linux服务器巡检通用脚本--hostpolling.sh

#!/bin/bash
#authon:lijinping
#create data:2020-02-24
#主机信息每日巡检01版

IpList=KaTeX parse error: Double superscript at position 33: …c-10 | tr -d ' '̲ | tr -s '\n') …(ifconfig ens3|grep ‘’| awk '{print KaTeX parse error: Expected 'EOF', got '}' at position 2: 2}̲') #IP=(for i in I p L i s t ; d o e c h o − n " {IpList};do echo -n " IpList;doechon"i:ifconfig $i|grep '\'| awk '{print $2}' ;";done)
IP=$(ip addr | awk ‘/1+: / {}; /inet.global/ {print gensub(/(.)/(.*)/, “\1”, “g”, $2)}’)
#环境变量PATH没设好,在cron里执行时有很多命令会找不到
export PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin:/root/bin
source /etc/profile

######################################################################
PLATFORM=/bin/uname

[ $(id -u) -gt 0 ] && echo “请用root用户执行此脚本!” && exit 1
centosVersion=cat /etc/redhat-release | awk '{print $(NF-1)}' |awk -F "." '{print $1}'
VERSION=date +%F

echo “############################自动巡检开始############################”
#日志相关
PROGPATH=echo $0 | sed -e 's,[\\/][^\\/][^\\/]*$,,'
[ -f KaTeX parse error: Expected 'EOF', got '&' at position 12: PROGPATH ] &̲& PROGPATH="." …PROGPATH/log"
[ -e $LOGPATH ] || mkdir L O G P A T H R E S U L T F I L E = " LOGPATH RESULTFILE=" LOGPATHRESULTFILE="LOGPATH/HostDailyCheck-$IP-date +%Y%m%d.txt"

case $PLATFORM in
Linux)
MPSTAT=‘mpstat 1 3’
VMSTAT=‘vmstat 1 3’
IOSTAT=‘iostat -d -x -k 1 5’
SAR=‘sar 2 10’
;;
esac

#定义报表的全局变量
report_DateTime="" #日期 ok
report_Hostname="" #主机名 ok
report_OSRelease="" #发行版本 ok
report_Kernel="" #内核 ok
report_Language="" #语言/编码 ok
report_LastReboot="" #最近启动时间 ok
report_Uptime="" #运行时间(天) ok
report_CPUs="" #CPU数量 ok
report_CPUType="" #CPU类型 ok
report_Arch="" #CPU架构 ok
report_MemTotal="" #内存总容量(MB) ok
report_MemFree="" #内存剩余(MB) ok
report_MemUsedPercent="" #内存使用率% ok
report_DiskTotal="" #硬盘总容量(GB) ok
report_DiskFree="" #硬盘剩余(GB) ok
report_DiskUsedPercent="" #硬盘使用率% ok
report_InodeTotal="" #Inode总量 ok
report_InodeFree="" #Inode剩余 ok
report_InodeUsedPercent="" #Inode使用率 ok
report_IP="" #IP地址 ok
report_MAC="" #MAC地址 ok
report_Gateway="" #默认网关 ok
report_DNS="" #DNS ok
report_Listen="" #监听 ok
report_Selinux="" #Selinux ok
report_Firewall="" #防火墙 ok
report_USERs="" #用户 ok
report_USEREmptyPassword="" #空密码用户 ok
report_USERTheSameUID="" #相同ID的用户 ok
report_PasswordExpiry="" #密码过期(天) ok
report_RootUser="" #root用户 ok
report_Sudoers="" #sudo授权 ok
report_SSHAuthorized="" #SSH信任主机 ok
report_SSHDProtocolVersion="" #SSH协议版本 ok
report_SSHDPermitRootLogin="" #允许root远程登录 ok
report_DefunctProsess="" #僵尸进程数量 ok
report_SelfInitiatedService="" #自启动服务数量 ok
report_SelfInitiatedProgram="" #自启动程序数量 ok
report_RuningService="" #运行中服务数 ok
report_Crontab="" #计划任务数 ok
report_Syslog="" #日志服务 ok
report_SNMP="" #SNMP OK
report_NTP="" #NTP ok
report_JDK="" #JDK版本 ok
function version(){
echo “”
echo “”
echo " 巡检主机:IPADDR $IP"
echo “系统巡检脚本:Version $VERSION”
}

