Linux 系统日常巡检脚本

最新推荐文章于 2024-10-24 17:30:51 发布
最新推荐文章于 2024-10-24 17:30:51 发布
阅读量1.6k 收藏
点赞数 1
分类专栏： linux 文章标签： linux bash 服务器
版权声明：本文为博主原创文章，遵循 CC 4.0 BY-SA 版权协议，转载请附上原文出处链接和本声明。
本文链接：https://blog.csdn.net/qq_23930765/article/details/121891365
版权

Linux 系统日常巡检脚本，巡检内容包含了，磁盘，内存 cpu 进程 文件更改 用户登录等一系列的操作 直接用就行了。

报告以邮件发送到邮箱 在log下生成巡检报告。

#!/bin/bash

@Author: HanWe

@Date: 2020-03-16 09:56:57

@Last Modified by: HanWe

@Last Modified time: 2020-03-16 11:06:31

@E-mail: han_wei_9@163.com

#!/bin/bash
#主机信息每日巡检

IPADDR=$(ifconfig eth0|grep ‘inet addr’|awk -F ‘[ :]’ ‘{print $13}’)
#环境变量PATH没设好，在cron里执行时有很多命令会找不到
export PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin:/root/bin
source /etc/profile

[ KaTeX parse error: Expected 'EOF', got '&' at position 17: …id -u) -gt 0 ] &̲& echo "请用root用…(awk ‘{print $(NF-1)}’ /etc/redhat-release)
VERSION=“2020-03-16”

#日志相关
PROGPATH=echo $0 | sed -e 's,[\\/][^\\/][^\\/]*$,,'
[ -f KaTeX parse error: Expected 'EOF', got '&' at position 12: PROGPATH ] &̲& PROGPATH="." …PROGPATH/log"
[ -e $LOGPATH ] || mkdir L O G P A T H R E S U L T F I L E = " LOGPATH RESULTFILE=" LOGPATHRESULTFILE="LOGPATH/HostDailyCheck-$IPADDR-date +%Y%m%d.txt"

#定义报表的全局变量
report_DateTime="" #日期 ok
report_Hostname="" #主机名 ok
report_OSRelease="" #发行版本 ok
report_Kernel="" #内核 ok
report_Language="" #语言/编码 ok
report_LastReboot="" #最近启动时间 ok
report_Uptime="" #运行时间（天） ok
report_CPUs="" #CPU数量 ok
report_CPUType="" #CPU类型 ok
report_Arch="" #CPU架构 ok
report_MemTotal="" #内存总容量(MB) ok
report_MemFree="" #内存剩余(MB) ok
report_MemUsedPercent="" #内存使用率% ok
report_DiskTotal="" #硬盘总容量(GB) ok
report_DiskFree="" #硬盘剩余(GB) ok
report_DiskUsedPercent="" #硬盘使用率% ok
report_InodeTotal="" #Inode总量 ok
report_InodeFree="" #Inode剩余 ok
report_InodeUsedPercent="" #Inode使用率 ok
report_IP="" #IP地址 ok
report_MAC="" #MAC地址 ok
report_Gateway="" #默认网关 ok
report_DNS="" #DNS ok
report_Listen="" #监听 ok
report_Selinux="" #Selinux ok
report_Firewall="" #防火墙 ok
report_USERs="" #用户 ok
report_USEREmptyPassword="" #空密码用户 ok
report_USERTheSameUID="" #相同ID的用户 ok
report_PasswordExpiry="" #密码过期（天） ok
report_RootUser="" #root用户 ok
report_Sudoers="" #sudo授权 ok
report_SSHAuthorized="" #SSH信任主机 ok
report_SSHDProtocolVersion="" #SSH协议版本 ok
report_SSHDPermitRootLogin="" #允许root远程登录 ok
report_DefunctProsess="" #僵尸进程数量 ok
report_SelfInitiatedService="" #自启动服务数量 ok
report_SelfInitiatedProgram="" #自启动程序数量 ok
report_RuningService="" #运行中服务数 ok
report_Crontab="" #计划任务数 ok
report_Syslog="" #日志服务 ok
report_SNMP="" #SNMP OK
report_NTP="" #NTP ok
report_JDK="" #JDK版本 ok
function version(){
echo “”
echo “”
echo “系统巡检脚本：Version $VERSION”
}

function getCpuStatus(){
echo “”
echo “”
echo “############################ CPU检查 #############################”
Physical_CPUs= ( g r e p " p h y s i c a l i d " / p r o c / c p u i n f o ∣ s o r t ∣ u n i q ∣ w c − l ) V i r t C P U s = (grep "physical id" /proc/cpuinfo| sort | uniq | wc -l) Virt_CPUs= (grep"physicalid"/proc/cpuinfo∣sort∣uniq∣wc−l)VirtC​PUs=(grep “processor” /proc/cpuinfo | wc -l)
CPU_Kernels=$(grep “cores” /proc/cpuinfo|uniq| awk -F ': ’ '{print KaTeX parse error: Expected 'EOF', got '}' at position 2: 2}̲') CPU_Type=(grep “model name” /proc/cpuinfo | awk -F ': ’ '{print KaTeX parse error: Expected 'EOF', got '}' at position 2: 2}̲' | sort | uniq…(uname -m)
echo “物理CPU个数: P h y s i c a l C P U s " e c h o " 逻 辑 C P U 个 数 : Physical_CPUs" echo "逻辑CPU个数: PhysicalC​PUs"echo"逻辑CPU个数:Virt_CPUs”
echo “每CPU核心数: C P U K e r n e l s " e c h o " C P U 型 号 : CPU_Kernels" echo " CPU型号: CPUK​ernels"echo"CPU型号:CPU_Type”
echo " CPU架构:KaTeX parse error: Expected 'EOF', got '#' at position 11: CPU_Arch" #̲报表信息 report_CPU…Virt_CPUs #CPU数量
report_CPUType=KaTeX parse error: Expected 'EOF', got '#' at position 10: CPU_Type #̲CPU类型 report_Ar…CPU_Arch #CPU架构
}

