000076500007650000000071607733425575022544 0ustar kirkkirkEval_Var("RHVersion", "sed 's/\(Red Hat Linux \)\?release \([^ ]*\) (.*)/\2/' /etc/redhat-release"); Set_Var("Arch", "i686|i586|i386|noarch"); Set_Var("Lang", "en"); Report_Queues_To("root"); ftppool ("redhat-updates") { Recursive(Yes); Regex_Dir_Accept("${Arch}"); Regex_Ignore("^kernel-"); action (updated) { PGP_Require(Yes); Install(Auto); Auto_Follow_Deps(Yes); } action (new) { Install(Interactive); } } aula_code_listings/chapter08/autorpm/determine_needed_rpms.pl0100664000076500007650000000337507734702263023572 0ustar kirkkirk#!/usr/bin/perl -w use strict; my $GroupFile = "/etc/responsibilities"; my $GroupDir = "/usr/local/etc/groups"; my $RPMDir = "/usr/local/distribution/RedHat/RPMS"; my %AllRPMs; my %PkgsByGroup; my %AllGroups; my %MyGroups; sub ReadGroup { my ($group) = @_; my $file; my $line; my @ret; open($file, "$GroupDir/$group") or die "Could not open $GroupDir/$group: $!\n"; while ($line = <$file>) { chomp($line); $line =~ s/^\s+//; $line =~ s/\s+$//; if ($line =~ s/^\@\s*(.+)$/$1/) { # Including another group push @ret, ReadGroup($line); } else { push @ret, $line; } } close($file); return (@ret); } # Retrieve list of all RPMs my $rpm; foreach $rpm (`rpm -qp --queryformat="%{NAME}\n" $RPMDir/*.rpm`) { chomp($rpm); $AllRPMs{$rpm}++; } # Read in list of group RPMs my $file; opendir(GROUPDIR, $GroupDir) or die "Could not access directory $GroupDir: $!\n"; while ($file = readdir(GROUPDIR)) { next if $file =~ /^\./; foreach $rpm (ReadGroup($file)) { $AllGroups{$rpm}++; $PkgsByGroup{$file}{$rpm}++; } } closedir(GROUPDIR); # Determine the RPMs from the groups we are in my $group; open (GROUPS, $GroupFile) or die "Could not open $GroupFile: $!\n"; while ($group = ) { chomp($group); if ($PkgsByGroup{$group}) { foreach $rpm (keys %{$PkgsByGroup{$group}}) { $MyGroups{$rpm}++; } } else { print STDERR "WARNING: Unknown group: $group\n"; } } close (GROUPS); unless (keys %MyGroups) { die "No responsibilities defined!\n"; } # Now, output RPM listing foreach $rpm (keys %AllRPMs) { if ($AllGroups{$rpm}) { if ($MyGroups{$rpm}) { print "$rpm\n"; } } else { print "$rpm\n"; } } aula_code_listings/chapter10/0040775000076500007650000000000007734702327015212 5ustar kirkkirkaula_code_listings/chapter10/services/0040775000076500007650000000000007733432627017037 5ustar kirkkirkaula_code_listings/chapter10/services/services.sh0100664000076500007650000000114707614557070021214 0ustar kirkkirk#!/bin/bash SLEEP=30 #seconds while true ; do cat /usr/local/etc/services.conf | while read line ; do match=`echo "$line" | sed 's/|.*$//'` cmd=`echo "$line" | sed 's/^.*|//'` ps ax -o '%c %P' | awk -v "process=$match" \ '{if (($1 == process) && ($2 == 1)) exit 1}' && { # Process not found! /usr/local/sbin/report ERROR "Process $match not running" [ -n "$cmd" ] && { $cmd && { /usr/local/sbin/report INFO \ "Process $match was restarted ($cmd)" } } } done sleep $SLEEP done aula_code_listings/chapter10/services/services.conf0100664000076500007650000000023207614556215021521 0ustar kirkkirksyslogd|/etc/rc.d/init.d/syslog restart sshd|/etc/rc.d/init.d/sshd restart httpd|/etc/rc.d/init.d/httpd restart named|/etc/rc.d/init.d/named restart atd| aula_code_listings/chapter10/services/web.sh0100664000076500007650000000060507607121534020136 0ustar kirkkirk#!/bin/bash SLEEP=30 #seconds TIMEOUT=10 #seconds URL='http://localhost/index.html' MATCH='' while true ; do wget -q -O - -T=$TIMEOUT --tries=1 "$URL" | grep -q "$MATCH" || { /usr/local/sbin/report ERROR "Web server not responding" /etc/rc.d/init.d/httpd restart && { /usr/local/sbin/report INFO "Web server restarted" } } sleep $SLEEP done aula_code_listings/chapter10/check_apache.sh0100664000076500007650000000041407607120677020121 0ustar kirkkirk#!/bin/bash URL="http://localhost/netsaint/index.html" TIMEOUT=10 #(seconds) MATCH="" restart="service httpd restart" wget -q -O - -T=$TIMEOUT --tries=1 "$URL" | grep -q "$MATCH" || { # Something is wrong, so restart eval "$restart" exit $? } exit 0 aula_code_listings/chapter10/check_drives.sh0100664000076500007650000000053407564050750020173 0ustar kirkkirk#!/bin/bash types="ext2|ext3|ufs|vfat" cutoff="90" for drive in `mount | awk "/type ($types)/ {print \\\$1}"` ; do df "$drive" | awk -v "cutoff=$cutoff" '/^\// { gsub(/%$/, "", $5); if ($5 > cutoff) print "Drive " $1 " (" $6 ") is " $5 "% Full" }' done | /usr/local/sbin/report --stdin WARNING 'Drives almost full' aula_code_listings/chapter10/check_for_failures.sh0100664000076500007650000000046307564055705021365 0ustar kirkkirk#!/bin/bash # Check for any drive failures egrep 'I/O error: dev .+, sector' /var/log/messages | \ /usr/local/sbin/report --stdin CRITICAL 'Drives failure' # Check for any RAID failures egrep 'raid.*Disk failure on' /var/log/messages | \ /usr/local/sbin/report --stdin CRITICAL 'RAID drive failure' aula_code_listings/chapter10/check_packages_multi.sh0100664000076500007650000000114607564052632021670 0ustar kirkkirk#!/bin/bash TMPDIR="$HOME/tmp" if [ `uname -s` == 'SunOS' ] ; then # Solaris pkginfo | awk '{print $2}' elif [ -x /usr/bin/dpkg ] ; then # Debian GNU/Linux dpkg -l | grep '^ii ' | awk '{print $2}' elif [ -x /bin/rpm ] ; then # Red Hat Linux (or other RPM-based system) rpm -qa --qf '%{name}\n' fi | sort > $TMPDIR/packages.curr if [ -r $TMPDIR/packages.last ] ; then diff $TMPDIR/packages.last $TMPDIR/packages.curr | \ sed -n -e 's/^/Added/p' | \ /usr/local/sbin/report --stdin INFO 'Packages changed' fi mv $TMPDIR/packages.curr $TMPDIR/packages.last aula_code_listings/chapter10/check_packages.sh0100664000076500007650000000052107564052632020452 0ustar kirkkirk#!/bin/bash TMPDIR="$HOME/tmp" rpm -qa | sort > $TMPDIR/packages.curr if [ -r $TMPDIR/packages.last ] ; then diff $TMPDIR/packages.last $TMPDIR/packages.curr | \ sed -n -e 's/^/Added/p' | \ /usr/local/sbin/report --stdin INFO 'Packages changed' fi mv $TMPDIR/packages.curr $TMPDIR/packages.last aula_code_listings/chapter10/check_port.sh0100664000076500007650000000032507572726216017667 0ustar kirkkirk#!/bin/bash port="80" restart="service httpd restart" netstat -ln | awk '/^tcp/ {print $4}' | grep -q ":$port$" || { # Apparently not listening, so run restart command eval "$restart" exit $? } exit 0 aula_code_listings/chapter10/check_process.sh0100664000076500007650000000032307607120172020343 0ustar kirkkirk#!/bin/bash process="/usr/sbin/httpd" start="service httpd restart" ps ax | awk '{print $5}' | grep -q "^$process$" || { # Apparently not running, so start the process eval "$start" exit $? } exit 0 aula_code_listings/chapter10/logwatch_all.sh0100664000076500007650000000042407564050750020200 0ustar kirkkirk#!/bin/bash HOSTS=' host1|admin1@someplace.com host2|admin2@someplace.com host3|admin3@someplace.com ' for entry in $HOSTS ; do host=`echo "$entry" | sed 's/|.*$//'` email=`echo "$entry" | sed 's/^.*|//'` logwatch --mailto "$email" --hostname "$host" done aula_code_listings/chapter10/netsaint_plugin.sh0100664000076500007650000000062107565351517020750 0ustar kirkkirk#!/bin/bash file="$1" [ -z "$file" ] && { echo "No file specified!" exit -1 # UNKNOWN } if [ -f "$file" ] ; then if [ -s "$file" ] ; then # Everything is fine echo "File $file OK." exit 0 else # Warn if the file is empty echo "File $file is empty." exit 1 fi else # Error if not a normal file echo "$file not a regular file." exit 2 fi aula_code_listings/chapter10/restart-httpd.sh0100664000076500007650000000137007565342137020352 0ustar kirkkirk#!/bin/bash # Set this to the number of failed checks that can occur before # a restart should be attempted (usually one less than retry count) failcount=2 # Store arguments state="$1" statetype="$2" attempts="$3" host="$4" [ "$state" != "CRITICAL" ] && { # Exit if not in a critical state exit 0 } if [ "$statetype" == "SOFT" ] ; then # Service has failed at least one test [ "$attempts" == "$failcount" ] && { ssh "root@$host" 'service httpd restart' } else # Service has failed all status tests! # We should have restarted it before this happened. # We probably did, and it probably didn't fix the problem... # But, we can try one more time just for the fun of it. ssh "root@$host" 'service httpd restart' fi exit 0 aula_code_listings/chapter10/report.pl0100664000076500007650000000272407733430314017055 0ustar kirkkirk#!/usr/bin/perl -w use strict; # Configuration items my $MailThreshold = 'WARNING'; my $LogFile = '/var/log/event.log'; my $Email = 'alert@company.com'; # Available log levels my %Levels = ( 'INFO' => 1, 'WARNING' => 2, 'ERROR' => 3, 'CRITICAL' => 4 ); sub usage () { print STDERR "Usage: $0 [--stdin] \n"; print STDERR "Levels: "; foreach (keys %Levels) { print STDERR "$_ "; } print STDERR "\n"; exit 1; } # Check and store parameters my $stdin = 0; if ($ARGV[0] eq '--stdin') { shift @ARGV; $stdin = 1; } usage() unless ($#ARGV == 1); usage() if ($ARGV[0] eq '--help'); my ($level, $subject) = @ARGV; $level = uc($level); usage() unless ($Levels{$level}); # Determine system's hostname (first portion only) my $hostname = `hostname`; chomp($hostname); $hostname =~ s/\..*$//; # Store formatted date string my $date = localtime; open (LOG, ">>$LogFile"); unless ($stdin) { if ($Levels{$level} >= $Levels{$MailThreshold}) { system ("mail -s '[$level] $hostname: $subject' '$Email'"); } print LOG "$date $hostname [$level] $subject"; close(LOG); exit 0; } my @lines; while (my $line = ) { push @lines, $line; print LOG "$date $hostname [$level] $subject: $line"; } close(LOG); if ((@lines) and $Levels{$level} >= $Levels{$MailThreshold}) { open (MAIL, "| mail -s '[$level] $hostname: $subject' '$Email'"); foreach (@lines) { print MAIL $_; } close(MAIL); } exit 0; aula_code_listings/chapter10/logwatch_example.sh0100664000076500007650000000125007733431215021056 0ustar kirkkirk#!