--- loncom/build/Attic/CHECKRPMS.default 2003/07/30 16:49:27 1.17 +++ loncom/build/Attic/CHECKRPMS.default 2004/08/25 14:44:32 1.18 @@ -1,435 +1,109 @@ -#!/usr/bin/perl +#!/usr/bin/perl -w +# +# The LearningOnline Network with CAPA +# +# $Id: CHECKRPMS.default,v 1.18 2004/08/25 14:44:32 matthew Exp $ +# +# Copyright Michigan State University Board of Trustees +# +# This file is part of the LearningOnline Network with CAPA (LON-CAPA). +# +# LON-CAPA is free software; you can redistribute it and/or modify +# it under the terms of the GNU General Public License as published by +# the Free Software Foundation; either version 2 of the License, or +# (at your option) any later version. +# +# LON-CAPA is distributed in the hope that it will be useful, +# but WITHOUT ANY WARRANTY; without even the implied warranty of +# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the +# GNU General Public License for more details. +# +# You should have received a copy of the GNU General Public License +# along with LON-CAPA; if not, write to the Free Software +# Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA +# +# /home/httpd/html/adm/gpl.txt +# +# http://www.lon-capa.org/ +# +# (Navigate problems for statistical reports +# =pod =head1 NAME -B - automated status report about RPMs on a system - -=head1 SYNOPSIS - -./B [I] - -or - -B B [I] - -If I is left blank, the mode is "interactive". Otherwise, -other modes can be specified as shown in the listing below: - -=over 4 - -=item DEFAULT - -When left blank, the script runs in interactive mode. First, a proposed -list of RPMs is presented to the user. Then, the user is asked if he or -she wants to download the RPMs to /tmp/loncapa_rpm_updates/. - -=item view - -A proposed list of RPMs to update is presented to the user. - -=item download - -A proposed set of RPMs to update are downloaded into /tmp/loncapa_rpm_updates/. -Note that prior information inside /tmp/loncapa_rpm_updates/ is removed. - -=item redownload - -A proposed set of RPMs to update are downloaded into /tmp/loncapa_rpm_updates/. -Note that prior information inside /tmp/loncapa_rpm_updates/ is not removed. -(This helps support continual attempts from dialup connections.) - -=item html - -Similar to view mode. XHTML-formatted output is delivered; presumably -to a web client. html mode is automatically chosen if $ENV{'QUERY_STRING'} is -defined. - -=back +B - automated status report about RPMs on a system. =head1 DESCRIPTION -This file automates the usage of Martin Siegert's "check-rpms" -script. It runs through a list of possible mirror sites -until it finds one with a reasonably good FTP connection. - -For instructions on usage, see L. +Runs Martin Seigert's checkrpms script. See +http://www.sfu.ca/acs/security/linux/check-rpms.html for more information. -=head1 AUTHOR - -Scott Harrison, sharrison@users.sourceforge.net, 2002 +Must be run as root or www. =cut -# ================================================== READ IN COMMAND ARGUMENTS. - -# ---------------------------------------------------- Process download option. -my $argument = shift(@ARGV); -my $document; -my $mode; -if ($argument eq '--download' or $argument eq '--redownload') - { - if ($< != 0) # Download mode requires 'root'. - { - print( - '**** ERROR **** Download mode needs to be run as root'."\n"); - exit(0); # Exit. - } - `rm -Rf /tmp/loncapa_rpm_updates` if $argument eq '--download'; - $download='-v -dl -d /tmp/loncapa_rpm_updates'; # Part of check-rpms args. - $mode = 'download'; - } -elsif ($argument eq '--view') - { - $mode = 'view'; - } -elsif ($argument eq '--cronmail') - { - $mode = 'cronmail'; - } -elsif ($ENV{'QUERY_STRING'} or $argument eq '--html') - { - $mode = 'html'; - } -else - { - $mode = 'interactive'; - } - -# ================================================== GENERAL INITIAL VARIABLES. -my $command_name=$0; - -# ---------------- The FTP servers (and their directory paths) to check against -my @serverpaths_to_try = - ( - 'ftpmirror:loncapa@install.lon-capa.org/pub/redhat/linux/updates/', - 'mirror.pa.msu.edu/linux/redhat/linux/updates/', - 'distro.ibiblio.org/pub/linux/distributions/redhat/updates/', - 'limestone.uoregon.edu/redhat/updates/', - 'rufus.w3.org/linux/redhat/linux/updates/', - ); - -# -------------------------------------------- Use check-rpms command this way. -my $checkcommand = 'check-rpms -nk '.$download.' --rpmuser www -ftp'; - -my $FTPSERVER; # ------------------------- the server portion of the serverpath -my $FTPUPDATES; # ----------------------------- the actual update root location -my @rpms; # ---------------------------------- this will store the list of RPMs -my $goodoutput; # ------------------------------------ good stuff was returned! -my $reallygoodoutput; # ------------------------------- you are 100% up-to-date - -my $simplestatus='time='.time.'&'; - -# ===================================================== Control flow of output. -my $out = \*STDOUT; # Default: go to standard output (directly to terminal). - -if ($mode eq 'cronmail') # If cronmail mode, then save to file. - { - open(FOUT,'>/tmp/CHECKRPMS.'.$$); - $out = \*FOUT; - } - -$| = 1; # Flush to output whenever possible. - -# ========================================== Variables that must be defineable. - -# --------------------------------------------------- Determine RedHat version. -my $RHversion = (split /\s/, `cat /etc/redhat-release`)[4]; # - 6.2 or 7.3 or ? - -unless ($RHversion) - { - terminate($mode,$out, - '**** ERROR **** /etc/redhat-release not found'."\n". - 'This script does not appear to be running on RedHat.'."\n"); - } - -# ----------------------------------------- Find the check-rpms script location -if (-e './check-rpms') - { - $commandpre='perl ./'; # Use the check-rpms in the current directory. - } -elsif (-e 'loncom/build/check-rpms') - { - $commandpre='perl loncom/build/'; # Use check-rpms in the loncom/build dir. - } -elsif (-e '/usr/local/loncapa/bin/check-rpms') - { - $commandpre='perl /usr/local/loncapa/bin/'; # Use /usr/local dir. - } -else # Cannot find check-rpms, so abort. - { - terminate($mode,$out, - '**** ERROR **** CANNOT FIND THE check-rpms SCRIPT'."\n"); - } - -# Define check-rpms invocation based on the path to the check-rpms command. -$checkcommand = $commandpre.$checkcommand; - -# ============================================================= Initial output. - -print($out < - - - -CHECKRPMS STATUS REPORT - - -