function getCpuStatus(){
echo “”
echo “”
echo “############################ CPU检查 #############################”
Physical_CPUs= ( g r e p " p h y s i c a l i d " / p r o c / c p u i n f o ∣ s o r t ∣ u n i q ∣ w c − l ) V i r t C P U s = (grep "physical id" /proc/cpuinfo| sort | uniq | wc -l) Virt_CPUs= (grep"physicalid"/proc/cpuinfosortuniqwcl)VirtCPUs=(grep “processor” /proc/cpuinfo | wc -l)
CPU_Kernels=$(grep “cores” /proc/cpuinfo|uniq| awk -F ': ’ '{print KaTeX parse error: Expected 'EOF', got '}' at position 2: 2}̲') CPU_Type…(grep “model name” /proc/cpuinfo | awk -F ': ’ '{print KaTeX parse error: Expected 'EOF', got '}' at position 2: 2}̲' | sort | uniq…(uname -m)
echo “物理CPU个数: P h y s i c a l C P U s " e c h o " 逻 辑 C P U 个 数 : Physical_CPUs" echo "逻辑CPU个数: PhysicalCPUs"echo"CPU:Virt_CPUs”
echo “每CPU核心数: C P U K e r n e l s " e c h o " C P U 型 号 : CPU_Kernels" echo " CPU型号: CPUKernels"echo"CPU:CPU_Type”
echo " CPU架构:KaTeX parse error: Expected 'EOF', got '#' at position 15: CPU_Arch" #̲报表信息 report…Virt_CPUs #CPU数量
report_CPUType=KaTeX parse error: Expected 'EOF', got '#' at position 11: CPU_Type #̲CPU类型 repor…CPU_Arch #CPU架构
}

function getMemStatus(){
echo “”
echo “”
echo “############################ 内存检查 ############################”
if [[ KaTeX parse error: Expected 'EOF', got '#' at position 80: … -h fi #̲报表信息 MemTot…(grep MemTotal /proc/meminfo| awk '{print KaTeX parse error: Expected 'EOF', got '}' at position 2: 2}̲') #KB Mem…(grep MemFree /proc/meminfo| awk '{print KaTeX parse error: Expected 'EOF', got '}' at position 2: 2}̲') #KB l…(awk “BEGIN {if(KaTeX parse error: Can't use function '\"' in math mode at position 37: …00}else{printf \̲"̲%.2f\",MemUsed100/KaTeX parse error: Expected 'EOF', got '}' at position 9: MemTotal}̲}") report_…((MemTotal/1024))"“MB” #内存总容量(MB)
report_MemFree="KaTeX parse error: Expected 'EOF', got '#' at position 32: …""MB" #̲内存剩余(MB) re…(awk "BEGIN {if(KaTeX parse error: Can't use function '\"' in math mode at position 37: …00}else{printf \̲"̲%.2f\",MemUsed
100/KaTeX parse error: Expected 'EOF', got '}' at position 9: MemTotal}̲}")""%" #内存使用…report_MemTotal”
echo " 内存剩余: r e p o r t M e m F r e e " e c h o " 内 存 使 用 率 : report_MemFree" echo "内存使用率: reportMemFree"echo"使report_MemUsedPercent"
}