/bin/bash # Note, needs to be placed in /etc/log.d/scripts/services and named # according to your configuration file (i.e. a config file of # 'example.conf' would require this file to be named 'example'. # This is as nice script that will show you the lines you will # be processing and reporting on. It will first display the # standard environment variables and then it takes STDIN and # dump it right back out to STDOUT. # These are the standard environment variables. echo "Date Range: $LOGWATCH_DATE_RANGE" echo "Detail Level: $LOGWATCH_DETAIL_LEVEL" echo "Temp Dir: $LOGWATCH_TEMP_DIR" echo "Debug Level: $LOGWATCH_DEBUG" # Now take STDIN and dump it to STDOUT cat aula_code_listings/chapter10/logwatch_startups.pl0100664000076500007650000000073107734702326021321 0ustar kirkkirk#!/usr/bin/perl -w # Save as /etc/log.d/scripts/services/startups, and also be sure to create # /etc/log.d/conf/services/startups.conf as described in the book use strict; unless ($ENV{'LOGWATCH_DETAIL_LEVEL'} > 0) { # Don't report system boots at lowest detail level exit 0; } my $startups = 0; while (my $line = ) { if ($line eq 'Initializing CPU#0') { $startups++; } } if ($startups > 0) { print "System started: $startups Time(s)\n"; } aula_code_listings/chapter10/mon.conf0100664000076500007650000000110707733432273016645 0ustar kirkkirkhostgroup webservers www1 www2 www3 watch webservers service ping interval 2m monitor fping.monitor service http interval 5m monitor http.monitor depend SELF:ping period wd {Mon-Fri} hr {9am-5pm} # Daytime support alertevery 1h alertafter 2 10m alert mail.alert somebody@company.com period wd {Sun-Sat} # 24-hour support alertevery 1h alertafter 3 20m alert mail.alert support@company.com aula_code_listings/chapter10/mon-custom.sh0100664000076500007650000000047307733432417017647 0ustar kirkkirk#!/bin/bash custom_check() { # Perform your custom check here # The host is passed in as $1 # Return 0 on success, 1 on failure return 0 } failed='' for host in "$@" ; do custom_check "$host" || { failed="$failed $host" } done [ -n "$failed" ] && { echo "$failed" exit 1 } exit 0 aula_code_listings/chapter12/0040775000076500007650000000000007733433352015212 5ustar kirkkirkaula_code_listings/chapter12/rdiff-remove.sh0100664000076500007650000000237407733433262020136 0ustar kirkkirk#!/bin/bash # Drive or directory to clean up prune="/mnt/backup" # The maximum used space allowed on the drive (percent) cutoff="80" # Removes one increment from each rdiff-backup repository until the # drive falls below the specified cutoff until df "$prune" | awk -v "cutoff=$cutoff" '/^\// { gsub(/%$/, "", $5); if ($5 > cutoff) exit 1 }' ; do # Too full, clean out some old data # First, find and store rdiff-backup repositories [ -z "$DIRS" ] && { for dir in `find $prune -name rdiff-backup-data -type d` ; do DIRS="$DIRS $(echo "$dir" | sed 's/\/rdiff-backup-data//')" done } # Now, delete the oldest increment for dir in $DIRS ; do del=`rdiff-backup -l "$dir" | sed -n \ 's/^ *increments\.\(....-..-.....:..:..-..:..\)\.dir.*/\1/p' \ | head -n2 | tail -n1` echo >&2 echo "Cleaning $dir..." >&2 rdiff-backup --remove-older-than "$del" "$dir" >&2 || { echo "Only one increment left for $dir (skipping)" >&2 DIRS=`echo "$DIRS" | sed "s= *$dir *=="` } done # Prevent an infinite loop from occurring [ -z "$DIRS" ] && { echo >&2 echo "No rdiff-backup data directories left to prune!" >&2 exit 1 } done exit 0 aula_code_listings/chapter12/tar_incremental.sh0100664000076500007650000000107407733433262020714 0ustar kirkkirk#!/bin/bash # Where to place backup log files LOG_DIR="/usr/local/var/backup_logs" # Which directories to include in backup DIRS="home" # Which output file or tape device to use DEV="/dev/st0" today=$(date +%a) cd / case $today in Mon) # Full backup tar cvpf $DEV $DIRS mt -f $DEV rewind mt -f $DEV offline ;; Tue|Wed|Thu|Fri) # Partial backup tar cvpf $DEV -N "$(date -d '1 day ago')" $DIRS mt -f $DEV rewind mt -f $DEV offline ;; *) # Weekend, do nothing ;; esac > "$LOG_DIR/$today" aula_code_listings/chapter12/incremental.sh0100664000076500007650000000105407733433347020050 0ustar kirkkirk#!/bin/bash BACKUP_SERVER="backup@backup.mydomain.com" BACKUP_DIR="/usr/local/backup" DIRS="/etc /var /usr/local /home" yesterday=`date +%a -d yesterday` shorthost=`hostname | sed 's/\..*$//'` archive_dir="$BACKUP_DIR/$shorthost/$yesterday" # Clean out existing archive directory (from last week) mkdir -p /root/.emptydir rsync --delete -a /root/.emptydir/ "$BACKUP_SERVER:$archive_dir/" rmdir /root/.emptydir rsync -a --force --ignore-errors --delete \ --backup --backup-dir=$archive_dir \ $DIRS "$BACKUP_SERVER:$BACKUP_DIR/$shorthost/current" aula_code_listings/chapter13/0040775000076500007650000000000007734702417015215 5ustar kirkkirkaula_code_listings/chapter13/add_new_user.sh0100664000076500007650000000063707733434053020210 0ustar kirkkirk#!/bin/bash usage() { echo "Usage: $0 [username] [full name]" 2>/dev/null exit 99; } [ "$1" == "--help" ] && usage new_user="$1" full_name="$2" [ -n "$new_user" ] || { echo -n "Enter username to add: " >&2 read new_user } [ -n "$full_name" ] || { echo -n "Enter full name: " >&2 read full_name } # ... create user ... echo "New account successfully created!" >&2 echo "New UserID: $new_uid" aula_code_listings/chapter13/wrapper.c0100664000076500007650000000201007733434204017022 0ustar kirkkirk#include #define WEB_UID 99 int main (int argc, char *argv[]) { char *command[5]; char *basename; // Make sure this user is authorized if (getuid() != WEB_UID) { fprintf(stderr, "You are not authorized.\n"); return 1; } // Initialize command items with NULLs memset(command, 0, sizeof(command)); // Determine the basename for this program if ((basename = strrchr(argv[0], '/'))) { // Basename starts after the last forward-slash in path basename++; } else { basename=argv[0]; } // Using the basename, decide which command to execute if (!strcmp(basename, "reboot")) { command[0] = "/sbin/reboot"; } else if (!strcmp(basename, "restart_dhcpd")) { command[0] = "/etc/rc.d/init.d/dhcpd"; command[1] = "restart"; } else { fprintf(stderr, "%s: Unknown invocation.\n", basename); return 1; } // Execute command as root setuid(geteuid()); setgid(getegid()); execv(command[0], command); return 0; } aula_code_listings/chapter13/read_int_spec.pl0100664000076500007650000000117607733434622020352 0ustar kirkkirk#!/usr/bin/perl -w use strict; sub read_pipe_file ($) { my ($file) = @_; my (@ret, $entry); open(FILE, $file) or return undef; while (my $line = ) { chomp($line); next if ($line =~ /^\s*$/); # skip blank lines next if ($line =~ /^\s*#/); # skip comments # Now retrieve name/values for current line $entry = (); while ($line =~ s/^\|([^=|]+)=([^|]*)//) { $entry->{$1} = $2; } push @ret, $entry; } close(FILE); return (@ret); } foreach my $entry (read_pipe_file '/tmp/test.conf') { foreach (keys %{$entry}) { print "$_: $entry->{$_}\n"; } } aula_code_listings/chapter13/read_name_value.pl0100664000076500007650000000102607734702403020650 0ustar kirkkirksub read_file ($) { my ($file) = @_; my %ret; open(FILE, $file) or return undef; while (my $line = ) { chomp($line); next if ($line =~ /^\s*$/); # skip blank lines next if ($line =~ /^\s*#/); # skip comments # Split into name and value my ($name, $value) = split('=', $line, 2); next unless ($name and $value); # Remove single-quotes $value =~ s/^'//; $value =~ s/'$//; # Store value $ret{$name} = $value; } close(FILE); return \%ret; } aula_code_listings/chapter13/menu.sh0100664000076500007650000000074607733434653016524 0ustar kirkkirk#!/bin/bash FILE='/usr/local/etc/mainmenu.conf' get_value() { echo "$1" | sed "s/.*|$2=\([^|]*\).*/\1/" } IFS=' ' select resp in \ `cat "$FILE" | while read line ; do get_value "$line" item done` do # Check for q or Q to exit case "$REPLY" in [qQ]) break ;; esac # Execute command cat "$FILE" | while read line ; do [ `get_value "$line" item` == "$resp" ] && { eval `get_value "$line" cmd` } done done aula_code_listings/chapter13/config.sh0100664000076500007650000000257207733434771017025 0ustar kirkkirk#!/bin/bash CONFIG_IN="/usr/local/etc/config.in" CONFIG_OUT="/usr/local/var/config.out" get_value() { echo "$1" | sed "s/.*|$2=\([^|]*\).*/\1/" } check_value() { var="$(get_value "$1" var)" default="$(get_value "$1" default)" case "$2" in *"'"*) echo " ** Single quotes (') are not allowed! **" ;; '') if eval [ -z "\"\${$var:-$default}\"" ]; then echo " ** Please enter a value (no default available) **" else eval echo "$var=\"'\${$var:-$default}'\"" >&2 return 0 fi ;; *) echo "$var='$2'" >&2 return 0 ;; esac return 1 } # First, read existing values, if any source $CONFIG_OUT 2>/dev/null while read line <&3 ; do case "$line" in \#*|"") # Skip comments and blank lines continue ;; esac # Found a valid line, retrieve data and store parameters var="$(get_value "$line" var)" default="$(get_value "$line" default)" [ -z "$var" ] && continue # Now request and store all settings while true ; do echo "$var: $(get_value "$line" desc)" eval echo -n \ "\"Enter a value for $var [\${$var:-$default}]: \"" read input echo check_value "$line" "$input" && break echo done done 3<$CONFIG_IN 2>$CONFIG_OUT.$$ mv -f $CONFIG_OUT.$$ $CONFIG_OUT aula_code_listings/chapter13/mason/0040775000076500007650000000000007734676644016346 5ustar kirkkirkaula_code_listings/chapter13/mason/showinfo.mhtml0100664000076500007650000000061007734676047021234 0ustar kirkkirk%# File: showinfo.mhtml