CHECKRPMS STATUS REPORT

-
-
-END
-
-# Notify user of current action.
-print($out </dev/null`;#Ping ftp server (u there?)
-    if ($?==0) # If the ftp server can be pinged.
-      {
-	print($out "$FTPSERVER found...\n"); # Tell user ftp server is found.
-	`ncftpls ftp://$FTPSERVER`; # Try to access server with ftp protocol.
-	if ($?==0) # If the ftp server can be accessed with the ftp protocol.
-          {
-	    $FTPUPDATES="$serverpath$RHversion/en/os"; # The full update path.
-	    # Print the check-rpms command that will be executed.
-	    print($out $checkcommand.' '.$FTPUPDATES."\n");
-	    if ($mode eq 'download') # Was CHECKRPMS run in download mode?
-              {
-		$|=1; # Try to send things immediately to stdout; err umm....
-		# Tell the user about the /tmp/loncapa_rpm_updates directory.
-		print($out '**** NOTE **** '.
-		      'To check the status of the download, you can '.
-		      'periodically inspect the contents of the '.
-		      '/tmp/loncapa_rpm_updates directory.  '.
-		      'Please be patient; this download may take a while.'.
-		      "\n");
-		# Do the download.
-		print($out `$checkcommand $FTPUPDATES 2>\&1`);
-		# Tell the user about what action they need to take with the
-		# downloaded RPMs.
-		print($out
-		      'You may now wish to visit the /tmp/loncapa_rpm_updates'.
-		      ' directory and upgrade the RPMs.  '."\n".
-		      'If this is a critical server (it is currently being'.
-		      ' used for classes) and you do not know how to upgrade'.
-		      ' RPMs, you should consult someone who has experience '.
-		      'with the "rpm" command.'."\n");
-		clean_exit($mode,$out,0); # Assume everything is okay and exit.
-	      }
-	    @rpms=`$checkcommand $FTPUPDATES 2>\&1`; # Read in list of RPMs.
-	    # Create a text string that can be pattern matched.
-	    my $rpmtext=join('',@rpms);
-	    if ($rpmtext=~/You do not seem to have a/) # No www?
-              {
-		print($out "You do not have a 'www' user on your system.\n".
-		      "Please add this user and try this command again.\n");
-		clean_exit($mode,$out,0);
-	      }
-	    if ($rpmtext=~/This account is currently not/) # ------------ uh-oh
-	      {
-		print($out "...strange error, moving on ($FTPSERVER)\n");
-	      }
-	    else # --------------------------------------- the output is "good"
-	      {
-		$goodoutput=$rpmtext;
-		unless (@rpms) # If there are no RPMs to update.
-		  {
-		    $reallygoodoutput = <;
-	if ($in=~/^y/)
-	  {
-            print($out 'Please be patient... downloading into '.
-		  '/tmp/loncapa_rpm_updates'."\n");
-            print($out `perl $command_name --download`);
-            clean_exit($mode,$out,0);
-	  }
-      }
-    print($out </home/httpd/html/lon-status/checkrpms.txt');
-    print SMP $simplestatus."\n";
-    close(SMP);
-#
-# Mail
-#
-    if ($mode eq 'cronmail') # If cronmail mode, then mail LON-CAPA sys admin.
-      {
-        close(FOUT);
-
-	# Read in configuration to get e-mail addresses.
-	my $perlvarref = read_conf('loncapa.conf');
-	my %perlvar = %{$perlvarref};
-	undef $perlvarref;
-	delete $perlvar{'lonReceipt'}; # remove since sensitive
-	delete $perlvar{'lonSqlAccess'}; # remove since sensitive
-
-	# Set metadata for the e-mail.
-        my $emailto = "$perlvar{'lonAdmEMail'}";
-
-	my $subj=$perlvar{'lonHostID'}.', RPMS to upgrade';
-
-	# Make the e-mail's subject header to describe whether up-to-date.
-	if ($reallygoodoutput)
-	  {
-	    $subj = 'happy_lon: '.$subj; # Machine is up-to-date.
-	  }
-	else
-	  {
-	    $subj = 'ALERT_lon: '.$subj; # There are out-of-date RPMs.
-	  }
-
-	# Send the e-mail.
-	my $date = `date +"\%e"`; # Always send a day after the "Ides" or after
-	                          # the beginning of a month.  (In other words,
-	                          # send an e-mail every two weeks regardless.)
-        if (!$reallygoodoutput or
-	    $date == 2 or
-	    $date == 16)
-	  {
-	    system(
-		   'metasend -b -t '.$emailto.' -s '.
-		   "'$subj' -f /tmp/CHECKRPMS.$$ -m text/plain");
-	  }
-      }
-
-    print($out <
-
-
 END
-    exit($code);
-  }
 