function getDiskStatus(){
echo “”
echo “”
echo “############################ 磁盘检查 ############################”
df -hiP | sed ‘s/Mounted on/Mounted/’> /tmp/inode
df -hTP | sed ‘s/Mounted on/Mounted/’> /tmp/disk
join /tmp/disk /tmp/inode | awk '{print $1,$2,"|",$3,$4,$5,$6,"|",$8,$9,$10,$11,"|",KaTeX parse error: Expected 'EOF', got '}' at position 3: 12}̲'| column -t …(df -TP | sed ‘1d’ | awk 'KaTeX parse error: Expected 'EOF', got '#' at position 21: …mpfs"{print}') #̲KB disktota…(echo “$diskdata” | awk '{total+=KaTeX parse error: Expected 'EOF', got '}' at position 2: 3}̲END{print total…(echo “$diskdata” | awk '{total+=KaTeX parse error: Expected 'EOF', got '}' at position 2: 4}̲END{print total…((disktotal-diskused)) #KB
diskusedpercent=$(echo $disktotal $diskused | awk '{if($10){printf 100}else{printf “%.2f”,$2*100/KaTeX parse error: Expected 'EOF', got '}' at position 2: 1}̲}';echo "") …(df -iTP | sed ‘1d’ | awk ' 2 ! = " t m p f s " p r i n t ′ ) i n o d e t o t a l = 2!="tmpfs"{print}') inodetotal= 2!="tmpfs"print)inodetotal=(echo “$inodedata” | awk '{total+=KaTeX parse error: Expected 'EOF', got '}' at position 2: 3}̲END{print total…(echo “$inodedata” | awk '{total+=KaTeX parse error: Expected 'EOF', got '}' at position 2: 4}̲END{print total…((inodetotal-inodeused))
inodeusedpercent=$(echo $inodetotal $inodeused | awk '{if($1
0){printf 100}else{printf “%.2f”,$2*100/KaTeX parse error: Expected 'EOF', got '}' at position 2: 1}̲}') report_…((disktotal/1024/1024))“GB” #硬盘总容量(GB)
report_DiskFree=KaTeX parse error: Expected 'EOF', got '#' at position 32: …1024))"GB" #̲硬盘剩余(GB) re…diskusedpercent""%" #硬盘使用率%
report_InodeTotal=KaTeX parse error: Expected 'EOF', got '#' at position 30: …000))"K" #̲Inode总量 rep…((inodefree/1000))“K” #Inode剩余
report_InodeUsedPercent=" i n o d e u s e d p e r c e n t " " e c h o " " e c h o " − − − − − − − − − − − − − − − − − − − − − − − − − − − − " e c h o " 硬 盘 总 容 量 : inodeusedpercent""%" #Inode使用率% echo "" echo "----------------------------" echo " 硬盘总容量: inodeusedpercent""echo""echo""echo"report_DiskTotal "
echo " 硬盘剩余: r e p o r t D i s k F r e e " e c h o " 硬 盘 使 用 率 : report_DiskFree " echo " 硬盘使用率: reportDiskFree"echo"使report_DiskUsedPercent "
echo “”
echo " Inode总量: r e p o r t I n o d e T o t a l " e c h o " I n o d e 剩 余 : report_InodeTotal " echo " Inode剩余: reportInodeTotal"echo"Inodereport_InodeFree "
echo "Inode使用率:$report_InodeUsedPercent "
}

function getSystemStatus(){
echo “”
echo “”
echo “############################ 系统检查 ############################”
if [ -e /etc/sysconfig/i18n ];then
default_LANG="$(grep “LANG=” /etc/sysconfig/i18n | grep -v “^#” | awk -F ‘"’ '{print KaTeX parse error: Expected 'EOF', got '}' at position 2: 2}̲')" else …LANG
fi
export LANG=“en_US.UTF-8”
Release= ( c a t / e t c / r e d h a t − r e l e a s e 2 > / d e v / n u l l ) K e r n e l = (cat /etc/redhat-release 2>/dev/null) Kernel= (cat/etc/redhatrelease2>/dev/null)Kernel=(uname -r)
OS= ( u n a m e − o ) H o s t n a m e = (uname -o) Hostname= (unameo)Hostname=(uname -n)
SELinux=$(/usr/sbin/sestatus | grep “SELinux status: " | awk '{print KaTeX parse error: Expected 'EOF', got '}' at position 2: 3}̲') LastRebo…(who -b | awk '{print $3,KaTeX parse error: Expected 'EOF', got '}' at position 2: 4}̲') uptime=(uptime | sed ‘s/.up ([^,]), .*/\1/’)
echo " 系统: O S " e c h o " 发 行 版 本 : OS" echo " 发行版本: OS"echo"Release”
echo " 内核: K e r n e l " e c h o " 主 机 名 : Kernel" echo " 主机名: Kernel"echo"Hostname"
echo " SELinux: S E L i n u x " e c h o " 语 言 / 编 码 : SELinux" echo "语言/编码: SELinux"echo"/default_LANG"
echo " 当前时间: ( d a t e + ′ e c h o " 最 后 启 动 : (date +'%F %T')" echo " 最后启动: (date+echo"LastReboot"
echo " 运行时间:KaTeX parse error: Expected 'EOF', got '#' at position 13: uptime" #̲报表信息 report…(date +"%F %T") #日期
report_Hostname=“KaTeX parse error: Expected 'EOF', got '#' at position 17: …ostname" #̲主机名 report_…Release” #发行版本
report_Kernel=“KaTeX parse error: Expected 'EOF', got '#' at position 19: …nel" #̲内核 report_L…default_LANG” #语言/编码
report_LastReboot=“KaTeX parse error: Expected 'EOF', got '#' at position 15: LastReboot" #̲最近启动时间 repo…uptime” #运行时间(天)
report_Selinux=“ S E L i n u x " e x p o r t L A N G = " SELinux" export LANG=" SELinux"exportLANG="default_LANG”