You entered the following information:

Name: <% $name %>
Email Address: <% $email_address %>
% if ($m->comp('/storeinfo.comp', % name => $name, email => $email_address)) {

Your information was successfully saved!

% } else {

There was an error saving your information!

% } <%args> $name $email_address aula_code_listings/chapter13/mason/getinfo.mhtml0100664000076500007650000000017607734676217021041 0ustar kirkkirk
Name: Email Address:
aula_code_listings/chapter13/mason/storeinfo.comp0100664000076500007650000000041507734676217021227 0ustar kirkkirk%# storeinfo.comp <%perl> if ($testing) { # Show what we would have stored $m->out("

I would have stored $name and $email.

"); } else { # Place regular Perl code here to store the values } return 1; <%args> $name $email $testing => 0 aula_code_listings/chapter13/mason/httpd.conf0100664000076500007650000000040707734676257020336 0ustar kirkkirk AuthUserFile /etc/htpasswd AuthType Basic AuthName "Administration System Access" require valid-user Satisfy any order deny,allow allow from 192.168.0.0/255.255.0.0 allow from 127.0.0.1 deny from all aula_code_listings/chapter13/mason/log.comp0100664000076500007650000000035007734676374020002 0ustar kirkkirk%# log.comp <%perl> # Set your logfile here: my $logfile = "/usr/local/var/web.log"; open(LOG, ">>$logfile"); my $datetime = localtime; print LOG "$datetime $ENV{'REMOTE_USER'} $msg\n"; close(LOG); <%args> $msg aula_code_listings/chapter13/check_data_type.sh0100664000076500007650000000107207733435246020657 0ustar kirkkirk# $1 is the value entered by the user # $2 is the expected datatype check_data_type() { case $2 in integer) echo "$1" | egrep -q '^[0123456789]+$' ;; network_address) echo "$1" | \ egrep -q \ '^[0123456789]{1,3}\.[0123456789]{1,3}\. [0123456789]{1,3}\.[0123456789]{1,3}$' ;; directory) test -d "$1" ;; file) test -f "$1" ;; *) # Unsupported datatype, return true true ;; esac return $? } aula_code_listings/chapter13/extended_check_value.sh0100664000076500007650000000234207733435335021701 0ustar kirkkirk # $1 is the value entered by the user # $2 is the expected datatype check_data_type() { case $2 in integer) echo "$1" | egrep -q '^[0123456789]+$' ;; network_address) echo "$1" | \ egrep -q \ '^[0123456789]{1,3}\.[0123456789]{1,3}\. [0123456789]{1,3}\.[0123456789]{1,3}$' ;; directory) test -d "$1" ;; file) test -f "$1" ;; *) # Unsupported datatype, return true true ;; esac return $? } check_value() { var="$(get_value "$1" var)" default="$(get_value "$1" default)" case "$2" in *"'"*) echo " ** Single quotes (') are not allowed! **" ;; '') if eval [ -z "\"\${$var:-$default}\"" ]; then echo " ** Please enter a value (no default available) **" else eval echo "$var=\"'\${$var:-$default}'\"" >&2 return 0 fi ;; *) if check_data_type "$2" "$(get_value "$1" datatype)" ; then echo "$var='$2'" >&2 return 0 else echo " ** Invalid value entered! **" fi ;; esac return 1 } aula_code_listings/chapter13/status/0040775000076500007650000000000007734677071016547 5ustar kirkkirkaula_code_listings/chapter13/status/status.mhtml0100664000076500007650000000136607734676702021140 0ustar kirkkirk%# status.mhtml <%once> my @hosts = MyLib::read_pipe_file('/usr/local/www/etc/status.conf'); % foreach my $entry (@hosts) { % }
Host Status Ports Description
<% $entry->{'host'} %> <& pinghost.comp, host => $entry->{'host'} &> % foreach (split /,/, $entry->{'ports'}) { <% $_ %>: <& checkport.comp, host => $entry->{'host'}, port => $_ &>
% } 		<% $entry->{'desc'} %>
aula_code_listings/chapter13/status/pinghost.comp0100664000076500007650000000034407734676766021272 0ustar kirkkirk%# pinghost.comp <%once> use IO::Socket; % if (system("ping -c1 $host >/dev/null 2>&1") == 0) { UP % } else { DOWN % } <%args> $host aula_code_listings/chapter13/status/checkport.comp0100664000076500007650000000043707734676766021424 0ustar kirkkirk%# checkport.comp % my $sock = IO::Socket::INET->new( % PeerAddr => $host, % PeerPort => $port, % Timeout => 5, % Proto => 'tcp' ); % if ($sock) { UP % } else { DOWN % } <%args> $host $port aula_code_listings/chapter13/status/status.conf0100664000076500007650000000022607734677071020736 0ustar kirkkirk|host=www.mydomain.com|ports=80,443|desc=Web Server |host=ns1.mydomain.com|ports=53|desc=DNS Server |host=mail.mydomain.com|ports=25|desc=Mail Server aula_code_listings/chapter13/MyLib.pm0100664000076500007650000000244707734676513016602 0ustar kirkkirk# Should be named MyLib.pm and be placed in the module search path package MyLib; sub read_file ($) { my ($file) = @_; my %ret; open(FILE, $file) or return undef; while (my $line = ) { chomp($line); next if ($line =~ /^\s*$/); # skip blank lines next if ($line =~ /^\s*#/); # skip comments # Split into name and value my ($name, $value) = split('=', $line, 2); next unless ($name and $value); # Remove single-quotes $value =~ s/^'//; $value =~ s/'$//; # Store value $ret{$name} = $value; } close(FILE); return \%ret; } sub read_pipe_file ($) { my ($file) = @_; my (@ret, $entry); open(FILE, $file) or return undef; while (my $line = ) { chomp($line); next if ($line =~ /^\s*$/); # skip blank lines next if ($line =~ /^\s*#/); # skip comments # Now retrieve name/values for current line $entry = (); while ($line =~ s/^\|([^=|]+)=([^|]*)//) { $entry->{$1} = $2; } push @ret, $entry; } close(FILE); return (@ret); } sub write_file ($$) { my ($file, $data_ref) = @_; open(FILE, ">$file") or return 0; foreach my $name (keys %{$data_ref}) { print FILE "$name='$data_ref->{$name}'\n"; } close(FILE); return 1; } 1; aula_code_listings/chapter13/config/0040775000076500007650000000000007734677210016464 5ustar kirkkirkaula_code_listings/chapter13/config/config.mhtml0100664000076500007650000000151007734677117020774 0ustar kirkkirk%# config.mhtml <%once> use lib '/usr/local/www/lib'; use MyLib; # Use the same files as the previous shell-based example my @items = MyLib::read_pipe_file('/usr/local/etc/config.conf'); my $outfile = '/usr/local/var/config.conf'; % # Read current values % my $curr = MyLib::read_file($outfile);
% foreach my $entry (@items) { % my $value = $entry->{'default'}; % if ($curr->{$entry->{'var'}}) { % $value = $curr->{$entry->{'var'}}; % } % }
<% $entry->{'var'} %> <% $entry->{'desc'} %>

aula_code_listings/chapter13/config/submit.mhtml0100664000076500007650000000043507734677117021037 0ustar kirkkirk%# submit.mhtml <%once> use lib '/usr/local/www/lib'; use MyLib; my $outfile = '/usr/local/var/config.conf'; % # Write new values % if (MyLib::write_file($outfile, \%ARGS)) {

New settings written to disk. % } else {

Error writing settings to disk! % } aula_code_listings/chapter13/config/config.conf0100664000076500007650000000033307734677210020574 0ustar kirkkirk|var=IP_ADDRESS|default=|desc=The primary IP address |var=NETMASK|default=255.255.255.0|desc=The netmask |var=GATEWAY|default=192.168.1.1|desc=The default router |var=DNS|default=192.168.1.1|desc=The domain name server aula_code_listings/chapter13/run/0040775000076500007650000000000007734677336016034 5ustar kirkkirkaula_code_listings/chapter13/run/docmd.mhtml0100664000076500007650000000110007734677303020144 0ustar kirkkirk%# docmd.mhtml <%once> use lib '/usr/local/www/lib'; use MyLib; my @items = MyLib::read_pipe_file('/usr/local/www/etc/run.conf');

Executing command "<% $cmd %>"...


<%perl>
foreach my $entry (@items) {
   if ($entry->{'item'} eq $cmd) {
      unless (open(CMD, "$entry->{'cmd'}|")) {
         $m->out("Failed to execute command $entry->{'cmd'}!");
         return;
      }
      while (my $line = ) {
         $m->out("$line");
         $m->flush_buffer();
      }
      close(CMD);
   }
}

Done.

<%args> $cmd aula_code_listings/chapter13/run/run.conf0100664000076500007650000000030207734677303017471 0ustar kirkkirk|item=Show Available Memory|cmd=free |item=Show Running Processes|cmd=ps auwx |item=Restart SSH Daemon|cmd=/etc/init.d/sshd restart |item=Restart Apache Web Server|cmd=/etc/init.d/httpd restart aula_code_listings/chapter13/run/run.mhtml0100664000076500007650000000045307734677303017674 0ustar kirkkirk%# run.mhtml <%once> use lib '/usr/local/www/lib'; use MyLib; my @items = MyLib::read_pipe_file('/usr/local/www/etc/run.conf');

Commands

% foreach my $entry (@items) {

<% $entry->{'item'} %>

% } aula_code_listings/chapter13/remoted/0040775000076500007650000000000007734677560016666 5ustar kirkkirkaula_code_listings/chapter13/remoted/remoted.conf0100664000076500007650000000015407734677474021175 0ustar kirkkirkps='ps auwx' free='free' restart_sshd='/etc/init.d/sshd restart' restart_apache='/etc/init.d/httpd restart' aula_code_listings/chapter13/remoted/remoted.pl0100664000076500007650000000233407734677560020661 0ustar kirkkirk#!/usr/bin/perl -w use strict; use lib '/usr/local/www/lib'; use MyLib; use IO::Socket; use IO::Handle; my $Port = 10000; my $cmds = MyLib::read_file('/usr/local/etc/remoted.conf'); my $server = IO::Socket::INET->new( LocalPort => $Port, Type => SOCK_STREAM, Reuse => 1, Listen => 10 ) or die "Couldn't bind on port $Port: $@\n"; sub execute_cmd ($$) { my ($execute, $client) = @_; my $pid; pipe(READER, WRITER); WRITER->autoflush(1); if ($pid = fork) { close WRITER; while (defined(my $line = )) { print $client $line; } close READER; waitpid($pid,0); } else { if (defined $pid) { close READER; close $client; close $server; my @lines = `$execute 2>&1`; foreach my $line (@lines) { print WRITER $line; } close WRITER; exit; } else { print $client "cannot fork: $!" unless defined $pid; } } } while (my $client = $server->accept()) { $/ = "\r"; my $line = <$client>; chomp $line; if (my $execute = $cmds->{$line}) { execute_cmd($execute, $client); } else { print $client "Invalid request.\n"; } close ($client); } aula_code_listings/chapter13/rrun/0040775000076500007650000000000007734677673016222 5ustar kirkkirkaula_code_listings/chapter13/rrun/docmd.mhtml0100664000076500007650000000141507734677673020351 0ustar kirkkirk%# docmd.mhtml (remote version) <%once> use lib '/usr/local/www/lib'; use MyLib; my @items = MyLib::read_pipe_file('/usr/local/www/etc/run.conf');

Executing command "<% $cmd %>"...

<%perl>
foreach my $entry (@items) {
   if ($entry->{'item'} eq $cmd) {
      if ($entry->{'host'}) {
         $m->comp('remote.comp', 
            cmd => $entry->{'cmd'}, 
            host => $entry->{'host'});
      } else {
         unless (open(CMD, "$entry->{'cmd'}|")) {
            $m->out("Failed to execute command $entry->{'cmd'}!");
            return;
         }
         while (my $line = ) {
            $m->out("$line");
            $m->flush_buffer();
         }
         close(CMD);
      }
   }
}

Done.