function getMemStatus(){
echo “”
echo “”
echo “############################ 内存检查 ############################”
if [[ KaTeX parse error: Expected 'EOF', got '#' at position 52: …lse free -h fi #̲报表信息 MemTotal=(grep MemTotal /proc/meminfo| awk '{print KaTeX parse error: Expected 'EOF', got '}' at position 2: 2}̲') #KB MemFree=(grep MemFree /proc/meminfo| awk '{print KaTeX parse error: Expected 'EOF', got '}' at position 2: 2}̲') #KB let MemU…(awk “BEGIN {if(KaTeX parse error: Can't use function '\"' in math mode at position 37: …00}else{printf \̲"̲%.2f\",MemUsed100/KaTeX parse error: Expected 'EOF', got '}' at position 9: MemTotal}̲}") report_MemT…((MemTotal/1024))"“MB” #内存总容量(MB)
report_MemFree="KaTeX parse error: Expected 'EOF', got '#' at position 23: …ee/1024))""MB" #̲内存剩余(MB) report…(awk "BEGIN {if(KaTeX parse error: Can't use function '\"' in math mode at position 37: …00}else{printf \̲"̲%.2f\",MemUsed100/$MemTotal}}”)""%" #内存使用率%
}
function getDiskStatus(){
echo “”
echo “”
echo “############################ 磁盘检查 ############################”
df -hiP | sed ‘s/Mounted on/Mounted/’> /tmp/inode
df -hTP | sed ‘s/Mounted on/Mounted/’> /tmp/disk
join /tmp/disk /tmp/inode | awk '{print $1,$2,"|",$3,$4,$5,$6,"|",$8,$9,$10,$11,"|",KaTeX parse error: Expected 'EOF', got '}' at position 3: 12}̲'| column -t #报…(df -TP | sed ‘1d’ | awk 'KaTeX parse error: Expected 'EOF', got '#' at position 21: …mpfs"{print}') #̲KB disktotal=(echo “$diskdata” | awk '{total+=KaTeX parse error: Expected 'EOF', got '}' at position 2: 3}̲END{print total…(echo “$diskdata” | awk '{total+=KaTeX parse error: Expected 'EOF', got '}' at position 2: 4}̲END{print total…((disktotal-diskused)) #KB
diskusedpercent=$(echo $disktotal $diskused | awk '{if($10){printf 100}else{printf “%.2f”,$2*100/KaTeX parse error: Expected 'EOF', got '}' at position 2: 1}̲}') inodedata=(df -iTP | sed ‘1d’ | awk ' 2 ! = " t m p f s " p r i n t ′ ) i n o d e t o t a l = 2!="tmpfs"{print}') inodetotal= 2!="tmpfs"print′)inodetotal=(echo “$inodedata” | awk '{total+=KaTeX parse error: Expected 'EOF', got '}' at position 2: 3}̲END{print total…(echo “$inodedata” | awk '{total+=KaTeX parse error: Expected 'EOF', got '}' at position 2: 4}̲END{print total…((inodetotal-inodeused))
inodeusedpercent=$(echo $inodetotal $inodeused | awk '{if($10){printf 100}else{printf “%.2f”,$2*100/KaTeX parse error: Expected 'EOF', got '}' at position 2: 1}̲}') report_Disk…((disktotal/1024/1024))“GB” #硬盘总容量(GB)
report_DiskFree=KaTeX parse error: Expected 'EOF', got '#' at position 28: …024/1024))"GB" #̲硬盘剩余(GB) report…diskusedpercent""%" #硬盘使用率%
report_InodeTotal=KaTeX parse error: Expected 'EOF', got '#' at position 24: …otal/1000))"K" #̲Inode总量 report_…((inodefree/1000))“K” #Inode剩余
report_InodeUsedPercent="$inodeusedpercent""%" #Inode使用率%

}

function getSystemStatus(){
echo “”
echo “”
echo “############################ 系统检查 ############################”
if [ -e /etc/sysconfig/i18n ];then
default_LANG="$(grep “LANG=” /etc/sysconfig/i18n | grep -v “^#” | awk -F ‘"’ '{print KaTeX parse error: Expected 'EOF', got '}' at position 2: 2}̲')" else defaul…LANG
fi
export LANG=“en_US.UTF-8”
Release= ( c a t / e t c / r e d h a t − r e l e a s e 2 > / d e v / n u l l ) K e r n e l = (cat /etc/redhat-release 2>/dev/null) Kernel= (cat/etc/redhat−release2>/dev/null)Kernel=(uname -r)
OS= ( u n a m e − o ) H o s t n a m e = (uname -o) Hostname= (uname−o)Hostname=(uname -n)
SELinux=$(/usr/sbin/sestatus | grep “SELinux status: " | awk '{print KaTeX parse error: Expected 'EOF', got '}' at position 2: 3}̲') LastReboot=(who -b | awk '{print $3,KaTeX parse error: Expected 'EOF', got '}' at position 2: 4}̲') uptime=(uptime | sed ‘s/.up ([^,]), .*/\1/’)
echo " 系统： O S " e c h o " 发 行 版 本 ： OS" echo " 发行版本： OS"echo"发行版本：Release”
echo " 内核： K e r n e l " e c h o " 主 机 名 ： Kernel" echo " 主机名： Kernel"echo"主机名：Hostname"
echo " SELinux： S E L i n u x " e c h o " 语 言 / 编 码 ： SELinux" echo "语言/编码： SELinux"echo"语言/编码：default_LANG"
echo " 当前时间： ( d a t e + ′ e c h o " 最 后 启 动 ： (date +'%F %T')" echo " 最后启动： (date+′echo"最后启动：LastReboot"
echo " 运行时间：KaTeX parse error: Expected 'EOF', got '#' at position 9: uptime" #̲报表信息 report_Dat…(date +"%F %T") #日期
report_Hostname=“KaTeX parse error: Expected 'EOF', got '#' at position 11: Hostname" #̲主机名 report_OSRe…Release” #发行版本
report_Kernel=“KaTeX parse error: Expected 'EOF', got '#' at position 9: Kernel" #̲内核 report_Langu…default_LANG” #语言/编码
report_LastReboot=“KaTeX parse error: Expected 'EOF', got '#' at position 13: LastReboot" #̲最近启动时间 report_U…uptime” #运行时间（天）
report_Selinux=“ S E L i n u x " e x p o r t L A N G = " SELinux" export LANG=" SELinux"exportLANG="default_LANG”