}

function getServiceStatus(){
echo “”
echo “”
echo “############################ 服务检查 ############################”
echo “”
if [[ c e n t o s V e r s i o n − g e 7 ] ] ; t h e n c o n f = centosVersion -ge 7 ]];then conf= centosVersionge7]];thenconf=(systemctl list-unit-files --type=service --state=enabled --no-pager | grep “enabled”)
process=KaTeX parse error: Expected 'EOF', got '#' at position 92: …vice") #̲报表信息 re…(echo "KaTeX parse error: Expected 'EOF', got '#' at position 23: … wc -l)" #̲自启动服务数量 …(echo "KaTeX parse error: Expected 'EOF', got '#' at position 30: …-l)" #̲运行中服务数量 els…(/sbin/chkconfig | grep -E “:on|:启用”)
process=KaTeX parse error: Expected 'EOF', got '#' at position 78: …正在运行") #̲报表信息 re…(echo "KaTeX parse error: Expected 'EOF', got '#' at position 23: … wc -l)" #̲自启动服务数量 …(echo “KaTeX parse error: Expected 'EOF', got '#' at position 30: …-l)" #̲运行中服务数量 fi …report_SelfInitiatedService”
echo “--------”
echo “ c o n f " ∣ c o l u m n − t e c h o " " e c h o " 正 在 运 行 的 服 务 总 数 : conf" | column -t echo "" echo "正在运行的服务总数: conf"columntecho""echo"report_RuningService”
echo “--------------”
echo “$process”

}

function getAutoStartStatus(){
echo “”
echo “”
echo “############################ 自启动检查 ##########################”
conf=KaTeX parse error: Expected group after '^' at position 11: (grep -v "^̲#" /etc/rc.d/rc…/d’)
echo “KaTeX parse error: Expected 'EOF', got '#' at position 11: conf" #̲报表信息 report…(echo KaTeX parse error: Expected 'EOF', got '#' at position 19: …f | wc -l)" #̲自启动程序数量 ech…report_SelfInitiatedProgram”
}

function getLoginStatus(){
echo “”
echo “”
echo “############################ 登录检查 ############################”
last | head
}

function getNetworkStatus(){
echo “”
echo “”
echo “############################ 网络检查 ############################”
if [[ $centosVersion < 7 ]];then
/sbin/ifconfig -a | grep -v packets | grep -v collisions | grep -v inet6
else
#ip a
for i in $(ip link | grep BROADCAST | awk -F: ‘{print $2}’);do ip add show $i | grep -E “BROADCAST|global”| awk '{print KaTeX parse error: Expected 'EOF', got '}' at position 2: 2}̲' | tr '\n' ' '…(ifconfig ens3|grep ‘’| awk '{print KaTeX parse error: Expected 'EOF', got '}' at position 2: 4}̲') NETMASK=(for i in i p l i s t ; d o e c h o − n " {iplist};do echo -n " iplist;doechon"i:ifconfig $i|grep '\'| awk '{print $4}' ;";done)
GATEWAY=$(ip route | grep default | awk '{print KaTeX parse error: Expected 'EOF', got '}' at position 2: 3}̲') DNS=(grep nameserver /etc/resolv.conf| grep -v “#” | awk ‘{print KaTeX parse error: Expected 'EOF', got '}' at position 2: 2}̲' | tr '\n' ','…//’)
MAC=$(ip link | grep -v “LOOPBACK|loopback” | awk ‘{print KaTeX parse error: Expected 'EOF', got '}' at position 2: 2}̲' | sed 'N;s/\n…//’;echo “”)
echo “”
echo “子网掩码: N E T M A S K " e c h o " 网 关 : NETMASK" echo "网关: NETMASK"echo"GATEWAY "
echo “DNS:$DNS”
echo “MAC: KaTeX parse error: Expected 'EOF', got '#' at position 10: MAC" #̲报表信息 #repor…IP” #IP地址
report_IP=$(for i in i p l i s t ; d o e c h o − n " {iplist};do echo -n " iplist;doechon"i:ifconfig $i|grep '\'| awk '{print $2}' ;”;done)
report_MAC=KaTeX parse error: Expected 'EOF', got '#' at position 16: MAC #̲MAC地址 repor…GATEWAY" #默认网关
report_DNS="$DNS" #DNS
}