<%args> $cmd aula_code_listings/chapter13/rrun/remote.comp0100664000076500007650000000113707734677673020374 0ustar kirkkirk%# remote.comp <%once> use IO::Socket; my $Port = 10000; my $Timeout = 10; <%perl> my $sock = IO::Socket::INET->new( PeerAddr => $host, PeerPort => $Port, Proto => 'tcp', Timeout => $Timeout, Type => SOCK_STREAM ); unless ($sock) { $m->out("Could not connect to remote host!"); return; } eval { local $SIG{ALRM} = sub {die "alarm\n"}; alarm $Timeout; print $sock "$cmd\r"; while (my $line = <$sock>) { $m->out($line); } close ($sock); alarm 0; }; if ($@) { # Timed out $m->out("Command Timed Out!"); } <%args> $cmd $host aula_code_listings/chapter13/rrun/run.conf0100664000076500007650000000046307734677673017675 0ustar kirkkirk|item=Show Available Memory|cmd=free |item=Show Processes|cmd=ps auwx |item=Restart SSH Daemon|cmd=/etc/init.d/sshd restart |item=Show Available Memory|cmd=free|host=www |item=Show Processes|cmd=ps|host=www |item=Restart SSH Daemon|cmd=restart_sshd|host=www |item=Restart Apache|cmd=restart_apache|host=www aula_code_listings/chapter13/rrun/run.mhtml0100664000076500007650000000057507734677673020075 0ustar kirkkirk%# run.mhtml (remote version) <%once> use lib '/usr/local/www/lib'; use MyLib; my @items = MyLib::read_pipe_file('/usr/local/www/etc/run.conf');

Commands

% foreach my $entry (@items) {

<% $entry->{'host'} ? "Host $entry->{'host'}" : 'Local' %>: <% $entry->{'item'} %>