}

function getServiceStatus(){
echo “”
echo “”
echo “############################ 服务检查 ############################”
echo “”
if [[ c e n t o s V e r s i o n > 7 ] ] ; t h e n c o n f = centosVersion > 7 ]];then conf= centosVersion>7]];thenconf=(systemctl list-unit-files --type=service --state=enabled --no-pager | grep “enabled”)
process=KaTeX parse error: Expected 'EOF', got '#' at position 84: …ep ".service") #̲报表信息 report_Sel…(echo "KaTeX parse error: Expected 'EOF', got '#' at position 17: …onf" | wc -l)" #̲自启动服务数量 report_…(echo "KaTeX parse error: Expected 'EOF', got '#' at position 20: …ess" | wc -l)" #̲运行中服务数量 else co…(/sbin/chkconfig | grep -E “:on|:启用”)
process=KaTeX parse error: Expected 'EOF', got '#' at position 70: …running|正在运行") #̲报表信息 report_Sel…(echo "KaTeX parse error: Expected 'EOF', got '#' at position 17: …onf" | wc -l)" #̲自启动服务数量 report_…(echo “KaTeX parse error: Expected 'EOF', got '#' at position 20: …ess" | wc -l)" #̲运行中服务数量 fi echo…conf” | column -t
echo “”
echo “正在运行的服务”
echo “--------------”
echo “$process”

}

function getAutoStartStatus(){
echo “”
echo “”
echo “############################ 自启动检查 ##########################”
conf=KaTeX parse error: Expected group after '^' at position 11: (grep -v "^̲#" /etc/rc.d/rc…/d’)
echo “KaTeX parse error: Expected 'EOF', got '#' at position 7: conf" #̲报表信息 report_Sel…(echo $conf | wc -l)” #自启动程序数量
}

function getLoginStatus(){
echo “”
echo “”
echo “############################ 登录检查 ############################”
last | head
}

function getNetworkStatus(){
echo “”
echo “”
echo “############################ 网络检查 ############################”
if [[ $centosVersion < 7 ]];then
/sbin/ifconfig -a | grep -v packets | grep -v collisions | grep -v inet6
else
#ip a
for i in $(ip link | grep BROADCAST | awk -F: ‘{print $2}’);do ip add show $i | grep -E “BROADCAST|global”| awk '{print KaTeX parse error: Expected 'EOF', got '}' at position 2: 2}̲' | tr '\n' ' '…(ip route | grep default | awk '{print KaTeX parse error: Expected 'EOF', got '}' at position 2: 3}̲') DNS=(grep nameserver /etc/resolv.conf| grep -v “#” | awk ‘{print KaTeX parse error: Expected 'EOF', got '}' at position 2: 2}̲' | tr '\n' ','…//’)
echo “”
echo “网关： G A T E W A Y " e c h o " D N S ： GATEWAY " echo " DNS： GATEWAY"echo"DNS：DNS”
#报表信息
IP=$(ip -f inet addr | grep -v 127.0.0.1 | grep inet | awk ‘{print $NF,KaTeX parse error: Expected 'EOF', got '}' at position 2: 2}̲' | tr '\n' ','…//’)
MAC=$(ip link | grep -v “LOOPBACK|loopback” | awk ‘{print KaTeX parse error: Expected 'EOF', got '}' at position 2: 2}̲' | sed 'N;s/\n…//’)
report_IP="KaTeX parse error: Expected 'EOF', got '#' at position 5: IP" #̲IP地址 report_MAC…MAC #MAC地址
report_Gateway=“KaTeX parse error: Expected 'EOF', got '#' at position 10: GATEWAY" #̲默认网关 report_DNS…DNS” #DNS
}

function getListenStatus(){
echo “”
echo “”
echo “############################ 监听检查 ############################”
TCPListen= ( s s − n t u l ∣ c o l u m n − t ) e c h o " (ss -ntul | column -t) echo " (ss−ntul∣column−t)echo"TCPListen"
#报表信息
report_Listen=“ ( e c h o " (echo " (echo"TCPListen”| sed ‘1d’ | awk ‘/tcp/ {print $5}’ | awk -F: ‘{print $NF}’ | sort | uniq | wc -l)"
}

function getCronStatus(){
echo “”
echo “”
echo “############################ 计划任务检查 ########################”
Crontab=0
for shell in $(grep -v “/sbin/nologin” /etc/shells);do
for user in ( g r e p " (grep " (grep"shell" /etc/passwd| awk -F: ‘{print $1}’);do
crontab -l -u KaTeX parse error: Expected 'EOF', got '&' at position 19: …r >/dev/null 2>&̲1 status=?
if [ s t a t u s − e q 0 ] ; t h e n e c h o " status -eq 0 ];then echo " status−eq0];thenecho"user"
echo “--------”
crontab -l -u u s e r l e t C r o n t a b = C r o n t a b + user let Crontab=Crontab+ userletCrontab=Crontab+(crontab -l -u KaTeX parse error: Expected 'EOF', got '#' at position 36: …" fi done done #̲计划任务 find /etc/…(find /etc/cron* -type f | wc -l)
#报表信息
report_Crontab="$Crontab" #计划任务数
}
function getHowLongAgo(){