function getListenStatus(){
echo “”
echo “”
echo “############################ 监听检查 ############################”
TCPListen= ( s s − n t u l ∣ c o l u m n − t ) e c h o " (ss -ntul | column -t) echo " (ssntulcolumnt)echo"TCPListen"
#报表信息
report_Listen=“ ( e c h o " (echo " (echo"TCPListen”| sed ‘1d’ | awk ‘/tcp/ {print $5}’ | awk -F: '{print KaTeX parse error: Expected 'EOF', got '}' at position 3: NF}̲' | sort | uniq…report_Listen"
}

function getCronStatus(){
echo “”
echo “”
echo “############################ 计划任务检查 ########################”
Crontab=0
for shell in $(grep -v “/sbin/nologin” /etc/shells);do
for user in ( g r e p " (grep " (grep"shell" /etc/passwd| awk -F: ‘{print $1}’);do
crontab -l -u KaTeX parse error: Expected 'EOF', got '&' at position 19: …r >/dev/null 2>&̲1 s…?
if [ s t a t u s − e q 0 ] ; t h e n e c h o " status -eq 0 ];then echo " statuseq0];thenecho"user"
echo “--------”
crontab -l -u KaTeX parse error: Expected 'EOF', got '#' at position 84: …e done #̲报表信息 report…Crontab" #计划任务数
}
function getHowLongAgo(){
# 计算一个时间戳离现在有多久了
datetime=“ ∗ " [ − z " *" [ -z " "[z"datetime” ] && echo "错误的参数:getHowLongAgo() ∗ " T i m e s t a m p = *" Timestamp= "Timestamp=(date +%s -d “KaTeX parse error: Expected 'EOF', got '#' at position 15: datetime") #̲转化为时间戳 Now_…(date +%s)
Difference_Timestamp= ( ( (( ((Now_Timestamp- T i m e s t a m p ) ) d a y s = 0 ; h o u r s = 0 ; m i n u t e s = 0 ; s e c i n d a y = Timestamp)) days=0;hours=0;minutes=0; sec_in_day= Timestamp))days=0;hours=0;minutes=0;secinday=((606024));
sec_in_hour=$((60*60));
sec_in_minute=60
while (( ( ( (( ((Difference_Timestamp-$sec_in_day)) > 1 ))
do
let Difference_Timestamp=Difference_Timestamp-sec_in_day
let days++
done
while (( ( ( (( ((Difference_Timestamp- s e c i n h o u r ) ) > 1 ) ) d o l e t D i f f e r e n c e T i m e s t a m p = D i f f e r e n c e T i m e s t a m p − s e c i n h o u r l e t h o u r s + + d o n e e c h o " sec_in_hour)) > 1 )) do let Difference_Timestamp=Difference_Timestamp-sec_in_hour let hours++ done echo " secinhour))>1))doletDifferenceTimestamp=DifferenceTimestampsecinhourlethours++doneecho"days 天 $hours 小时前”
}

function getUserLastLogin(){
username=$1
: u s e r n a m e : = " ‘ w h o a m i ‘ " t h i s Y e a r = {username:="`whoami`"} thisYear= username:="whoami"thisYear=(date +%Y)
oldesYear=$(last | tail -n1 | awk ‘{print $NF}’)
while(( $thisYear >= o l d e s Y e a r ) ) ; d o l o g i n B e f o r e T o d a y = oldesYear));do loginBeforeToday= oldesYear));dologinBeforeToday=(last $username | grep u s e r n a m e ∣ w c − l ) l o g i n B e f o r e N e w Y e a r s D a y O f T h i s Y e a r = username | wc -l) loginBeforeNewYearsDayOfThisYear= usernamewcl)loginBeforeNewYearsDayOfThisYear=(last $username -t $thisYear"0101000000" | grep $username | wc -l)
if [ $loginBeforeToday -eq 0 ];then
echo “从未登录过”
break
elif [ $loginBeforeToday -gt l o g i n B e f o r e N e w Y e a r s D a y O f T h i s Y e a r ] ; t h e n l a s t D a t e T i m e = loginBeforeNewYearsDayOfThisYear ];then lastDateTime= loginBeforeNewYearsDayOfThisYear];thenlastDateTime=(last -i KaTeX parse error: Expected '}', got 'EOF' at end of input: …++)printf"%s ",i}’)" KaTeX parse error: Expected 'EOF', got '#' at position 11: thisYear" #̲格式如: Sat Nov 2 …(date “+%Y-%m-%d %H:%M:%S” -d “ l a s t D a t e T i m e " ) e c h o " lastDateTime") echo " lastDateTime")echo"lastDateTime”
break
else
thisYear=$((thisYear-1))
fi
done