% } aula_code_listings/appendix_a/0040775000076500007650000000000007735103476015534 5ustar kirkkirkaula_code_listings/appendix_a/bash_example.sh0100664000076500007650000000027507734700137020515 0ustar kirkkirk#!/bin/bash # Ask the user for a directory echo "Please enter a directory name:" read input # Now, show the contents of that directory echo echo "Contents of directory $input:" ls $input aula_code_listings/appendix_a/perl_example.pl0100664000076500007650000000154007734700137020537 0ustar kirkkirk#!/usr/bin/perl -w use strict; # First, ask user for a directory print "Please enter a directory name: "; # Use 'my' to declare variables # Use the <> operators to read a line from STDIN my $dir = ; # Now, use the 'chomp' function to remove the carriage return chomp($dir); # First, do a dir listing by executing the 'ls' command directly print "\nCalling system ls function:\n"; # The 'system' function will execute any shell command system("ls $dir"); # Next, do a dir listing using internal Perl commands # The 'die' function will cause the script to abort if the # 'opendir' function call fails print "\nListing directory internally:\n"; opendir(DIR, $dir) or die "Could not find directory: $dir\n"; my $entry; # Now, read each entry, one at a time, into the $entry variable while ($entry = readdir(DIR)) { print "$entry\n"; } closedir(DIR); aula_code_listings/appendix_b/0040775000076500007650000000000007734700530015526 5ustar kirkkirkaula_code_listings/appendix_b/example_comps0100664000076500007650000000042407734700371020305 0ustar kirkkirk4 1 Base { kernel } 0 --hide X Window System { XFree86 } 0 KDE { @ X Window System kdebase (arch !alpha): koffice } 0 GNOME { @ X Window System gnome-core } 1 SSH Client { ? GNOME { openssh-askpass-gnome } openssh openssh-clients } aula_code_listings/appendix_b/example.ks0100664000076500007650000000105207734700530017513 0ustar kirkkirklang en_US keyboard us mouse genericps/2 --emulthree timezone --utc America/New_York auth --useshadow --enablemd5 rootpw --iscrypted $1$xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx network --device eth0 --bootproto dhcp cdrom install firewall --disabled zerombr yes clearpart --all # Always create a 50MB boot partition part /boot --size 50 # Also create a 1GB swap part swap --size 1024 # Use rest of space for / part / --size 1 --grow lilo --location mbr skipx reboot %packages @ Everything %post # You can put shell commands here to be run after installation aula_code_listings/appendix_c/0040775000076500007650000000000007734702205015530 5ustar kirkkirkaula_code_listings/appendix_c/build_root_GNU.spec0100664000076500007650000000014507734701223021253 0ustar kirkkirk%build %configure make %install rm -rf $RPM_BUILD_ROOT %makeinstall %clean rm -rf $RPM_BUILD_ROOT aula_code_listings/appendix_c/build_root.spec0100664000076500007650000000071407734701136020547 0ustar kirkkirk# Partial SPEC file showing how a build root is used %build make -DCONFIG_FILE=/etc/program.conf program %install rm -rf $RPM_BUILD_ROOT mkdir -p $RPM_BUILD_ROOT/etc mkdir -p $RPM_BUILD_ROOT/usr/bin cp program $RPM_BUILD_ROOT/usr/bin chmod a+rx $RPM_BUILD_ROOT/usr/bin/program cp program.conf $RPM_BUILD_ROOT/etc chmod a+r $RPM_BUILD_ROOT/etc/program.conf %clean rm -rf $RPM_BUILD_ROOT %files %defattr(-,root,root) /etc/program.conf /usr/bin/program.conf aula_code_listings/appendix_c/relocation.spec0100664000076500007650000000043607734701613020545 0ustar kirkkirkPrefix: /usr/local ... %post if [ ! "$RPM_INSTALL_PREFIX" == "/" ] ; then ln -sf "$RPM_INSTALL_PREFIX/etc/program.conf" /etc/program.conf fi %postun rm -f /etc/program.conf %verifyscript test -l /etc/program.conf %files %conf /usr/local/etc/program.conf /usr/local/bin/program aula_code_listings/appendix_c/triggers0100664000076500007650000000136607734702205017304 0ustar kirkkirk# Run when other_package1 is installed or upgraded # Also run when this package is installed or upgraded, # if other_package1 is already installed %triggerin -- other_package1 # Run when other_package1 or other_package2 is removed or upgraded, # or if we are removed or upgraded and these packages are installed %triggerun -- other_package1, other_package2 # Run after other_package1 or other_package2 is removed or upgraded, # or after we are removed or upgraded (if these packages are installed) %triggerpostun -- other_package1, other_package2 # Execute the script with Perl if version 2.0 or greater of other_package # is installed/upgraded, or if it was already installed when we are installed %triggerin -p /usr/bin/perl -- other_package >= 2.0 aula_code_listings/appendix_c/build.sh0100664000076500007650000000346207734702071017166 0ustar kirkkirk#!/bin/bash usage() { echo "Usage: $0 " >&2 exit 1 } die() { echo >&2 echo "ERROR: $*" >&2 echo >&2 exit 1 } getfiles() { echo -n "Retrieving $1 from CVS... " >&2 cvs export -r "$tag" $1 >/dev/null 2>&1 || \ die "Could not retrieve $1 from CVS" echo "Done." } dotag() { echo -n "Retrieving $1 from CVS... " >&2 cvs rtag -F -r "$tag" "$2" "$1" >/dev/null 2>&1 || \ die "Tagging $1 with $2 failed!" echo "Done." } getinfo() { sed -n "s/^$1: *\([^ ][^ ]*\) *$/\1/p" "$spec" } [ "$1" == "--help" ] && usage [ $# -lt 2 ] && usage spec="$PWD/$1" tag="$2" [ -r "$spec" ] || die "Could not access SPEC file" # Generate build directory structure topdir="$(rpm --eval '%{_topdir}')" mkdir -p $topdir/{BUILD,RPMS,SOURCES,SPECS,SRPMS} # Get name and version from the SPEC file name="$(getinfo Name)" version="$(getinfo Version)" # Retrieve last release and increment by one release="$(getinfo Release)" release=$[$release+1] sed "s/^Release:.*$/Release: $release/" "$spec" >> "$spec.new" && \ mv "$spec.new" "$spec" # Retrieve files from CVS cd "$topdir/SOURCES" rm -rf "$name"-* mkdir "$name-$version" cd "$name-$version" for entry in `sed -n 's/^#CVS=//p' "$spec"` ; do getfiles "$entry" [ -e "$entry" ] || die "Failed to retrieve $entry from CVS!" done || die "Could not retrieve all entries from CVS" # Next, build the tar file echo -n "Building $name-$version.tar.gz... " cd .. tar -czpf "$name-$version.tar.gz" "$name-$version" || \ die "Failed to create tar file!" rm -rf "$name-$version" echo "Done." # Now, build the package rpm -ba "$spec" || die "Failed to build package $name" # Tag the code in CVS newtag="RPM-$(echo "$name-$version" | sed 's/\./-/g')-$release" for entry in `sed -n 's/^#CVS=//p' "$spec"` ; do dotag "$entry" "$newtag" done aula_code_listings/appendix_c/trigger_test.spec0100664000076500007650000000141107734701437021106 0ustar kirkkirk%define other_pkg test2 Name: test1 Summary: Package %{name} Version: 1.0 Release: 1 License: MIT Group: Test BuildArch: noarch BuildRoot: /var/tmp/%{name} %description Description for %{name} %files %pre echo Executing pre in %{name}-%{version}-%{release}: arg=$1 %post echo Executing post in %{name}-%{version}-%{release}: arg=$1 %preun echo Executing preun in %{name}-%{version}-%{release}: arg=$1 %postun echo Executing postun in %{name}-%{version}-%{release}: arg=$1 %triggerin -- %{other_pkg} echo Executing triggerin in %{name}-%{version}-%{release}: args=$1 $2 %triggerun -- %{other_pkg} echo Executing triggerun in %{name}-%{version}-%{release}: args=$1 $2 %triggerpostun -- %{other_pkg} echo Executing triggerun in %{name}-%{version}-%{release}: args=$1 $2 aula_code_listings/appendix_c/sub_packages.spec0100664000076500007650000000075407734701724021043 0ustar kirkkirkName: program Summary: My program Version: 1.0 Release: 1 License: MIT Group: System Environment/Base %description My program %package server Summary: My program (server component) Group: System Environment/Daemons %description server The server component of my program. %package client Summary: My program (client component) Group: System Environment/Base %description client The client component of my program. %files server /usr/sbin/in.myprogramd %files client /usr/bin/myprogram aula_code_listings/appendix_c/auto_build.spec0100664000076500007650000000034107734701764020537 0ustar kirkkirk#CVS=autorpm Name: autorpm Version: 3.0.1 Release: 1 Summary: RPM Auto-Installer and FTP Mirrorer License: MIT Group: Utilities/System BuildArch: noarch Source: autorpm-%{version}.tar.gz BuildRoot: %{_tmppath}/autorpm-build/ aula_code_listings/chapter03/0040775000076500007650000000000007733417376015222 5ustar kirkkirkaula_code_listings/chapter03/distrib.sh0100664000076500007650000000174407733416643017215 0ustar kirkkirk#!/bin/bash # This file should have one account per line acct_list="$HOME/etc/accounts" # Files to copy copy_files='.vimrc .inputrc .bashrc .bash_profile .emacs' # Go to our home directory cd ~ do_account() { # $1 contains string "user@host" echo " ** $1 **" # Create ~/.ssh (if necessary), copy authorized_keys file ssh -T "$1" \ 'umask 077; mkdir -p ~/.ssh; cat > ~/.ssh/authorized_keys' \ < ~/.ssh/authorized_keys || { echo "Failed to create authorized_keys file on $1!" >&2 return 1 } # Now, copy other files over scp $copy_files "$1:~/" || { echo "Failed to copy files to $1!" >&2 return 1 } } for account in `cat "$acct_list"` ; do if [ -z "$*" ] ; then # No arguments specified, so do every host do_account $account else for arg ; do if [ "$arg" = "${account#*@}" ] ; then # Host was specified on command line do_account $account fi done fi done aula_code_listings/chapter03/gscp.sh0100664000076500007650000000155407733416643016510 0ustar kirkkirk#!/bin/bash # Directory containing host file(s) host_dir='/usr/local/etc/hosts/' # Check for required arguments [ $# -gt 2 ] || { echo "usage: $0 \"local file(s)\" remote_dir hostgroup ..." >&2 exit 1 } # Take the local and remote files off the parameter list lfile="$1" shift rdir="$1" shift # Place full paths to each hostfile in $hostfiles # This loop will loop once for each (remaining) parameter for hostfile ; do if [ -r "$host_dir/$hostfile" ] ; then hostfiles="$hostfiles $host_dir/$hostfile" else echo "INVALID GROUP: $hostfile" >&2 fi done # Make sure we actually have hosts to operate on [ -n "$hostfiles" ] || exit 1 # Execute the command(s) on each host for host in `sort $hostfiles | uniq` ; do echo " ** $host **" scp -r "$lfile" "$host:$rdir" || { echo "ERROR: Could not copy $lfile to $host:$rdir!" >&2 } done aula_code_listings/chapter03/gssh.sh0100664000076500007650000000145707733416643016522 0ustar kirkkirk#!/bin/bash # Directory containing host file(s) host_dir='/usr/local/etc/hosts/' # Check for required arguments [ $# -gt 1 ] || { echo "usage: $0 \"command(s)\" hostgroup ..." >&2 exit 1 } # Take the command(s) off of the parameter stack cmd="$1" shift # Place full paths to each hostfile in $hostfiles # This will loop once for every (remaining) argument for hostfile ; do if [ -r "$host_dir/$hostfile" ] ; then hostfiles="$hostfiles $host_dir/$hostfile" else echo "INVALID GROUP: $hostfile" >&2 fi done # Make sure we actually have hosts to operate on [ -n "$hostfiles" ] || exit 1 # Execute the command(s) on each host for host in `sort $hostfiles | uniq` ; do echo " ** $host **" ssh "$host" "$cmd" || { echo "ERROR: Could not execute $cmd on $host!" >&2 } done aula_code_listings/chapter03/mssh.sh0100664000076500007650000000057207733416643016525 0ustar kirkkirk#!/bin/bash # This file should have one host per line host_list='/usr/local/etc/all_hosts' # Check for required argument [ $# -gt 0 ] || { echo "usage: $0 command ..." >&2 exit 1 } # Execute the command(s) on each host for host in `cat "$host_list"` ; do echo " ** $host **" ssh "$host" "$@" || { echo "ERROR: Could not execute $* on $host!" >&2 } done aula_code_listings/chapter03/umount_function.sh0100644000076500007650000000056507733416643021007 0ustar kirkkirk# Turn on programmable completion shopt -s progcomp # umount(8) completion. This relies on the mount point being # the third space-delimited field in the output of mount(8) _umount() { local cur COMPREPLY=() cur=${COMP_WORDS[COMP_CWORD]} COMPREPLY=($(compgen -W '$( mount | cut -d" " -f 3 )' -- $cur)) return 0 } complete -F _umount -o dirnames umount aula_code_listings/chapter03/example_bashrc10100664000076500007650000000141007733417074020167 0ustar kirkkirk#!