计算一个时间戳离现在有多久了

datetime=“ ∗ " [ − z " *" [ -z " ∗"[−z"datetime” ] && echo "错误的参数：getHowLongAgo() ∗ " T i m e s t a m p = *" Timestamp= ∗"Timestamp=(date +%s -d “KaTeX parse error: Expected 'EOF', got '#' at position 12: datetime") #̲转化为时间戳 Now_Time…(date +%s)
Difference_Timestamp= ( ( (( ((Now_Timestamp- T i m e s t a m p ) ) d a y s = 0 ; h o u r s = 0 ; m i n u t e s = 0 ; s e c i n d a y = Timestamp)) days=0;hours=0;minutes=0; sec_in_day= Timestamp))days=0;hours=0;minutes=0;seci​nd​ay=((606024));
sec_in_hour=$((60*60));
sec_in_minute=60
while (( ( ( (( ((Difference_Timestamp-$sec_in_day)) > 1 ))
do
let Difference_Timestamp=Difference_Timestamp-sec_in_day
let days++
done
while (( ( ( (( ((Difference_Timestamp- s e c i n h o u r ) ) > 1 ) ) d o l e t D i f f e r e n c e T i m e s t a m p = D i f f e r e n c e T i m e s t a m p − s e c i n h o u r l e t h o u r s + + d o n e e c h o " sec_in_hour)) > 1 )) do let Difference_Timestamp=Difference_Timestamp-sec_in_hour let hours++ done echo " seci​nh​our))>1))doletDifferenceT​imestamp=DifferenceT​imestamp−seci​nh​ourlethours++doneecho"days 天 $hours 小时前”
}

function getUserLastLogin(){

获取用户最近一次登录的时间，含年份

很遗憾last命令不支持显示年份，只有"last -t YYYYMMDDHHMMSS"表示某个时间之间的登录，我

们只能用最笨的方法了，对比今天之前和今年元旦之前（或者去年之前和前年之前……）某个用户

登录次数，如果登录统计次数有变化，则说明最近一次登录是今年。

username=$1
u s e r n a m e : = " ‘ w h o a m i ‘ " t h i s Y e a r = {username:="`whoami`"} thisYear= username:="‘whoami‘"thisYear=(date +%Y)
oldesYear=$(last | tail -n1 | awk ‘{print $NF}’)
while(( $thisYear >= o l d e s Y e a r ) ) ; d o l o g i n B e f o r e T o d a y = oldesYear));do loginBeforeToday= oldesYear));dologinBeforeToday=(last $username | grep u s e r n a m e ∣ w c − l ) l o g i n B e f o r e N e w Y e a r s D a y O f T h i s Y e a r = username | wc -l) loginBeforeNewYearsDayOfThisYear= username∣wc−l)loginBeforeNewYearsDayOfThisYear=(last $username -t $thisYear"0101000000" | grep $username | wc -l)
if [ $loginBeforeToday -eq 0 ];then
echo “从未登录过”
break
elif [ $loginBeforeToday -gt l o g i n B e f o r e N e w Y e a r s D a y O f T h i s Y e a r ] ; t h e n l a s t D a t e T i m e = loginBeforeNewYearsDayOfThisYear ];then lastDateTime= loginBeforeNewYearsDayOfThisYear];thenlastDateTime=(last -i KaTeX parse error: Expected '}', got 'EOF' at end of input: …++)printf"%s ",i}’)" KaTeX parse error: Expected 'EOF', got '#' at position 11: thisYear" #̲格式如: Sat Nov 2 …(date “+%Y-%m-%d %H:%M:%S” -d “ l a s t D a t e T i m e " ) e c h o " lastDateTime") echo " lastDateTime")echo"lastDateTime”
break
else
thisYear=$((thisYear-1))
fi
done

}

function getUserStatus(){
echo “”
echo “”
echo “############################ 用户检查 ############################”
#/etc/passwd 最后修改时间
pwdfile=" ( c a t / e t c / p a s s w d ) " M o d i f y = (cat /etc/passwd)" Modify= (cat/etc/passwd)"Modify=(stat /etc/passwd | grep Modify | tr ‘.’ ’ ’ | awk ‘{print $2,$3}’)

echo “/etc/passwd 最后修改时间： M o d i f y ( Modify ( Modify((getHowLongAgo $Modify))”
echo “”
echo “特权用户”
echo “--------”
RootUser=""
for user in ( e c h o " (echo " (echo"pwdfile" | awk -F: ‘{print $1}’);do
if [ $(id -u u s e r ) − e q 0 ] ; t h e n e c h o " user) -eq 0 ];then echo " user)−eq0];thenecho"user"
RootUser=“ R o o t U s e r , RootUser, RootUser,user”
fi
done
echo “”
echo “用户列表”
echo “--------”
USERs=0
echo “$(
echo “用户名 UID GID HOME SHELL 最后一次登录”
for shell in $(grep -v “/sbin/nologin” /etc/shells);do
for username in ( g r e p " (grep " (grep"shell” /etc/passwd| awk -F: ‘{print KaTeX parse error: Expected 'EOF', got '}' at position 2: 1}̲');do userLastL…(getUserLastLogin u s e r n a m e ) " e c h o " username)" echo " username)"echo"pwdfile" | grep -w “ u s e r n a m e " ∣ g r e p − w " username" |grep -w " username"∣grep−w"shell”| awk -F: -v lastlogin=“ ( e c h o " (echo " (echo"userLastLogin” | tr ’ ’ ‘_’)" ‘{print $1,$3,$4,$6,KaTeX parse error: Expected 'EOF', got '}' at position 12: 7,lastlogin}̲' done let USER…(echo “ p w d f i l e " ∣ g r e p " pwdfile" | grep " pwdfile"∣grep"shell”| wc -l)
done
)" | column -t
echo “”
echo “空密码用户”
echo “----------”
USEREmptyPassword=""
for shell in $(grep -v “/sbin/nologin” /etc/shells);do
for user in ( e c h o " (echo " (echo"pwdfile" | grep “ s h e l l " ∣ c u t − d : − f 1 ) ; d o r = shell" | cut -d: -f1);do r= shell"∣cut−d:−f1);dor=(awk -F: '$2==”!!"{print $1}’ /etc/shadow | grep -w $user)
if [ ! -z $r ];then
echo r U S E R E m p t y P a s s w o r d = " r USEREmptyPassword=" rUSEREmptyPassword="USEREmptyPassword," r f i d o n e d o n e e c h o " " e c h o " 相 同 I D 的 用 户 " e c h o " − − − − − − − − − − − − " U S E R T h e S a m e U I D = " " U I D s = r fi done done echo "" echo "相同ID的用户" echo "------------" USERTheSameUID="" UIDs= rfidonedoneecho""echo"相同ID的用户"echo"−−−−−−−−−−−−"USERTheSameUID=""UIDs=(cut -d: -f3 /etc/passwd | sort | uniq -c | awk ‘$1>1{print $2}’)
for uid in U I D s ; d o e c h o − n " UIDs;do echo -n " UIDs;doecho−n"uid";
USERTheSameUID=" u i d " r = uid" r= uid"r=(awk -F: ‘ORS=""; 3 = = ′ " 3=='" 3==′"uid"’{print “:”,KaTeX parse error: Expected 'EOF', got '}' at position 2: 1}̲' /etc/passwd) …r"
echo “”
USERTheSameUID="$USERTheSameUID KaTeX parse error: Expected 'EOF', got '#' at position 10: r," done #̲报表信息 report_USE…USERs" #用户
report_USEREmptyPassword=$(echo U S E R E m p t y P a s s w o r d ∣ s e d ′ s / , / / ′ ) r e p o r t U S E R T h e S a m e U I D = USEREmptyPassword | sed 's/^,//') report_USERTheSameUID= USEREmptyPassword∣sed′s/,//′)reportU​SERTheSameUID=(echo U S E R T h e S a m e U I D ∣ s e d ′ s / , USERTheSameUID | sed 's/, USERTheSameUID∣sed′s/,//’)
report_RootUser=$(echo $RootUser | sed ‘s/^,//’) #特权用户
}