}

function getUserStatus(){
echo “”
echo “”
echo “############################ 用户检查 ############################”
#/etc/passwd 最后修改时间
pwdfile=" ( c a t / e t c / p a s s w d ) " M o d i f y = (cat /etc/passwd)" Modify= (cat/etc/passwd)"Modify=(stat /etc/passwd | grep Modify | tr ‘.’ ’ ’ | awk ‘{print $2,$3}’)

echo "/etc/passwd 最后修改时间:$Modify ($(getHowLongAgo $Modify))"
echo ""
echo "特权用户"
echo "--------"
RootUser=""
for user in $(echo "$pwdfile" | awk -F: '{print $1}');do
    if [ $(id -u $user) -eq 0 ];then
        echo "$user"
        RootUser="$RootUser,$user"
    fi
done
echo ""
echo "用户列表"
echo "--------"
USERs=0
echo "$(
echo "用户名 UID GID HOME SHELL 最后一次登录"
for shell in $(grep -v "/sbin/nologin" /etc/shells);do
    for username in $(grep "$shell" /etc/passwd| awk -F: '{print $1}');do
        userLastLogin="$(getUserLastLogin $username)"
        echo "$pwdfile" | grep -w "$username" |grep -w "$shell"| awk -F: -v lastlogin="$(echo "$userLastLogin" | tr ' ' '_')" '{print $1,$3,$4,$6,$7,lastlogin}'
    done
    let USERs=USERs+$(echo "$pwdfile" | grep "$shell"| wc -l)
done
)" | column -t
echo ""
echo "空密码用户"
echo "----------"
USEREmptyPassword=""
for shell in $(grep -v "/sbin/nologin" /etc/shells);do
        for user in $(echo "$pwdfile" | grep "$shell" | cut -d: -f1);do
        r=$(awk -F: '$2=="!!"{print $1}' /etc/shadow | grep -w $user)
        if [ ! -z $r ];then
            echo $r
            USEREmptyPassword="$USEREmptyPassword,"$r
        fi
    done    
done
echo ""
echo "相同ID的用户"
echo "------------"
USERTheSameUID=""
UIDs=$(cut -d: -f3 /etc/passwd | sort | uniq -c | awk '$1>1{print $2}')
for uid in $UIDs;do
    echo -n "$uid";
    USERTheSameUID="$uid"
    r=$(awk -F: 'ORS="";$3=='"$uid"'{print ":",$1}' /etc/passwd)
    echo "$r"
    echo ""
    USERTheSameUID="$USERTheSameUID $r,"
done

}

function getPasswordStatus {
echo “”
echo “”
echo “############################ 密码检查 ############################”
pwdfile="$(cat /etc/passwd)"
echo “”
echo “密码过期检查”
echo “------------”
result=""
for shell in $(grep -v “/sbin/nologin” /etc/shells);do
for user in ( e c h o " (echo " (echo"pwdfile" | grep " s h e l l " ∣ c u t − d : − f 1 ) ; d o g e t e x p i r y d a t e = shell" | cut -d: -f1);do get_expiry_date= shell"cutd:f1);dogetexpirydate=(/usr/bin/chage -l $user | grep ‘Password expires’ | cut -d: -f2)
if [[ $get_expiry_date = ’ never’ || $get_expiry_date = ‘never’ ]];then
printf “%-15s 永不过期\n” u s e r r e s u l t = " user result=" userresult="result, u s e r : n e v e r " e l s e p a s s w o r d e x p i r y d a t e = user:never" else password_expiry_date= user:never"elsepasswordexpirydate=(date -d “ g e t e x p i r y d a t e " " + c u r r e n t d a t e = get_expiry_date" "+%s") current_date= getexpirydate""+currentdate=(date “+%s”)
diff= ( ( (( ((password_expiry_date- c u r r e n t d a t e ) ) l e t D A Y S = current_date)) let DAYS= currentdate))letDAYS=(($diff/(606024)))
printf “%-15s %s天后过期\n” $user D A Y S r e s u l t = " DAYS result=" DAYSresult="result, u s e r : user: user:DAYS days”
fi
done
done
report_PasswordExpiry=$(echo $result | sed ‘s/^,//’)

echo ""
echo "密码策略检查"
echo "------------"
grep -v "#" /etc/login.defs | grep -E "PASS_MAX_DAYS|PASS_MIN_DAYS|PASS_MIN_LEN|PASS_WARN_AGE"

