ncc.zabbix_fbsd_templates

Yohn Y. 2024-10-17 Parent:8e4f72f0be61 Child:4b52905c8a66

11:f5d65a7f34b3 Go to Latest

ncc.zabbix_fbsd_templates/src/aw.fbsd-mon-helper/lib/pkg.sh

* Исправлена деградация в v0.r202410.1 ложноположительное срабатывание мониторинга уязвимостей

Download raw file
View source Diff to previous Annotate
History
1 #!/bin/sh
2 # Различная статистика по пакетам
3
4 v_pkg_detail_status="$STATE_ROOT/pkg_detail"
5 v_pkg_update_status="$STATE_ROOT/pkg_update"
6 v_pkg_detail_status_list="${TMP_ROOT}/pkg_detail_status_list"
7
8 pkg_init () {
9 if ! [ -d "$v_pkg_detail_status" ]; then
10 mkdir -p "$v_pkg_detail_status"
11 else
12 # Удаляем старые директории, в которые давно не не пишутся данные по пакетам
13 log "Clean old detail pakages"
14 find "$v_pkg_detail_status" -type f -ctime +1 -print0 | xargs -0n 1 rm -frv 2>&1 | log
15 fi
16 log "Update pakages"
17 pkg update 2>&1 | log
18 # Обновление базы аудита происходит на получении общих данных по пакетам
19
20 touch "${v_pkg_detail_status_list}"
21 }
22
23 pkg_get_detail_pkg_list () {
24 local vl_pkg_name
25 local vl_buf
26
27 cat "${USER_MON_PKG_LIST}" | while read vl_buf; do
28 vl_pkg_name=$(pkg query '%n' "${vl_buf}")
29 [ -n "${vl_pkg_fullname}" ] && echo "${vl_pkg_name}" >> "${v_pkg_detail_status_list}"
30 done
31
32 service -e | awk '$1 ~ "^/usr/local" {print $1}' | while read vl_buf; do
33 if ! [ -f "$vl_buf" ] ; then
34 continue
35 fi
36
37 vl_pkg_name="$(pkg which "$vl_buf" | awk '$0 ~ "was installed by package" {print $6}')"
38
39 if [ -z "$vl_pkg_name" ] ; then
40 log "$vl_buf have no matched pkg"
41 continue
42 fi
43
44 vl_pkg_name="$(pkg query '%n' "$vl_pkg_name")"
45
46 {
47 echo "${vl_pkg_name}"
48 pkg query '%rn' "${vl_pkg_name}"
49 pkg query '%dn' "${vl_pkg_name}"
50 } >> "${v_pkg_detail_status_list}"
51 done
52 }
53
54 pkg_make_detail () {
55 local vl_pkg_buf
56 local vl_pkg_fullname
57 local vl_pkg_repo
58 local vl_pkg_name
59 local vl_pkg_ver
60 local vl_status_file
61 local vl_pkg_status
62
63 pkg_get_detail_pkg_list
64 cat "${v_pkg_detail_status_list}" | sort | uniq | while read vl_pkg_buf; do
65 log "Working with $vl_pkg_buf"
66
67 vl_pkg_fullname="$(pkg query '%n-%v' "${vl_pkg_buf}")"
68 vl_pkg_name="$(pkg query '%n' "$vl_pkg_fullname")"
69 vl_pkg_repo="$(pkg query '%R' "$vl_pkg_fullname")"
70 vl_pkg_ver="$(pkg query '%v' "$vl_pkg_fullname")"
71 vl_pkg_status="$(pkg version -r "$vl_pkg_repo" -qUn "$vl_pkg_name" | awk '{print $2}')"
72
73 case "$vl_pkg_status" in
74 = )
75 vl_pkg_status=OK
76 ;;
77
78 "<" )
79 vl_pkg_status="NEED UPDATE"
80 ;;
81
82 ">" )
83 vl_pkg_status="REPO VERSION LOWER"
84 ;;
85
86 "?" )
87 vl_pkg_status="NO PACKAGE IN REPO"
88 ;;
89
90 "!" )
91 vl_pkg_status="ERROR"
92 log_err -s "${vl_pkg_name}: pkg can not compare version of package"
93 ;;
94
95 * )
96 log_err -s "${vl_pkg_name}: unknown status ${vl_pkg_status}"
97 vl_pkg_status="ERROR"
98 ;;
99
100 esac
101
102 vl_status_file="${v_pkg_detail_status}/${vl_pkg_name}"
103 pkg query 'installed=%t\nmainteiner=%m\nsize=%sb\nlocked=%k' "$vl_pkg_fullname" \
104 > "${vl_status_file}"
105
106 printf 'ver=%s\nrepo=%s\nstatus=%s\n' "${vl_pkg_ver}" "${vl_pkg_repo}" "${vl_pkg_status}" >> "$vl_status_file"
107 pkg audit "$vl_pkg_fullname" \
108 | awk '!($0 ~ "[0-9]* problem\\(s\\) in [0-9]* installed package\\(s\\) found") {print $0}' \
109 > "${vl_status_file}.audit"
110
111 done
112 }
113
114 pkg_check_up_status () {
115 # Проверка статуса наличия обновления для пакета
116 local vl_pkg_name
117 local vl_pkg_repo
118
119 cat /dev/null > "$v_pkg_update_status"
120 pkg version -qUL = | awk '$2 != ">" {print $1}' | while read _pkg; do
121 vl_pkg_name="$(pkg query '%n' "${_pkg}")"
122 vl_pkg_repo="$(pkg query '%R' "${_pkg}")"
123 log "Check update for ${vl_pkg_name} in ${vl_pkg_repo}"
124 pkg version -Ur "${vl_pkg_repo}" -n "${vl_pkg_name}" \
125 | awk '$2 != ">" && $2 != "=" {print $1}' \
126 | tee -a "$v_pkg_update_status" \
127 | awk '$0 != "" {print "UPDATE STATUS:", $0}' | log
128 done
129
130 pkg upgrade -Uqn | tee -a "$v_pkg_update_status" | awk '$0 != "" {print "PKG UPGRADE:", $0}' | log
131 }
132
133 pkg_do () {
134 log_start "pkg_do"
135
136 pkg_init
137
138 pkg_check_up_status
139 pkg audit -qF > "${v_pkg_update_status}.audit"
140
141 pkg_make_detail
142
143 log_end
144 }