function getPasswordStatus {
echo “”
echo “”
echo “############################ 密码检查 ############################”
pwdfile="$(cat /etc/passwd)"
echo “”
echo “密码过期检查”
echo “------------”
result=""
for shell in $(grep -v “/sbin/nologin” /etc/shells);do
for user in ( e c h o " (echo " (echo"pwdfile" | grep " s h e l l " ∣ c u t − d : − f 1 ) ; d o g e t e x p i r y d a t e = shell" | cut -d: -f1);do get_expiry_date= shell"∣cut−d:−f1);dogete​xpiryd​ate=(/usr/bin/chage -l $user | grep ‘Password expires’ | cut -d: -f2)
if [[ $get_expiry_date = ’ never’ || $get_expiry_date = ‘never’ ]];then
printf “%-15s 永不过期\n” u s e r r e s u l t = " user result=" userresult="result, u s e r : n e v e r " e l s e p a s s w o r d e x p i r y d a t e = user:never" else password_expiry_date= user:never"elsepassworde​xpiryd​ate=(date -d “ g e t e x p i r y d a t e " " + c u r r e n t d a t e = get_expiry_date" "+%s") current_date= gete​xpiryd​ate""+currentd​ate=(date “+%s”)
diff= ( ( (( ((password_expiry_date- c u r r e n t d a t e ) ) l e t D A Y S = current_date)) let DAYS= currentd​ate))letDAYS=(($diff/(606024)))
printf “%-15s %s天后过期\n” $user D A Y S r e s u l t = " DAYS result=" DAYSresult="result, u s e r : user: user:DAYS days”
fi
done
done
report_PasswordExpiry=$(echo $result | sed ‘s/^,//’)

echo “”
echo “密码策略检查”
echo “------------”
grep -v “#” /etc/login.defs | grep -E “PASS_MAX_DAYS|PASS_MIN_DAYS|PASS_MIN_LEN|PASS_WARN_AGE”

}

function getSudoersStatus(){
echo “”
echo “”
echo “############################ Sudoers检查 #########################”
conf=KaTeX parse error: Expected group after '^' at position 11: (grep -v "^̲#" /etc/sudoers…/d’)
echo “KaTeX parse error: Expected 'EOF', got '#' at position 15: conf" echo "" #̲报表信息 report_Sud…(echo $conf | wc -l)”
}

function getInstalledStatus(){
echo “”
echo “”
echo “############################ 软件检查 ############################”
rpm -qa --last | head | column -t
}

function getProcessStatus(){
echo “”
echo “”
echo “############################ 进程检查 ############################”
if [ $(ps -ef | grep defunct | grep -v grep | wc -l) -ge 1 ];then
echo “”
echo “僵尸进程”;
echo “--------”
ps -ef | head -n1
ps -ef | grep defunct | grep -v grep
fi
echo “”
echo “内存占用TOP10”
echo “-------------”
echo -e “PID %MEM RSS COMMAND
$(ps aux | awk '{print $2, $4, $6, KaTeX parse error: Expected 'EOF', got '}' at position 3: 11}̲' | sort -k3rn …(ps -ef | grep defunct | grep -v grep|wc -l)”
}

function getJDKStatus(){
echo “”
echo “”
echo “############################ JDK检查 #############################”
java -version 2>/dev/null
if [ KaTeX parse error: Expected 'EOF', got '&' at position 32: …ava -version 2>&̲1 fi echo "JAVA…JAVA_HOME""
#报表信息
report_JDK="$(java -version 2>&1 | grep version | awk ‘{print $1,KaTeX parse error: Expected 'EOF', got '}' at position 2: 3}̲' | tr -d '"')"…(getState rsyslog)"
echo “”
echo “/etc/rsyslog.conf”
echo “-----------------”
cat /etc/rsyslog.conf 2>/dev/null | grep -v “^#” | grep -v "^\KaTeX parse error: Expected group after '^' at position 11: " | sed '/^̲/d’ | column -t
#报表信息
report_Syslog="$(getState rsyslog)"
}
function getFirewallStatus(){
echo “”
echo “”
echo “############################ 防火墙检查 ##########################”
#防火墙状态，策略等
if [[ KaTeX parse error: Expected 'EOF', got '&' at position 68: …s >/dev/null 2>&̲1 status=?
if [ $status -eq 0 ];then
s=“active”
elif [ $status -eq 3 ];then
s=“inactive”
elif [ s t a t u s − e q 4 ] ; t h e n s = " p e r m i s s i o n d e n i e d " e l s e s = " u n k n o w n " f i e l s e s = " status -eq 4 ];then s="permission denied" else s="unknown" fi else s=" status−eq4];thens="permissiondenied"elses="unknown"fielses="(getState iptables)"
fi
echo “iptables: KaTeX parse error: Expected 'EOF', got '#' at position 114: …es 2>/dev/null #̲报表信息 report_Fir…s”
}