}

function getSudoersStatus(){
echo “”
echo “”
echo “############################ Sudoers检查 #########################”
conf=KaTeX parse error: Expected group after '^' at position 11: (grep -v "^̲#" /etc/sudoers…/d’)
echo “KaTeX parse error: Expected 'EOF', got '#' at position 23: … echo "" #̲报表信息 report…(echo $conf | wc -l)”
}

function getInstalledStatus(){
echo “”
echo “”
echo “############################ 软件检查 ############################”
echo “最近安装的十个软件”
rpm -qa --last | head | column -t
}

function getProcessStatus(){
echo “”
echo “”
echo “############################ 进程检查 ############################”
if [ $(ps -ef | grep defunct | grep -v grep | wc -l) -ge 1 ];then
echo “”
echo “僵尸进程”;
echo “--------”
ps -ef | head -n1
ps -ef | grep defunct | grep -v grep
fi
echo “”
echo “内存占用TOP10”
echo “-------------”
echo -e “PID %MEM RSS COMMAND
$(ps aux | awk '{print $2, $4, $6, KaTeX parse error: Expected 'EOF', got '}' at position 3: 11}̲' | sort -k3rn …(ps -ef | grep defunct | grep -v grep|wc -l)”
echo “”
echo “僵尸进程”
echo “------------”
echo “$report_DefunctProsess 个”
}

function getJDKStatus(){
echo “”
echo “”
echo “############################ JDK检查 #############################”
java -version 2>/dev/null
if [ KaTeX parse error: Expected 'EOF', got '&' at position 40: …ava -version 2>&̲1 fi ec…JAVA_HOME""
#报表信息
report_JDK="$(java -version 2>&1 | grep version | awk '{print $1,KaTeX parse error: Expected 'EOF', got '}' at position 2: 3}̲' | tr -d '"')"…report_JDK"
}

function getState(){
if [[ $centosVersion < 7 ]];then
if [ -e “/etc/init.d/$1” ];then
if [ /etc/init.d/$1 status 2>/dev/null | grep -E "is running|正在运行" | wc -l -ge 1 ];then
r=“active”
else
r=“inactive”
fi
else
r=“unknown”
fi
else
#CentOS 7+
r="$(systemctl is-active KaTeX parse error: Expected 'EOF', got '&' at position 5: 1 2>&̲1)" fi …r"
}

function getSSHStatus(){
#SSHD服务状态,配置,受信任主机等
echo “”
echo “”
echo “############################ SSH检查 #############################”
#检查受信任主机
pwdfile=" ( c a t / e t c / p a s s w d ) " e c h o " 服 务 状 态 : (cat /etc/passwd)" echo "服务状态: (cat/etc/passwd)"echo"(getState sshd)"
Protocol_Version=$(cat /etc/ssh/sshd_config | grep Protocol | awk '{print KaTeX parse error: Expected 'EOF', got '}' at position 2: 2}̲') echo "SS…Protocol_Version"
echo “”
echo “信任主机”
echo “--------”
authorized=0
for user in ( e c h o " (echo " (echo"pwdfile" | grep /bin/bash | awk -F: '{print KaTeX parse error: Expected 'EOF', got '}' at position 2: 1}̲');do a…(echo “$pwdfile” | grep -w $user | awk -F: '{printf KaTeX parse error: Expected 'EOF', got '}' at position 25: …uthorized_keys"}̲') auth…(cat $authorize_file 2>/dev/null | awk ‘{print KaTeX parse error: Expected 'EOF', got '}' at position 2: 3}̲' | tr '\n' ','…//’)
if [ ! -z a u t h o r i z e d h o s t ] ; t h e n e c h o " authorized_host ];then echo " authorizedhost];thenecho"user 授权 "KaTeX parse error: Can't use function '\"' in math mode at position 16: authorized_host\̲"̲ 无密码访问" …(cat $authorize_file 2>/dev/null | awk ‘{print $3}’|wc -l)
done

echo ""
echo "是否允许ROOT远程登录"
echo "--------------------"
config=$(cat /etc/ssh/sshd_config | grep PermitRootLogin)
firstChar=${config:0:1}
if [ $firstChar == "#" ];then
    PermitRootLogin="yes"  #默认是允许ROOT远程登录的
else
    PermitRootLogin=$(echo $config | awk '{print $2}')
fi
echo "PermitRootLogin $PermitRootLogin"


