152 lines
3.5 KiB
Bash
Executable File
152 lines
3.5 KiB
Bash
Executable File
#!/bin/bash
|
|
|
|
# Pandora FMS Integrity Check v1.0
|
|
# (c) 2014 Pandora FMS Team
|
|
#
|
|
# This script is used to generate a MD5 hash of each relevant file
|
|
# in a Pandora FMS, including server and console files. It supports
|
|
# a mode to "check" using the output of a previous execution.
|
|
|
|
UNIXTIME=`date +%s`
|
|
HUMANDATE=`date +%d-%m-%y-%s`
|
|
OUTPUT=integrity_check_`date +%d-%m-%y-%s`.data
|
|
|
|
echo "Pandora FMS Integrity Check tool v1.0"
|
|
echo "(c) Pandora FMS Development Team 2014"
|
|
echo " "
|
|
|
|
if [ $# -lt 2 ]
|
|
then
|
|
echo "Syntax:"
|
|
echo " "
|
|
echo "integrity_chech new|check <path_to_console> [<path_to_integrity_file]>"
|
|
echo " "
|
|
echo " If mode 'check' is selected, it will require a integrity file (generated by this tool) to check it against current setup"
|
|
echo " "
|
|
exit -1
|
|
fi
|
|
|
|
CONSOLE_PATH=$2
|
|
INTEGRITY_FILE=$3
|
|
INTEGRITY_REPORT=$INTEGRITY_FILE.report
|
|
MODE=$1
|
|
ERROR=0
|
|
|
|
if [ ! -d "$CONSOLE_PATH" ]
|
|
then
|
|
echo "Error: Console path doesn't exist"
|
|
exit -1
|
|
fi
|
|
|
|
if [ "$MODE" == "check" ]
|
|
then
|
|
if [ ! -f "$INTEGRITY_FILE" ]
|
|
then
|
|
echo "Error: Integrity file to check not found"
|
|
exit -1
|
|
fi
|
|
|
|
IFS="
|
|
"
|
|
|
|
cat /dev/null > $INTEGRITY_REPORT
|
|
echo "#Pandora FMS Integrity Check REPORT generated at $HUMANDATE at `hostname` by $USER" >> $INTEGRITY_REPORT
|
|
echo "Checking file integrity in $INTEGRITY_FILE."
|
|
|
|
for ax in `cat $INTEGRITY_FILE | grep -v "^#"`
|
|
do
|
|
|
|
md5=`echo $ax | awk '{ print $1 }'`
|
|
file=`echo $ax | awk '{ print $2 }'`
|
|
|
|
if [ -f "$file" ]
|
|
then
|
|
md5_v2=`md5sum $file | awk '{ print $1 }'`
|
|
if [ "$md5_v2" != "$md5" ]
|
|
then
|
|
echo "[ERR] $file -- MD5 CHECKSUM ERROR" >> $INTEGRITY_REPORT
|
|
ERROR=`expr $ERROR + 1`
|
|
echo -n "e"
|
|
else
|
|
echo "[ ok] $file -- OK" >> $INTEGRITY_REPORT
|
|
echo -n "."
|
|
fi
|
|
else
|
|
echo "[ERR] $file -- FILE MISSING in current target" >> $INTEGRITY_REPORT
|
|
ERROR=`expr $ERROR + 1`
|
|
echo -n "m"
|
|
fi
|
|
done
|
|
echo " "
|
|
if [ $ERROR -gt 0 ]
|
|
then
|
|
echo "WARNING: Some discrepancies has been found. Check the Integrity report"
|
|
else
|
|
echo "Everything seems to be OK, no changes detected!"
|
|
fi
|
|
|
|
echo "Done. Report is in $INTEGRITY_REPORT"
|
|
exit 0
|
|
fi
|
|
|
|
if [ "$MODE" == "new" ]
|
|
then
|
|
|
|
echo " "
|
|
# Begin CREATION of a new Integrity Check File
|
|
|
|
cat /dev/null > $OUTPUT
|
|
echo "#Pandora FMS Integrity Check generated at $HUMANDATE at `hostname` by $USER" >> $OUTPUT
|
|
echo "Creating integrity check of Pandora FMS Console files"
|
|
for ax in `find /var/www/pandora_console/ -name "*.php" -o -name "*.js" -o -name "*.css" -o -name "*.sql"`
|
|
do
|
|
bx=`md5sum $ax`
|
|
echo $bx >>$OUTPUT
|
|
echo -n "."
|
|
done
|
|
echo " "
|
|
echo "Creating integrity check of Pandora FMS server files"
|
|
for ax in `find /usr/share/pandora_server/ -type f `
|
|
do
|
|
bx=`md5sum $ax`
|
|
echo $bx >>$OUTPUT
|
|
echo -n "."
|
|
done
|
|
|
|
for ax in `find /usr/lib/perl5/PandoraFMS/ -type f`
|
|
do
|
|
bx=`md5sum $ax`
|
|
echo $bx >>$OUTPUT
|
|
echo -n "."
|
|
done
|
|
|
|
if [ -d "/usr/lib/perl5/Goliat/" ]
|
|
then
|
|
for ax in `find /usr/lib/perl5/Goliat/ -type f`
|
|
do
|
|
bx=`md5sum $ax`
|
|
echo $bx >>$OUTPUT
|
|
echo -n "."
|
|
done
|
|
fi
|
|
|
|
if [ -d "/etc/pandora/" ]
|
|
then
|
|
for ax in `find /etc/pandora/ -type f`
|
|
do
|
|
bx=`md5sum $ax`
|
|
echo $bx >>$OUTPUT
|
|
echo -n "."
|
|
done
|
|
fi
|
|
echo " "
|
|
echo "File generated at $OUTPUT"
|
|
fi
|
|
|
|
|
|
echo "Finishing witout error"
|
|
exit 0
|
|
|
|
|
|
|