function getSNMPStatus(){
#SNMP服务状态，配置等
echo “”
echo “”
echo “############################ SNMP检查 ############################”
status=“ ( g e t S t a t e s n m p d ) " e c h o " 服 务 状 态 ： (getState snmpd)" echo "服务状态： (getStatesnmpd)"echo"服务状态：status”
echo “”
if [ -e /etc/snmp/snmpd.conf ];then
echo “/etc/snmp/snmpd.conf”
echo “--------------------”
cat /etc/snmp/snmpd.conf 2>/dev/null | grep -v “^#” | sed '/^KaTeX parse error: Expected 'EOF', got '#' at position 8: /d' fi #̲报表信息 report_SNM…(getState snmpd)"
}

function getState(){
if [[ $centosVersion < 7 ]];then
if [ -e “/etc/init.d/$1” ];then
if [ /etc/init.d/$1 status 2>/dev/null | grep -E "is running|正在运行" | wc -l -ge 1 ];then
r=“active”
else
r=“inactive”
fi
else
r=“unknown”
fi
else
#CentOS 7+
r="$(systemctl is-active KaTeX parse error: Expected 'EOF', got '&' at position 5: 1 2>&̲1)" fi echo "r"
}

function getSSHStatus(){
#SSHD服务状态，配置,受信任主机等
echo “”
echo “”
echo “############################ SSH检查 #############################”
#检查受信任主机
pwdfile=" ( c a t / e t c / p a s s w d ) " e c h o " 服 务 状 态 ： (cat /etc/passwd)" echo "服务状态： (cat/etc/passwd)"echo"服务状态：(getState sshd)"
Protocol_Version=$(cat /etc/ssh/sshd_config | grep Protocol | awk '{print KaTeX parse error: Expected 'EOF', got '}' at position 2: 2}̲') echo "SSH协议版…Protocol_Version"
echo “”
echo “信任主机”
echo “--------”
authorized=0
for user in ( e c h o " (echo " (echo"pwdfile" | grep /bin/bash | awk -F: '{print KaTeX parse error: Expected 'EOF', got '}' at position 2: 1}̲');do authorize…(echo “$pwdfile” | grep -w $user | awk -F: '{printf KaTeX parse error: Expected 'EOF', got '}' at position 25: …uthorized_keys"}̲') authorized_h…(cat $authorize_file 2>/dev/null | awk ‘{print KaTeX parse error: Expected 'EOF', got '}' at position 2: 3}̲' | tr '\n' ','…//’)
if [ ! -z a u t h o r i z e d h o s t ] ; t h e n e c h o " authorized_host ];then echo " authorizedh​ost];thenecho"user 授权 "KaTeX parse error: Can't use function '\"' in math mode at position 16: authorized_host\̲"̲ 无密码访问" fi let …(cat $authorize_file 2>/dev/null | awk ‘{print $3}’|wc -l)
done

echo “”
echo “是否允许ROOT远程登录”
echo “--------------------”
config= ( c a t / e t c / s s h / s s h d c o n f i g ∣ g r e p P e r m i t R o o t L o g i n ) f i r s t C h a r = (cat /etc/ssh/sshd_config | grep PermitRootLogin) firstChar= (cat/etc/ssh/sshdc​onfig∣grepPermitRootLogin)firstChar={config:0:1}
if [ KaTeX parse error: Expected 'EOF', got '#' at position 15: firstChar == "#̲" ];then Permit…(echo $config | awk ‘{print $2}’)
fi
echo “PermitRootLogin $PermitRootLogin”

echo “”
echo “/etc/ssh/sshd_config”
echo “--------------------”
cat /etc/ssh/sshd_config | grep -v “^#” | sed ‘/^$/d’

#报表信息
report_SSHAuthorized=“KaTeX parse error: Expected 'EOF', got '#' at position 13: authorized" #̲SSH信任主机 report_…Protocol_Version” #SSH协议版本
report_SSHDPermitRootLogin="KaTeX parse error: Expected 'EOF', got '#' at position 18: …rmitRootLogin" #̲允许root远程登录 } fu…(getState ntpd)"
echo “”
echo “/etc/ntp.conf”
echo “-------------”
cat /etc/ntp.conf 2>/dev/null | grep -v “^#” | sed '/^KaTeX parse error: Expected 'EOF', got '#' at position 8: /d' fi #̲报表信息 report_NTP…(getState ntpd)"
}

