1 rizwank 1.2 #!/bin/sh
 2             
 3             #Audit Script - grabs useful info and packs it away
 4             #(c) Rizwan Kassim 2005
 5             
 6             mkdir /tmp/audit_ait
 7             cd /tmp/audit_ait
 8             touch $HOSTNAME.overall.log
 9             echo "########## HOSTNAME, uname, w, whoami, id" >> $HOSTNAME.overall.log
10             echo $HOSTNAME >> $HOSTNAME.overall.log
11             uname -a >> $HOSTNAME.overall.log
12             w >> $HOSTNAME.overall.log
13             id >> $HOSTNAME.overall.log
14             echo "######### df mounts"
15             df >> $HOSTNAME.overall.log
16             touch $HOSTNAME.network.log

17 rizwank 1.3 echo "######### Network settings - netstat,services,chkconfig,ifconfig" >> $HOSTNAME.network.log

18 rizwank 1.4 netstat -an >> $HOSTNAME.network.log

19 rizwank 1.3 services --status-all >> $HOSTNAME.network.log
20             chkconfig --list >> $HOSTNAME.network.log
21             ps -aux >> $HOSTNAME.tasklist.log
22             ifconfig >> $HOSTNAME.network.log
23             echo "######## cronlist + cron jobs" >> $HOSTNAME.overall.log
24             crontab -l >> $HOSTNAME.overall.log
25             echo "## crontabs in var" >> $HOSTNAME.overall.log
26             cat /var/spool/cron/* >> $HOSTNAME.overall.log
27             ls /etc/cron* >> $HOSTNAME.overall.log
28             cp -r /etc/cron* .

29 rizwank 1.5 du -b --max-depth=5 / > $HOSTNAME.dudir.log

30 rizwank 1.3 /etc/cron.daily/rpm
31             cp /var/logs/rpm* .

32 rizwank 1.4 cp /etc/grou* .
33             cp /etc/gsh* .
34             tar -cvf $HOSTNAME

35 rizwank 1.2