-sub terminate
-  {
-    my ($mode,$out,$output);
-    if ($mode eq 'html')
-      {
-        print($out <
-
-
-
-CHECKRPMS ERROR
-
-
-
CHECKRPMS ERROR

-

-

-END
-      }
-    print($out $output);
-    if ($mode eq 'html')
-      {
-        print($out <

-END
-      }
-  }
+}
 
+#
+# Run check-rpms and capture its output
+$mailmsg = `$checkrpms`;
 
-# - read_conf: read LON-CAPA server configuration, especially PerlSetVar values
-sub read_conf
-  {
-    my (@conf_files)=@_;
-    my %perlvar;
-    my $confdir='/etc/httpd/conf/';
-    foreach my $filename (@conf_files,'loncapa_apache.conf')
-      {
-	open(CONFIG,'<'.$confdir.$filename) or
-	    die("Can't read $confdir$filename");
-	while (my $configline=)
-	  {
-	    if ($configline =~ /^[^\#]*PerlSetVar/)
-	      {
-		my ($unused,$varname,$varvalue)=split(/\s+/,$configline);
-		chomp($varvalue);
-		$perlvar{$varname}=$varvalue;
-	      }
-	  }
-	close(CONFIG);
-      }
-    my $perlvarref=\%perlvar;
-    return ($perlvarref);
-  }
+#
+# Email the user the output of checkrpms
+if ($mailmsg ne '') {
+    $mailmsg =<<"END";
+checkrpms checked the status of the packages on your system and 
+produced the following output:
+-------------------------------------------------------
+$mailmsg
+-------------------------------------------------------
+If there are rpms which need to be installed, please log into
+$perlvar{'lonHostID'} and run the following command
+
+$checkrpms --update
+
+If there are kernel packages to be installed, use
+
+$checkrpms --update --install-kernel
+
+Keeping your system up to date is very important.
+Ensuring you are using up to date software is a prerequisite for a 
+secure system.
+
+END
+    my $mail_file = '/tmp/CHECKRPMS.'.$$;
+    open(MAILFILE,">$mail_file") || die("Unable to write to ".$mail_file);
+    print MAILFILE $mailmsg.$/;
+    close(MAILFILE);
+    my $mailcommand = "mail -s '$subj' $emailto <$mail_file";
+    print STDERR $mailcommand;
+    system($mailcommand);
+}
 
+exit;