function uploadHostDailyCheckReport(){
json="{
“DateTime”:“KaTeX parse error: Can't use function '\"' in math mode at position 16: report_DateTime\̲"̲, \"Hostname\":…report_Hostname”,
“OSRelease”:“KaTeX parse error: Can't use function '\"' in math mode at position 17: …eport_OSRelease\̲"̲, \"Kernel\":\"report_Kernel”,
“Language”:“KaTeX parse error: Can't use function '\"' in math mode at position 16: report_Language\̲"̲, \"LastReboot\…report_LastReboot”,
“Uptime”:“KaTeX parse error: Can't use function '\"' in math mode at position 14: report_Uptime\̲"̲, \"CPUs\":\"report_CPUs”,
“CPUType”:“KaTeX parse error: Can't use function '\"' in math mode at position 15: report_CPUType\̲"̲, \"Arch\":\"report_Arch”,
“MemTotal”:“KaTeX parse error: Can't use function '\"' in math mode at position 16: report_MemTotal\̲"̲, \"MemFree\":\…report_MemFree”,
“MemUsedPercent”:“KaTeX parse error: Can't use function '\"' in math mode at position 22: …_MemUsedPercent\̲"̲, \"DiskTotal\"…report_DiskTotal”,
“DiskFree”:“KaTeX parse error: Can't use function '\"' in math mode at position 16: report_DiskFree\̲"̲, \"DiskUsedPer…report_DiskUsedPercent”,
“InodeTotal”:“KaTeX parse error: Can't use function '\"' in math mode at position 18: …port_InodeTotal\̲"̲, \"InodeFree\"…report_InodeFree”,
“InodeUsedPercent”:“KaTeX parse error: Can't use function '\"' in math mode at position 24: …nodeUsedPercent\̲"̲, \"IP\":\"report_IP”,
“MAC”:“KaTeX parse error: Can't use function '\"' in math mode at position 11: report_MAC\̲"̲, \"Gateway\":\…report_Gateway”,
“DNS”:“KaTeX parse error: Can't use function '\"' in math mode at position 11: report_DNS\̲"̲, \"Listen\":\"report_Listen”,
“Selinux”:“KaTeX parse error: Can't use function '\"' in math mode at position 15: report_Selinux\̲"̲, \"Firewall\":…report_Firewall”,
“USERs”:“KaTeX parse error: Can't use function '\"' in math mode at position 13: report_USERs\̲"̲, \"USEREmptyPa…report_USEREmptyPassword”,
“USERTheSameUID”:“KaTeX parse error: Can't use function '\"' in math mode at position 22: …_USERTheSameUID\̲"̲, \"PasswordExp…report_PasswordExpiry”,
“RootUser”:“KaTeX parse error: Can't use function '\"' in math mode at position 16: report_RootUser\̲"̲, \"Sudoers\":\…report_Sudoers”,
“SSHAuthorized”:“KaTeX parse error: Can't use function '\"' in math mode at position 21: …t_SSHAuthorized\̲"̲, \"SSHDProtoco…report_SSHDProtocolVersion”,
“SSHDPermitRootLogin”:“KaTeX parse error: Can't use function '\"' in math mode at position 27: …PermitRootLogin\̲"̲, \"DefunctPros…report_DefunctProsess”,
“SelfInitiatedService”:“KaTeX parse error: Can't use function '\"' in math mode at position 28: …nitiatedService\̲"̲, \"SelfInitiat…report_SelfInitiatedProgram”,
“RuningService”:“KaTeX parse error: Can't use function '\"' in math mode at position 21: …t_RuningService\̲"̲, \"Crontab\":\…report_Crontab”,
“Syslog”:“KaTeX parse error: Can't use function '\"' in math mode at position 14: report_Syslog\̲"̲, \"SNMP\":\"report_SNMP”,
“NTP”:“KaTeX parse error: Can't use function '\"' in math mode at position 11: report_NTP\̲"̲, \"JDK\":\"report_JDK”
}"
#echo “ j s o n " c u r l − l − H " C o n t e n t − t y p e : a p p l i c a t i o n / j s o n " − X P O S T − d " json" curl -l -H "Content-type: application/json" -X POST -d " json"curl−l−H"Content−type:application/json"−XPOST−d"json” “$uploadHostDailyCheckReportApi” 2>/dev/null
}

function getchage_file_24h()
{
echo “############################ 文件检查 #############################”
check2= ( f i n d / − n a m e ′ ∗ . s h ′ − m t i m e − 1 ) c h e c k 21 = (find / -name '*.sh' -mtime -1) check21= (find/−name′∗.sh′−mtime−1)check21=(find / -name ‘.asp’ -mtime -1)
check22= ( f i n d / − n a m e ′ ∗ . p h p ′ − m t i m e − 1 ) c h e c k 23 = (find / -name '*.php' -mtime -1) check23= (find/−name′∗.php′−mtime−1)check23=(find / -name '.aspx’ -mtime -1)
check24= ( f i n d / − n a m e ′ ∗ . j s p ′ − m t i m e − 1 ) c h e c k 25 = (find / -name '*.jsp' -mtime -1) check25= (find/−name′∗.jsp′−mtime−1)check25=(find / -name ‘*.html’ -mtime -1)
check26= ( f i n d / − n a m e ′ ∗ . h t m ′ − m t i m e − 1 ) c h e c k 9 = (find / -name '*.htm' -mtime -1) check9= (find/−name′∗.htm′−mtime−1)check9=(find / -name core -exec ls -l {} 😉
check10= ( c a t / e t c / c r o n t a b ) c h e c k 12 = (cat /etc/crontab) check12= (cat/etc/crontab)check12=(ls -alt /usr/bin | head -10)
cat <<EOF

############################查看所有被修改过的文件返回最近24小时内的############################
${check2}
${check21}
${check22}
${check23}
${check24}
${check25}
${check26}
${line}

############################检查定时文件的完整性############################
${check10}
${line}

############################查看系统命令是否被替换############################
${check12}
${line}
EOF
}

function check(){
version
getSystemStatus
getCpuStatus
getMemStatus
getDiskStatus
getNetworkStatus
getListenStatus
getProcessStatus
getServiceStatus
getAutoStartStatus
getLoginStatus
getCronStatus
getUserStatus
getPasswordStatus
getSudoersStatus
getJDKStatus
getFirewallStatus
getSSHStatus
getSyslogStatus
getSNMPStatus
getNTPStatus
getInstalledStatus
getchage_file_24h
}

#执行检查并保存检查结果
check > $RESULTFILE

echo “检查结果：$RESULTFILE”
echo -e "date "+%Y-%m-%d %H:%M:%S" 阿里云PHP企业平台巡检报告" | mail -a $RESULTFILE -s “阿里云PHP企业平台巡检报告” h@163.com