/bin/bash # This should go in your ~/.bashrc file # Define ANSI color sequences NORMAL="\[\033[0m\]" WHITE="\[\033[0;37;40m\]" MAGENTA="\[\033[0;35;40m\]" BRIGHTBLUE="\[\033[1;34;40m\]" BRIGHTWHITE="\[\033[1;37;40m\]" BRIGHTMAGENTA="\[\033[1;35;40m\]" # Find out if we are root if [ $UID -eq 0 ] ; then # The # character serves as an extra reminder that I am root SYM='#' else SYM='-' fi # Define the actual prompt # This is split up for easier reading within this book P1="$MAGENTA$SYM$BRIGHTMAGENTA-$BRIGHTBLUE($WHITE\u$MAGENTA@$WHITE" P2="\h$BRIGHTBLUE)$BRIGHTMAGENTA-$BRIGHTBLUE($BRIGHTWHITE\w$BRIGHTBLUE" P3=")$BRIGHTMAGENTA-$MAGENTA$SYM$NORMAL\n$MAGENTA$SYM$BRIGHTMAGENTA-" P4="$BRIGHTBLUE($BRIGHTWHITE\$?$BRIGHTBLUE)$MAGENTA>$NORMAL " PS1="$P1$P2$P3$P4" aula_code_listings/chapter03/example_bashrc20100664000076500007650000000131207733417212020163 0ustar kirkkirk#!/bin/bash # This should go in your ~/.bashrc file # Find out if we are root if [ $UID -eq 0 ] ; then # The # character serves as an extra reminder that I am root SYM='#' else SYM='-' fi # Define the actual prompt # This is split up for easier reading within this book P1="$(color magenta)$SYM$(color ltmagenta)-$(color ltblue)" P2="($(color white)\u$(color magenta)@$(color white)" P3="\h$(color ltblue))$(color ltmagenta)-$(color ltblue)" P4="($(color ltwhite)\w$(color ltblue))$(color ltmagenta)-" P5="$(color magenta)$SYM$(color off)\n$(color magenta)$SYM" P6="$(color ltmagenta)-$(color ltblue)($(color ltwhite)\$?" P7="$(color ltblue))$(color magenta)>$(color off) " PS1="$P1$P2$P3$P4$P5$P6$P7" aula_code_listings/chapter04/0040775000076500007650000000000007733424036015212 5ustar kirkkirkaula_code_listings/chapter04/components/0040775000076500007650000000000007733432627017404 5ustar kirkkirkaula_code_listings/chapter04/components/05allocate_ip.sh0100664000076500007650000000137407610313357022353 0ustar kirkkirk#!/bin/bash available_list="$data_dir/available" allocated_list="$data_dir/allocated" [ -s $available_list ] || { # File is empty or non-existent, return false echo "No IP Addresses Available ($available_list is empty!)" >&2 echo "false;" exit 1 } # Pick the first IP address from the available list ip_address="$(head -n1 $available_list)" # In addition, write the new available list tail +2 "$available_list" > "$available_list.new" && \ mv "$available_list.new" "$available_list" # Now, log the new allocation echo "$ip_address $new_hostname" >> "$allocated_list" # Display the IP address to the user echo "IP Address Allocated: $ip_address" >&2 # Finally, return the IP, and return true echo "export ip_address=$ip_address;" echo "true;" aula_code_listings/chapter04/components/00getmac.sh0100664000076500007650000000156707550324413021334 0ustar kirkkirk#!/bin/bash echo -n "Enter the system's MAC address (no colons!): " >&2 read mac_address # First, convert all letters to lowercase in $mac_address mac_address="$(echo $mac_address | tr 'A-Z' 'a-z')" # Next, make sure it contains exactly 12 valid characters if ! echo "$mac_address" | egrep -q '[0-9a-f]{12}' ; then echo "Invalid MAC address: $mac_address!" >&2 echo "false;" exit 1 fi # Finally, insert colons within the MAC address mac_address="$(echo $mac_address | sed \ 's/\(..\)\(..\)\(..\)\(..\)\(..\)\(..\)/\1:\2:\3:\4:\5:\6/')" # Make sure the MAC address has not already been specified if grep -q "^$mac_address " "$data_dir/macs" ; then echo "MAC address already exists: $mac_address" >&2 echo "false;" exit 1 fi # Record new hostname echo "$mac_address $new_hostname" >> "$data_dir/macs" echo "export mac_address=$mac_address;" echo "true;" exit 0 aula_code_listings/chapter04/components/10classify.sh0100664000076500007650000000151007613150557021704 0ustar kirkkirk#!/bin/bash host_dir='/usr/local/etc/hosts/' group_list='/usr/local/etc/group_list' host_list='/usr/local/etc/all_hosts' groups='' echo >&2 echo "Select one or more groups for this host (Q to quit):" >&2 select group in `cat $group_list` ; do if [ -n "$group" ] ; then groups="$group $groups" echo >&2 echo "Current List: $groups" >&2 echo >&2 else break fi done # Add to group files for group in $groups ; do # Make sure the host is not already in the group grep -q "^$new_hostname$" "$host_dir/$group" || { echo "$new_hostname" >> "$host_dir/$group" } done # Always add to "all_hosts" file echo "$new_hostname" >> "$host_list" echo >&2 echo "Host $new_hostname added to group(s): $groups" >&2 # Generate output data on STDOUT echo "export groups='$groups';" echo "true;" exit 0 aula_code_listings/chapter04/components/20hosts_file.sh0100664000076500007650000000027307550324776022242 0ustar kirkkirk#!/bin/bash hosts_file="/etc/hosts" echo "$ip_address $new_hostname" >> "$hosts_file" echo "Added $new_hostname to hosts file" >&2 # Indicate success on STDOUT echo "true;" exit 0 aula_code_listings/chapter04/components/30dhcp_config.pl0100664000076500007650000000175707616635046022356 0ustar kirkkirk#!/usr/bin/perl -w use strict; my $dhcpd_conf='/usr/local/etc/dhcpd.conf'; # Open up the input and output files open(IN, "$dhcpd_conf") or die "Could not open $dhcpd_conf: $!\n"; open(OUT, ">$dhcpd_conf.new") or die "Could not open $dhcpd_conf.new: $!\n"; # Now, go through the file, looking for } at beginning of line my $line; my $done = 0; while ($line = ) { if ((not $done) and ($line =~ /^\}/)) { # Found closing brace at beginning of line print OUT " host $ENV{'new_hostname'} {\n"; print OUT " hardware ethernet $ENV{'mac_address'};\n"; print OUT " fixed-address $ENV{'ip_address'};\n"; print OUT " }\n\n"; $done = 1; } # Always print the line out print OUT $line; } close(IN); close(OUT); # Copy the new file over unless (rename("$dhcpd_conf.new", $dhcpd_conf)) { die "Could not replace $dhcpd_conf: $!\n"; } print STDERR "$ENV{'new_hostname'} added to dhcpd.conf\n"; # Indicate success on STDOUT print "true;\n"; exit 0 aula_code_listings/chapter04/components/40dns_config.sh0100664000076500007650000000172607610313444022205 0ustar kirkkirk#!/bin/bash domain="sample.com" forward_zone="/usr/local/var/named/sample.com" rev_zone="/usr/local/var/named/hosts.rev" # This function requires that the serial number be on # a line by itself and followed by " ;serial" increment_serial() { [ -w "$1" ] || { echo "File $1 doesn't exist or is not writable!" >&2 return } awk '/;serial/ {print " " $1+1 " ;serial"} \ !/;serial/ {print $0}' "$1" > "$1.tmp" && \ mv "$1.tmp" "$1" } # First, increment the serial numbers increment_serial "$forward_zone" increment_serial "$rev_zone" # Determine reversed-ip rev_ip=`echo "$ip_address" | sed \ 's/^\(.*\)\.\(.*\)\.\(.*\)\.\(.*\)$/\4.\3.\2.\1.in-addr.arpa./'` # Now, add new entries echo "$new_hostname.$domain. IN A $ip_address" >> "$forward_zone" echo "$rev_ip IN PTR $new_hostname.$domain." >> "$rev_zone" echo "DNS entries created for $new_hostname ($ip_address)" >&2 # Indicate success on STDOUT echo "true;" exit 0 aula_code_listings/chapter04/components/15getcontact.sh0100664000076500007650000000033007610313760022220 0ustar kirkkirk#!/bin/bash echo -n "Enter the system's contact: " >&2 read contact # Record the contact echo "$new_hostname $mac_address $contact" >> "$data_dir/contacts" echo echo "export contact=$contact;" echo "true;" exit 0 aula_code_listings/chapter04/locking.example0100664000076500007650000000060607733424036020214 0ustar kirkkirk#!/bin/bash lockfile="/var/lock/myprogram" [ -f "$lockfile" ] && { pid="$(cat "$lockfile")" if ps $pid >/dev/null ; then # Still running echo "ABORTING: Another instance is running ($pid)" >&2 exit 1 else # No longer running, remove stale lockfile rm -f "$lockfile" fi } # We can proceed... write our PID into the lockfile echo "$$" > "$lockfile" aula_code_listings/chapter04/remove.sh0100664000076500007650000000221107613330607017031 0ustar kirkkirk#!/bin/bash component_dir="/usr/local/lib/remove_system/" export data_dir="/usr/local/var/prepare_system/" echo echo "Remove System" echo echo -n "Enter the system's hostname: " read -e old_hostname # Convert all letters to lowercase in $old_hostname # Be sure to export the variable for use by component scripts export old_hostname="$(echo $old_hostname | tr 'A-Z' 'a-z')" # Make sure the hostname *is* already listed if ! grep -q "^$old_hostname$" "$data_dir/hosts" 2>/dev/null ; then echo "Hostname does not exist: $old_hostname" >&2 exit 1 fi # Now, execute all component scripts for script in $component_dir/* ; do # Go to next file if this is a directory [ -d $script ] && continue # Go to next file if this is not executable [ -x $script ] || continue # Execute this script, execute its output, abort on failure eval `$script` || { echo "$script returned error" >&2 exit 1 } done # Remove the hostname from the host list grep -v "^$old_hostname$" "$data_dir/hosts" > "$data_dir/hosts.new" \ && mv "$data_dir/hosts.new" "$data_dir/hosts" echo echo "System removal complete for $old_hostname" echo exit 0 aula_code_listings/chapter04/rm_comps/0040775000076500007650000000000007733432627017036 5ustar kirkkirkaula_code_listings/chapter04/rm_comps/05take_ip.sh0100664000076500007650000000121507610313055021132 0ustar kirkkirk#!/bin/bash available_list="$data_dir/available" allocated_list="$data_dir/allocated" # We must find the IP address for other removal components [ -w "$allocated_list" ] && { ip_address=`cat "$allocated_list" | sed -n \ "s/^\([0-9][0-9.]*\) $old_hostname$/\1/p"` # Now, remove this IP from the allocated list egrep -v "^[0-9.]+ $old_hostname$" \ "$allocated_list" > "$allocated_list.new" && \ mv "$allocated_list.new" "$allocated_list" } # And add the IP back to the available list echo "$ip_address" >> "$available_list" # Finally, return the IP, and return true echo "export ip_address=$ip_address;" echo "true;" aula_code_listings/chapter04/rm_comps/30dhcp_config.pl0100664000076500007650000000161007616635106021771 0ustar kirkkirk#!/usr/bin/perl -w use strict; my $dhcpd_conf = '/usr/local/etc/dhcpd.conf'; my $host = "$ENV{'old_hostname'}"; # Open up the input and output files open(IN, "$dhcpd_conf") or die "Could not open $dhcpd_conf: $!\n"; open(OUT, ">$dhcpd_conf.new") or die "Could not open $dhcpd_conf.new: $!\n"; # Now, go through the file, looking for deleted host my $line; LOOP: while ($line = ) { if ($line =~ /host\s+$host\s+{/) { # Found the host we are removing while ($line = ) { # Loop through file until closing brace found # near beginning of line next LOOP if ($line =~ /^\s+}/); } } # Print other lines out print OUT $line; } close(IN); close(OUT); # Copy the new file over the original unless (rename("$dhcpd_conf.new", $dhcpd_conf)) { die "Could not replace $dhcpd_conf: $!\n"; } # Indicate success on STDOUT print "true;\n"; exit 0 aula_code_listings/chapter04/rm_comps/20hosts_file.sh0100664000076500007650000000053407616635312021666 0ustar kirkkirk#!/bin/bash hosts_file="/etc/hosts" [ -w "$hosts_file" ] && { # First, create the new file with the same permissions cp -p "$hosts_file" "$hosts_file.new" grep -v "^$ip_address *$old_hostname$" \ "$hosts_file" > "$hosts_file.new" && \ mv "$hosts_file.new" "$hosts_file" } # Indicate success on STDOUT echo "true;" exit 0 aula_code_listings/chapter04/rm_comps/15rmcontact.sh0100664000076500007650000000035007610313015021504 0ustar kirkkirk#!/bin/bash # Now, remove the contact entry for this host egrep -v "^$old_hostname $mac_address" \ "$data_dir/contacts" > "$data_dir/contacts.new" && \ mv "$data_dir/contacts.new" "$data_dir/contacts" echo "true;" exit 0 aula_code_listings/chapter04/rm_comps/40dns_config.sh0100664000076500007650000000237407616635436021655 0ustar kirkkirk#!/bin/bash domain="sample.com" forward_zone="/usr/local/var/named/sample.com" rev_zone="/usr/local/var/named/hosts.rev" # This function requires that the serial number be on # a line by itself and followed by " ;serial" increment_serial() { [ -w "$1" ] || { echo "File $1 doesn't exist or is not writable" >&2 return } awk '/;serial/ {print " " $1+1 " ;serial"} \ !/;serial/ {print $0}' "$1" > "$1.tmp" && \ mv "$1.tmp" "$1" } # First, increment the serial numbers increment_serial "$forward_zone" increment_serial "$rev_zone" # Determine reversed-ip rev_ip=`echo "$ip_address" | sed \ 's/^\(.*\)\.\(.*\)\.\(.*\)\.\(.*\)$/\4.\3.\2.\1.in-addr.arpa./'` # Now, remove entries [ -w "$forward_zone" ] && { # First, copy original file, to preserve permissions cp -p "$forward_zone" "$forward_zone.new" egrep -v "^$old_hostname\.