#报表信息
report_SSHAuthorized="$authorized"    #SSH信任主机
report_SSHDProtocolVersion="$Protocol_Version"    #SSH协议版本
report_SSHDPermitRootLogin="$PermitRootLogin"    #允许root远程登录

}
function getNTPStatus(){
#NTP服务状态,当前时间,配置等
echo “”
echo “”
echo “############################ NTP检查 #############################”
if [ -e /etc/ntp.conf ];then
echo “服务状态: ( g e t S t a t e n t p d ) " f i e c h o " 系 统 当 前 时 间 : (getState ntpd)" fi echo "系统当前时间: (getStatentpd)"fiecho"(date +”%Y-%m-%d %H:%M:%S")"
#报表信息
report_NTP="$(getState ntpd)"
}

$MPSTAT > /dev/null 2>&1
if [ KaTeX parse error: Expected 'EOF', got '#' at position 67: … echo "#̲###############…{RESULTFILE}
M P S T A T > > MPSTAT>> MPSTAT>>{RESULTFILE}
echo “” >> ${RESULTFILE}
MEMFOUND=1
else
echo “Warning… MPSTAT not found on your system.”
MEMFOUND=0
fi

$VMSTAT > /dev/null 2>&1
if [ KaTeX parse error: Expected 'EOF', got '#' at position 67: … echo "#̲###############…{RESULTFILE}
V M S T A T > > VMSTAT>> VMSTAT>>{RESULTFILE}
echo “” >> ${RESULTFILE}
MEMFOUND=1
else
echo “Warning… VMSTAT not found on your system.”
MEMFOUND=0
fi

$IOSTAT > /dev/null 2>&1
if [ KaTeX parse error: Expected 'EOF', got '#' at position 67: … echo "#̲###############…{RESULTFILE}
I O S T A T > > IOSTAT>> IOSTAT>>{RESULTFILE}
echo “” >> ${RESULTFILE}
MEMFOUND=1
else
echo “Warning… IOSTAT not found on your system.”
MEMFOUND=0
fi

$SAR > /dev/null 2>&1
if [ KaTeX parse error: Expected 'EOF', got '#' at position 64: … echo "#̲###############…{RESULTFILE}
S A R > > SAR>> SAR>>{RESULTFILE}
echo “” >> ${RESULTFILE}
MEMFOUND=1
else
echo “Warning… SAR not found on your system.”
MEMFOUND=0
fi

function check(){
version
echo “############################ 系统检查 ############################”
getSystemStatus
echo “############################ CPU检查 #############################”
getCpuStatus
echo “############################ 内存检查 ############################”
getMemStatus
echo “############################ 磁盘检查 ############################”
getDiskStatus
echo “############################ 网络检查 ############################”
getNetworkStatus
echo “############################ 监听检查 ############################”
getListenStatus
echo “############################ 进程检查 ############################”
getProcessStatus
echo “############################ 服务检查 ############################”
getServiceStatus
echo “############################ 自启动检查 ##########################”
getAutoStartStatus
echo “############################ 登录检查 ############################”
getLoginStatus
echo “############################ 计划任务检查 ########################”
getCronStatus
echo “############################ 用户检查 ############################”
getUserStatus
echo “############################ 密码检查 ############################”
getPasswordStatus
echo “############################ Sudoers检查 #########################”
getSudoersStatus
echo “############################ JDK检查 #############################”
getJDKStatus
echo “############################ SSH检查 #############################”
getSSHStatus
echo “############################ NTP检查 #############################”
getNTPStatus
echo “############################ 软件检查 ############################”
getInstalledStatus
}

#执行检查并保存检查结果
check >> $RESULTFILE

echo “############################自动巡检结束############################”


  1. 0-9 ↩︎

你可能感兴趣的:(巡检类,linux,shell)