END

优质网络系统领域创作者
关注
专栏目录
Linux 巡检脚本大全
weixin_51596958的博客
12-14 1634
Linux 巡检脚本 #!/bin/bash export PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin:/root/bin source /etc/profile [ KaTeX parse error: Expected 'EOF', got '&' at position 17: …id -u) -gt 0 ] &̲& echo "请用root用…(awk ‘{print $(NF-1)}’
shell自动巡检+数据库主从状态+邮件配置
cainiao_132的博客
11-17 420
巡检脚本+数据库主从状态 #!/bin/bash #主机信息每日巡检 IPADDR=$(ifconfig eth0|grep ‘inet addr’|awk -F ‘[ :]’ ‘{print $13}’) #环境变量PATH没设好，在cron里执行时有很多命令会找不到 export PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin:/root/bin source /etc/profile [ KaTeX parse err
系统巡检脚本
weixin_47980221的博客
09-30 143
#!/bin/bash # 获取CPU使用率 cpu_usage() { echo "CPU Usage:" top -bn1 | grep "Cpu(s)" | awk '{print "User: " $2 "%, System: " $4 "%, Idle: " $8 "%"}' } # 获取内存使用情况 memory_usage(...
linux巡检脚本_分享一个Linux系统巡检脚本
weixin_29945371的博客
12-29 2560
背景说明：我们在日常运维过程中，为了避免生产事件的发生，经常会去自定义一些脚本来批量对服务器的健康状态进行检查，今天就给大家分享一个bash脚本，主要用来检查OS的一些基础信息。执行脚本，如下图所示：脚本详细内容：#!/bin/sh"echo "#######################################「OS系统信息」##############################...
Linux巡查脚本
沐、的博客
05-19 413
#!/bin/bash if [ -f output.txt ] then touch output.txt fi # modify file permission if [ -w output.txt ] then chmod 755 output.txt fi #总内存容量 mem_total=$(free | awk '/Mem/{print $2}') #剩余内存容量 mem_free=$(free | awk '/Mem/{print $NF}') #磁盘信息 disk=$(d
Linux巡检脚本
weixin_47297088的博客
06-14 1242
Linux巡检脚本 #!/bin/bash ######################################################################################################## function RED(){ echo -e "\033[31m$@\033[0m" } function GRE(){ echo -e "\033[36m$@\033[0m" } function OS_INFO()
linux系统自动巡检脚本
04-11
1、对linux系统的资源信息进行自动巡检，查看包括 #系统版本检查 #系统日志检查 #文件系统检查 #网络地址配置信息 #查看内存使用情况 #查看磁盘读写情况 #网络检查 #环境变量检查 #用户组检查 #用户密码检查 #检查...
Linux 服务器日常巡检脚本分享.doc
05-13
Linux 服务器日常巡检脚本分享 本文将详细介绍 Linux 服务器日常巡检脚本的分享，包括...该 Linux 服务器日常巡检脚本可以帮助系统管理员更好地管理服务器，及时发现服务器中的问题，从而提高服务器的可靠性和安全性。
Linux服务器自动化巡检日常报告脚本
11-12
此脚本功能主要是远程服务器进行日常巡检,比如CPU型号,内存,网络,系统版本,系统名称,登录错误日志,当前登录的数量,以及dmesg错误日志,会输入到表格中,适合运维人员,需要在此脚本的目录下创建名为"Linux监控信息.xlsx...
Linux运维日常巡检脚本 - 可自行修改
10-08
Linux运维日常巡检脚本 -- 可自行修改，内包含经常要看的大多数内容，如： 巡检时间 √ 主机名 √ 该服务器为宿主机还是虚拟机还是云服务器 √ ip地址 √ cpu使用空间 √ 内存总计 √ 内存可用 √ 内存...
Linux操作系统健康巡检脚本
11-30
"Linux操作系统健康巡检脚本"正是为这一目的而设计的，它专用于BC-Linux环境，帮助用户监测系统状态，预防潜在问题。 这个脚本提供了一个灵活的解决方案，支持用户根据自身需求选择特定的巡检项。这可能包括但不...
linux系统巡检脚本
01-23
本脚本是用于rhel centOS 等linux系统巡检使用的脚本，适用于大批量的操作，对操作系统 性能资源 安装软件 网络配置信息 日志信息 硬件信息 主机配置信息的收集，生成文件到/tmp/data/目录下
shell脚本一键系统巡查
晨！！！的博客
01-10 257
最近开始系统学习shell脚本的相关知识，为了对已经学习的知识及时巩固，也为别人提供参考的资料，这里会对自己的学习过程做详细的记录。 直接上代码！！！ !/bin/bash function system(){ echo "#########################系统信息#########################" OS_TYPE=uname OS_VER=cat /et...
Linux系统巡检脚本
XBLYL1992的博客
02-08 661
Linux系统巡检脚本
Linux简单巡检脚本
最新发布
weixin_48141327的博客
10-24 266
echo "| 处理器： | $cpuu鏍稿績 ${cpu_syl}% "echo "| 磁盘： | ${diskk_1} "echo "| 磁盘： | ${line} "echo "| 内存： | $mem ${mem_syl}% "echo "| 主机名： | $name "echo "| 主机IP： | $name_ip"#ip 的过滤条件需要根据实际情况修改。#磁盘 的过滤条件需要根据实际情况修改。
Linux服务器日常巡检自动化脚本
"这是一份关于Linux服务器日常巡检的脚本，旨在帮助管理员自动检查服务器的健康状态，包括磁盘、内存、CPU、进程、文件更改和用户登录等关键指标。脚本还具备将巡检结果以邮件形式发送到指定邮箱的功能，并在log目录...
评论
添加红包

请填写红包祝福语或标题

个

红包个数最小为10个

元

红包金额最低5元

当前余额3.43元 前往充值 >
需支付：10.00元
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包

打赏作者

优质网络系统领域创作者

你的鼓励将是我创作的最大动力

¥1 ¥2 ¥4 ¥6 ¥10 ¥20
扫码支付：¥1
获取中
扫码支付

您的余额不足，请更换扫码支付或充值

打赏作者

实付元
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明：

1.余额是钱包充值的虚拟货币，按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载，可以购买VIP、付费专栏及课程。

余额充值