$domain\. +IN A $ip_address" \ "$forward_zone" > "$forward_zone.new" && \ mv "$forward_zone.new" "$forward_zone" } [ -w "$rev_zone" ] && { cp -p "$rev_zone" "$rev_zone.new" egrep -v "^$rev_ip +IN PTR $old_hostname\.$domain\." \ "$rev_zone" > "$rev_zone.new" && \ mv "$rev_zone.new" "$rev_zone" } # Indicate success on STDOUT echo "true;" exit 0 aula_code_listings/chapter04/rm_comps/00rmmac.sh0100664000076500007650000000072207610313044020610 0ustar kirkkirk#!/bin/bash # We must find the MAC address for other removal components mac_address=`cat "$data_dir/macs" | sed -n \ "s/^\([0-9a-f:]\+\) $old_hostname$/\1/p"` # Now, remove this host from the MAC listing egrep -v "^[0-9a-f:]+ $old_hostname$" \ "$data_dir/macs" > "$data_dir/macs.new" && \ mv "$data_dir/macs.new" "$data_dir/macs" # Return the MAC address in case other components need it echo "export mac_address=$mac_address;" echo "true;" exit 0 aula_code_listings/chapter04/rm_comps/10declassify.sh0100664000076500007650000000053307610313100021631 0ustar kirkkirk#!/bin/bash host_dir='/usr/local/etc/hosts/' host_list='/usr/local/etc/all_hosts' # Remove this host from any groups it might be in cd $host_dir for file in * $host_list ; do if [ -f $file ] ; then grep -v "^$old_hostname$" $file > $file.new && \ mv $file.new $file fi done # Indicate success on STDOUT echo "true;" exit 0 aula_code_listings/chapter04/prepare.sh0100664000076500007650000000237107613144052017176 0ustar kirkkirk#!/bin/bash set -u component_dir="/usr/local/lib/prepare_system/" export data_dir="/usr/local/var/prepare_system/" echo echo "New System Preparation" echo echo -n "Enter the system's hostname: " read -e new_hostname # First, convert all letters to lowercase in $new_hostname # Be sure to export the variable for use by component scripts export new_hostname="$(echo $new_hostname | tr 'A-Z' 'a-z')" # Make sure the hostname contains only valid characters if ! echo "$new_hostname" | egrep -q '^[0-9a-z_-]+$' ; then echo "Invalid hostname: $new_hostname" >&2 exit 1 fi # Make sure the hostname is not already in use if grep -q "^$new_hostname$" "$data_dir/hosts" 2>/dev/null ; then echo "Hostname already exists: $new_hostname" >&2 exit 1 fi # Record the new hostname echo "$new_hostname" >> "$data_dir/hosts" # Now, execute all component scripts for script in $component_dir/* ; do # Go to next file if this is a directory [ -d $script ] && continue # Go to next file if this is not executable [ -x $script ] || continue # Execute this script, execute its output, abort on failure eval `$script` || { echo "$script returned error" >&2 exit 1 } done echo echo "System preparation complete for $new_hostname" echo exit 0 aula_code_listings/chapter06/0040775000076500007650000000000007733422701015211 5ustar kirkkirkaula_code_listings/chapter06/cfagent.conf0100664000076500007650000000130207733422701017460 0ustar kirkkirkcontrol: actionsequence = ( files directories tidy disable processes ) domain = ( mydomain.com ) timezone = ( EDT EST ) access = ( root ) # Where cfexecd sends reports smtpserver = ( mail.mydomain.com ) sysadm = ( root@mydomain.com ) files: /etc/passwd mode=644 owner=root action=fixall /etc/shadow mode=600 owner=root action=fixall /etc/group mode=644 owner=root action=fixall directories: /tmp mode=1777 owner=root group=root tidy: /tmp recurse=inf age=7 rmdirs=sub disable: /root/.rhosts /etc/hosts.equiv processes: "cfservd" restart "/var/cfengine/bin/cfservd" "cfexecd" restart "/var/cfengine/bin/cfexecd" aula_code_listings/chapter06/functions.sh0100664000076500007650000000352707733422266017567 0ustar kirkkirk# Abort the program, displaying an error die() { echo " ERROR: $*" >&2 exit 1 } # arg1: full path of configuration file to read read_conf() { if [ -f "$1" ] ; then source "$1" || die "Could not source $1" echo " Processed Config: $1" fi return 0 } # arg1: full path of local source file # arg2: full path of local destination file do_template() { local src="$1" local dest="$2" [ -z "$src" -o -z "$dest" ] && die "do_template called with empty parameter(s) ($*)" # Process the template sed 's/\\/\\\\\\\\/g; s/"/\\\\"/g;' "$src" | while read line; do eval echo "\"$line\""; done > "$dest" || die "Could not process template $src" echo " Processed Template: $(basename "$src")" } # arg1: full path of local source file # arg2: hostname of remote system # arg3: [optional] destination file on remote system push_file() { local src="$1" local host="$2" local dest="$3" [ -z "$src" -o -z "$host" ] && die "push_file called with missing parameter(s) ($*)" # Read configuration items from file eval `sed -n 's/^__://p' "$src"` # Override location if necessary [ -n "$dest" ] && LOCATION="$dest" # Push the file now grep -v '^__:' "$src" | ssh -T "root@$host" "cat > $LOCATION" || die "Could not place remote file $LOCATION" # Set the permissions, if necessary [ -n "$PERMS" ] && ssh "root@$host" "chmod $PERMS $LOCATION" || die "Could not set permissions on remote file $LOCATION" # Set the ownership, if necessary [ -n "$USERGROUP" ] && ssh "root@$host" \ "chown $USERGROUP $LOCATION" || die "Could not set permissions on remote file $LOCATION" [ -z "$dest" ] && { # Only produce output if third arg was not given # (third arg is given when pushing scripts to execute) echo " Pushed File: $LOCATION" } } aula_code_listings/chapter06/config_all_systems.sh0100664000076500007650000000162107733421745021435 0ustar kirkkirk#!/bin/bash # This file should have one host per line host_list="/usr/local/etc/all_hosts" # This is the script that configures each host configure_system="/usr/local/sbin/configure_system.sh" # Process each host success_count=0 failure_count=0 failure_list='' for host in `cat $host_list` ; do echo if $configure_system "$host" ; then echo " Host $host Configuration Successful!" success_count="$[$success_count+1]" else echo " Host $host Configuration FAILED!" failure_count="$[$failure_count+1]" failure_list="$failure_list $host" fi done # Display summary echo echo "Total of $[$success_count+$failure_count] systems processed:" echo " $success_count Success(es)" echo " $failure_count Failure(s)" echo [ -n "$failure_list" ] && { echo "$failure_count host(s) failed:" for host in $failure_list ; do echo " $host" done exit 1 } exit 0 aula_code_listings/chapter06/configure_system.sh0100664000076500007650000000336507733421745021145 0ustar kirkkirk#!/bin/bash # The base directory host_dir='/usr/local/etc/hosts' base_dir='/usr/local/etc/sysconfig' source '/usr/local/sbin/configure.functions' # Specify any necessary options for ssh here alias ssh="/usr/bin/ssh" [ $# -lt 1 ] && die "Usage: $0 host" host="$1" echo "Configuring host $host:" # We need a safe local and remote temp file localtemp=`mktemp /tmp/sysconfig-XXXXXX` || die "Could not create local temp file" remotetemp=`ssh $host 'mktemp /tmp/sysconfig-XXXXXX'` || die "Could not create remote temp file" # First, retrieve group list for the host cd "$host_dir" || die "Host directory $host_dir not found" groups="$(grep -l "^$host$" *)" # Read settings for this host read_conf "$base_dir/conf/all" for group in $groups ; do read_conf "$base_dir/conf/groups/$group" done read_conf "$base_dir/conf/systems/$host" # Now, push out any necessary files for dir in all $groups ; do for file in "$base_dir/files/$dir/"* ; do if [ -f "$file" ] ; then push_file "$file" "$host" fi done done # Next, push out any necessary templates for dir in all $groups ; do for file in "$base_dir/templates/$dir/"* ; do if [ -f "$file" ] ; then do_template "$file" "$localtemp" push_file "$localtemp" "$host" fi done done # Finally, execute any necessary scripts for dir in all $groups ; do for file in "$base_dir/scripts/$dir/"* ; do if [ -f "$file" ] ; then push_file "$file" "$host" "$remotetemp" ssh "root@$host" "chmod u+x $remotetemp ; $remotetemp" || die "Execution of script $(basename "$file") failed" echo " Executed Script: $(basename "$file")" fi done done # Clean up rm -f "$localtemp" ssh "root@$host" "rm -f $remotetemp" exit 0 aula_code_listings/chapter06/update.conf0100664000076500007650000000217207733422636017350 0ustar kirkkirkcontrol: actionsequence = ( copy tidy ) domain = ( mydomain.com ) workdir = ( /var/cfengine ) policyhost = ( server.mydomain.com ) master_cfinput = ( /usr/local/var/cfengine/inputs ) cf_install_dir = ( /usr/local/sbin ) copy: $(cf_install_dir)/cfagent dest=$(workdir)/bin/cfagent mode=755 type=checksum $(cf_install_dir)/cfservd dest=$(workdir)/bin/cfservd mode=755 type=checksum $(cf_install_dir)/cfexecd dest=$(workdir)/bin/cfexecd mode=755 type=checksum $(master_cfinput) dest=$(workdir)/inputs r=inf mode=644 type=binary exclude=*.lst exclude=*~ exclude=#* server=$(policyhost) tidy: $(workdir)/outputs pattern=* age=7 aula_code_listings/chapter09/0040775000076500007650000000000007733427756015233 5ustar kirkkirkaula_code_listings/chapter09/data/0040775000076500007650000000000007733432627016135 5ustar kirkkirkaula_code_listings/chapter09/data/shell.sh0100664000076500007650000000027407544737421017600 0ustar kirkkirk#!/bin/bash onlyaction 'adduser' echo "Select a shell:" >&2 select shell in `sort $shell_file` ; do [ -n "$shell" ] && break done echo >&2 echo "shell='$shell';" echo 'true;' exit 0 aula_code_listings/chapter09/data/getuid.pl0100664000076500007650000000156407575111415017747 0ustar kirkkirk#!/usr/bin/perl -w use strict; # Only need to allocate a UID/GID if adding a new user if ($ENV{'action'} ne 'adduser') { print "true;"; exit 0; } my @IDs; my @files = ( $ENV{'passwd_file'}, $ENV{'yp_passwd_file'}, $ENV{'group_file'}, $ENV{'yp_group_file'} ); foreach my $file (@files) { next unless $file; unless (open (FILE, $file)) { print STDERR "Can't open $file: $!\n"; print "false;\n"; exit 1; } while (my $line = ) { if ($line =~ (/^[^:]+:[^:]*:(\d+):/)) { $IDs[$1] = 1; } } close (FILE); } for (my $i = $ENV{'min_uid'}; $i <= $ENV{'max_uid'}; $i++) { if ($IDs[$i]) { print STDERR "\nAllocated UID/GID: $i\n\n"; print "newid=$i;"; print "true;"; exit 0; } } print STDERR "Out of UIDs (min=$ENV{'min_uid'}, max=$ENV{'max_uid'})\n"; print "false;"; exit 1; aula_code_listings/chapter09/data/fullname.sh0100664000076500007650000000020707544737421020270 0ustar kirkkirk#!/bin/bash onlyaction 'adduser' fullname=`getvalue "Enter full name for $username"` echo "fullname='$fullname';" echo 'true;' exit 0 aula_code_listings/chapter09/data/extragroups.sh0100664000076500007650000000056407544737421021056 0ustar kirkkirk#!/bin/bash onlyaction 'adduser' export PS3="Enter group ('q' to quit): " extragroups='' [ -n "$optional_groups" ] && { echo "Select one or more extra groups:" >&2 select group in $optional_groups ; do [ -z "$group" ] && break extragroups="$extragroups $group" done } echo >&2 echo "extragroups='$extragroups $default_groups';" echo 'true;' exit 0 aula_code_listings/chapter09/data/homedir.sh0100664000076500007650000000300107733427376020114 0ustar kirkkirk#!/bin/bash if [ "$action" == "deluser" ] ; then echo "homedir='$(eval echo ~$username)';" echo 'true;' exit 0 fi dirlist='' if [ "$show_space" == "1" ] ; then # Determine available space on each drive for entry in $home_dirs ; do space=` if echo "$entry" | grep -q ':' ; then host=$(echo "$entry" | sed 's/:.*$//') dir=$(echo "$entry" | sed 's/^.*://') if [ "$use_ssh" == "1" ] ; then if ! ssh -T $host "df -m $dir" ; then echo "WARNING: Could not access $dir on $host" >&2 fi else if ! mount -t nfs "$host:$dir" /mnt/tmp ; then echo "WARNING: Could not mount $dir from $host" >&2 fi df -m /mnt/tmp umount /mnt/tmp fi else # Local directory df -m $entry fi 2>/dev/null | awk '/^\// {print $4}' ` [ -z "$space" ] && { space='??' } if [ -z "$dirlist" ] ; then dirlist="$entry ($space MB avail)" else dirlist="$dirlist|$entry ($space MB avail)" fi done else # Just display the drives dirlist=`echo "$home_dirs" | sed 's/ /|/g'` fi homedir='' IFS="|" while [ -z "$homedir" ] ; do select homedir in $dirlist ; do if [ -n "$homedir" ] ; then homedir=`echo "$homedir" | sed 's/ (.*$//'` break fi done done unset IFS echo >&2 echo "homedir='$homedir';" echo 'true;' exit 0 aula_code_listings/chapter09/data/aliases.sh0100664000076500007650000000047007544737421020110 0ustar kirkkirk#!/bin/bash onlyaction 'adduser' aliases='' echo >&2 while true ; do echo -n "Enter mail alias [leave blank when done]: " >&2 read -e value if [ -n "$value" ] ; then aliases="$aliases $value" else echo >&2 break fi done echo >&2 echo "aliases='$aliases';" echo 'true;' exit 0 aula_code_listings/chapter09/mod/0040775000076500007650000000000007733432627016003 5ustar kirkkirkaula_code_listings/chapter09/mod/aliases.sh0100664000076500007650000000071107616636066017757 0ustar kirkkirk#!/bin/bash add_alias() { echo "Adding mail alias for $username: $1" echo "$1: $username" >> "$alias_file" } if [ "$action" == "deluser" ] ; then cp -p "$alias_file" "$alias_file.new" sed "/: *$username$/d" "$alias_file" > "$alias_file.new" && \ mv "$alias_file.new" "$alias_file" else # Always add first.last alias add_alias `echo "$fullname" | sed 's/ /./g'` for alias in $aliases ; do add_alias "$alias" done fi aula_code_listings/chapter09/mod/automount.sh0100664000076500007650000000056207613327570020367 0ustar kirkkirk#!/bin/bash [ -n "$automount_file" ] && { if [ "$action" == "deluser" ] ; then echo "Removing entry from $automount_file..." remove_line "^$username" "$automount_file" else if echo "$homedir" | grep -q ':' ; then echo "Adding entry to $automount_file..." echo "$username $homedir:$username" >> $automount_file fi fi } aula_code_listings/chapter09/mod/basic.sh0100664000076500007650000000217007544226133017406 0ustar kirkkirk#!/bin/bash # Determine which password & group files pwfile="$yp_passwd_file" [ -z "$pwfile" ] && { pwfile="$passwd_file" } gfile="$yp_group_file" [ -z "$gfile" ] && { gfile="$group_file" } if [ "$action" == "deluser" ] ; then echo "Removing entry from $pwfile..." remove_line "^$username:" "$pwfile" echo "Removing entry from $gfile..." remove_line "^$username:" "$gfile" [ -n "$shadow_file" ] && { echo "Removing entry from $shadow_file..." remove_line "^$username:" "$shadow_file" } else # Determine home directory (either automounted or not) if [ -z "$automount_dir" ] ; then home="$automount_dir/$username" else home="$homedir" fi echo "Creating entry in $pwfile..." echo "$username:*:$newid:$newid:$fullname:$home:$shell" \ >> $pwfile echo "Creating entry in $gfile..." echo "$username:*:$newid:$username" >> $gfile # Create shadow entry, if applicable [ -n "$shadow_file" ] && { # Creation of the shadow entry is OS-dependent echo "Creating entry in $shadow_file..." echo "$username:*::::::" >> $shadow_file } fi exit 0 aula_code_listings/chapter09/mod/extragroups.sh0100664000076500007650000000231707616636166020726 0ustar kirkkirk#!/bin/bash # Determine group file gfile="$yp_group_file" [ -z "$gfile" ] && { gfile="$group_file" } if [ "$action" == "deluser" ] ; then echo "Removing $username from all groups" cp -p "$gfile" "$gfile.new" sed -e "s/:$username,/:/" \ -e "s/:$username$/:/" \ -e "s/,$username//" \ "$gfile" > "$gfile.new" && \ mv "$gfile.new" "$gfile" else [ -n "$extragroups" ] && { for group in $extragroups ; do if grep -q "^$group:" "$gfile" ; then echo "Adding $username to group $group" cp -p "$gfile" "$gfile.new" if sed -e "s/^$group:.*[^:]$/&,$username/" \ -e "s/^$group:.*:$/&$username/" \ "$gfile" > "$gfile.new" ; then mv "$gfile.new" "$gfile" else die "Could not add $username to group $group" fi else # Doesn't exist yet, find ID and create entry echo "Creating new group $group for $username" eval `$component_dir/data/getuid.pl` || \ die "Could not allocate ID for new group $group" echo "$group:*:$newid:$username" >> $gfile fi done } fi exit 0 aula_code_listings/chapter09/mod/homedir.sh0100664000076500007650000000234607575111415017761 0ustar kirkkirk#!/bin/bash if echo "$homedir" | grep -q ':' ; then host=$(echo "$homedir" | sed 's/:.*$//') dir=$(echo "$homedir" | sed 's/^.*://') if [ "$use_ssh" == "1" ] ; then if [ "$action" == "deluser" ] ; then ssh -T $host "mv $dir/$username $dir/deleted-$username" else ssh -T $host "cp -r $skel_dir $dir/$username" && \ ssh -T $host "chown -R $username.$username $dir/$username" \ || die "Could not create $dir on $host via SSH" fi else if ! mount -t nfs "$host:$dir" /mnt/tmp ; then die "Could not mount $dir from $host" fi if [ "$action" == "deluser" ] ; then mv /mnt/tmp/$username /mnt/tmp/deleted-$username else cp -r "$skel_dir" "/mnt/tmp/$username" && \ chown -R $username.$username "/mnt/tmp/$username" || \ die "Could not create home directory in $dir on $host" fi umount /mnt/tmp fi else # Local directory if [ "$action" == "deluser" ] ; then mv $homedir/$username $homedir/deleted-$username else cp -r $skel_dir $homedir/$username && \ chown -R $username.$username $homedir/$username || \ die "Could not create home directory in $homedir" fi fi exit 0 aula_code_listings/chapter09/mod/zupdate.sh0100664000076500007650000000011207544512520017771 0ustar kirkkirk#!/bin/bash if [ -n "$yp_passwd_file" ] ; then cd /var/yp make fi aula_code_listings/chapter09/mod/zzpasswords.sh0100664000076500007650000000034607544512520020737 0ustar kirkkirk#!/bin/bash onlyaction 'adduser' echo echo "Setting account password..." if [ -n "$yp_passwd_file" ] ; then yppasswd $username else passwd $username fi echo echo "Setting Samba password..." smbpasswd -a $username exit 0 aula_code_listings/chapter09/filecheck.sh0100664000076500007650000000106007575111415017460 0ustar kirkkirk#!/bin/bash TMPDIR=~/tmp WARNTIME=30 RMTIME=60 SIZE="500k" USERS=`awk -F: '{if ($3 >= 500) print $1}' /etc/passwd` # Find files to warn about for user in $USERS ; do homedir=`eval echo ~$user` find $homedir -atime +$WARNTIME -type f -size $SIZE -print \ > $TMPDIR/$user [ -s "$TMPDIR/$user" ] && { # Some files were found mail -s 'SCHEDULED FOR DELETION!!' "$user" < "$TMPDIR/$user" } rm -f "$TMPDIR/$user" done # Now, delete any files that are old enough find $homedir -atime +$RMTIME -type f -size $SIZE -exec rm -f {} \; aula_code_listings/chapter09/full-user-delete.sh0100664000076500007650000000142107733427755020737 0ustar kirkkirk#!/bin/bash dohost() { if echo "$1" | grep -q ':' ; then host=$(echo "$1" | sed 's/:.*$//') if [ "$use_ssh" == "1" ] ; then ssh -T $host "bash -" else dir=$(echo "$hostdir" | sed 's/^.*://') if ! mount -t nfs "$host:$dir" /mnt/tmp ; then die "Could not mount $dir from $host" fi bash - umount /mnt/tmp fi else bash - fi } source /usr/local/etc/usertool.conf for hostdir in $home_dirs ; do dir=$(echo "$hostdir" | sed 's/^.*://') if [ "$use_ssh" != "1" ] ; then dir="/mnt/tmp" fi echo "Checking $hostdir..." dohost $hostdir << __EOF__ for entry in `find $dir -type d -name 'deleted-*' -mtime +30 -print` do rm -rf \$entry; done __EOF__ done exit 0 aula_code_listings/chapter09/usertool.sh0100664000076500007650000000510407733427120017421 0ustar kirkkirk#!/bin/bash # Args: pattern file remove_line() { cp -p "$2" "$2.new" && \ egrep -v "$1" "$2" > "$2.new" && \ mv "$2.new" "$2" } export -f remove_line onlyaction() { [ "$action" == "$1" ] || { echo 'true;' exit 0 } } export -f onlyaction # Args: message [default_value] getvalue() { value='' echo >&2 while [ -z "$value" ] ; do if [ -n "$2" ] ; then echo -n "$1 [$2]: " >&2 read -e value if [ -z "$value" ] ; then value="$2" fi else echo -n "$1: " >&2 read -e value fi done echo >&2 # Return the value on STDOUT echo "$value" } export -f getvalue die() { echo >&2 echo "$*" >&2 echo >&2 exit 1 } export -f die set -a source /usr/local/etc/usertool.conf usage() { echo "Usage: $0 [username]" 2>/dev/null exit 99; } [ "$1" == "--help" ] && usage username="$1" if [ -z "$username" ] ; then username=`getvalue 'Enter the username'` fi # Make sure the username contains only valid characters if ! echo "$username" | egrep -q '^[0-9a-zA-Z_-]+$' ; then die "Invalid username: $username" fi action=$(basename $0) if [ "$action" == "adduser" ] ; then # Make sure the username is not already in use if grep -q "^$username$" "$data_dir/userlist" 2>/dev/null ; then die "User already exists: $username" fi # Record the new username echo "$username" >> "$data_dir/userlist" elif [ "$action" == "deluser" ] ; then # Make sure the username exists if ! grep -q "^$username$" "$data_dir/userlist" 2>/dev/null ; then die "User does not exist: $username" fi else die "Unknown action: $action" fi # Returns all scripts from a directory get_scripts() { for script in $1/* ; do # Go to next file if this is a directory [ -d $script ] && continue # Go to next file if this is not executable [ -x $script ] || continue # Good, return this script on STDOUT echo $script done } # Now, execute all data-gathering scripts for script in `get_scripts $component_dir/data` ; do # Execute this script, execute its output, abort on failure eval `$script` || die "$script returned error" done # Now, execute all modification scripts for script in `get_scripts $component_dir/mod` ; do # Execute this script, execute its output, abort on failure $script || die "$script returned error" done if [ "$action" == "deluser" ] ; then # Remove the username from the user list remove_line "^$username$" "$data_dir/userlist" fi echo echo "Action $action for $username has been completed" echo exit 0 aula_code_listings/chapter09/usertool.conf0100664000076500007650000000100507545676611017744 0ustar kirkkirkcomponent_dir='/usr/local/lib/usertool/' data_dir='/usr/local/var/usertool/' skel_dir='/usr/local/etc/skel' passwd_file='/etc/passwd' yp_passwd_file='/etc/passwd.yp' group_file='/etc/group' yp_group_file='/etc/group.yp' shadow_file='/etc/shadow' shell_file='/etc/shells' min_uid=500 max_uid=32000 default_groups='public' optional_groups='dev cvs web' home_dirs='/export/home server2:/export/home server3:/export/home' use_ssh=1 show_space=1 automount_dir=/home automount_file=/etc/auto.home alias_file='/etc/aliases' aula_code_listings/chapter11/0040775000076500007650000000000007734702364015214 5ustar kirkkirkaula_code_listings/chapter11/firewall-setup0100664000076500007650000000415707733432671020106 0ustar kirkkirk#!/bin/bash confdir=/usr/local/etc/firewall thishost=`hostname | cut -d'.' -f1` [ -r "$confdir/$thishost.conf" ] || { # Exit if no configuration file for this host exists echo "No firewall configuration for host: $thishost" exit 0 } source $confdir/global.conf source $confdir/$thishost.conf # Determine this system's external IP address IPADDR=`ifconfig $iface | awk '/inet addr/ {print $2}' | cut -d: -f2` # Flush all chains, delete user-defined chains, and clear counters iptables -F ; iptables -X ; iptables -Z # We want to drop all packets by default iptables -P INPUT DROP iptables -P FORWARD DROP iptables -P OUTPUT DROP # Do not allow spoofed packets (external packets with our IP) iptables -A INPUT -i $iface -s $IPADDR -j DROP # Don't allow external packets coming from the loopback net iptables -A INPUT -i $iface -d 127.0.0.1/8 -j DROP # Now, allow all traffic on the loopback interface iptables -A INPUT -i lo -j ACCEPT iptables -A OUTPUT -o lo -j ACCEPT # Allow certain ICMP packets iptables -A INPUT -i $iface -p icmp -m state \ --state ESTABLISHED,RELATED -j ACCEPT iptables -A OUTPUT -o $iface -p icmp -m state \ --state NEW,ESTABLISHED,RELATED -j ACCEPT # Allow any connections initiated from this system iptables -A OUTPUT -o $iface -p tcp -m state \ --state NEW,ESTABLISHED -j ACCEPT iptables -A INPUT -i $iface -p tcp -m state \ --state ESTABLISHED -j ACCEPT iptables -A OUTPUT -o $iface -p udp -m state \ --state NEW,ESTABLISHED -j ACCEPT iptables -A INPUT -i $iface -p udp -m state \ --state ESTABLISHED -j ACCEPT # Now, allow traffic from trusted hosts for trusted in $trusted_hosts ; do for service in $trusted_tcp ; do echo "Allowing $service TCP traffic from $trusted" iptables -A INPUT -i $iface -p tcp -s $trusted -d $IPADDR \ --dport $service -m state --state NEW,ESTABLISHED -j ACCEPT done done # Allow traffic to select ports from anywhere for service in $in_tcp ; do echo "Allowing all incoming $service TCP traffic" iptables -A INPUT -i $iface -p tcp -d $IPADDR --dport $service \ -m state --state NEW,ESTABLISHED -j ACCEPT done aula_code_listings/chapter11/groups0100664000076500007650000000067107734702362016455 0ustar kirkkirksource $confdir/global.conf host_dir='/usr/local/etc/hosts/' thishost=`hostname | cut -d'.' -f1` # Load configuration for our group(s) for group in $host_dir/* ; do grep -q "^$thishost$" "$group" && { # This host is part of this group, so load group config config="$confdir/$(basename $group).conf" [ -r "$config" ] && source $config } done [ -r "$confdir/$thishost.conf" ] && \ source $confdir/$thishost.conf