Annotation of /rpms/rkhunter/sme8/01-rkhunter

#!/bin/sh
# 01-rkhunter  A shell script to update and run rkhunter via CRON

XITVAL=0

# Get a secure tempfile
TMPFILE1=`/bin/mktemp -p /var/lib/rkhunter rkhcronlog.XXXXXXXXXX` || exit 1

if [ ! -e /var/lock/subsys/rkhunter ]; then

  # Try to keep the SysInit boot scan from colliding with us (highly unlikely)
  /bin/touch /var/lock/subsys/rkhunter

  # Source system configuration parameters.
  if [ -e /etc/sysconfig/rkhunter ] ; then
    . /etc/sysconfig/rkhunter
  else
    MAILTO=root@localhost
  fi

  # If a diagnostic mode scan was requested, setup the parameters
  if [ "$DIAG_SCAN" == "yes" ]; then
    RKHUNTER_FLAGS="--checkall --skip-keypress --nocolors --quiet --appendlog --display-logfile"
  else
    RKHUNTER_FLAGS="--cronjob --nocolors --report-warnings-only"
  fi

  # Set a few critical parameters
  RKHUNTER=/usr/bin/rkhunter
  LOGFILE=/var/log/rkhunter/rkhunter.log

  # Run RootKit Hunter if available
  if [ -x $RKHUNTER ]; then
    /bin/echo -e "\n--------------------- Start Rootkit Hunter Update ---------------------" \
      > $TMPFILE1
    /bin/nice -n 10 $RKHUNTER --update --nocolors 2>&1 >> $TMPFILE1
    /bin/echo -e "\n---------------------- Start Rootkit Hunter Scan ----------------------" \
      >> $TMPFILE1
    /bin/nice -n 10 $RKHUNTER $RKHUNTER_FLAGS 2>&1 >> $TMPFILE1
    XITVAL=$?
    /bin/echo -e "\n----------------------- End Rootkit Hunter Scan -----------------------" \
      >> $TMPFILE1

    if [ $XITVAL != 0 ]; then
         /bin/cat $TMPFILE1 | /bin/mail -s "rkhunter Daily Run on $(hostname)" $MAILTO
    fi
    /bin/cat $TMPFILE1 >> $LOGFILE
  fi

  # Delete the gating lockfile
  /bin/rm -f /var/lock/subsys/rkhunter
fi

# Delete the secure tempfile
/bin/rm -f $TMPFILE1

exit $XITVAL
1	slords	1.1	#!/bin/sh
2			# 01-rkhunter A shell script to update and run rkhunter via CRON
3
4			XITVAL=0
5
6			# Get a secure tempfile
7	slords	1.2	TMPFILE1=`/bin/mktemp -p /var/lib/rkhunter rkhcronlog.XXXXXXXXXX` \|\| exit 1
8	slords	1.1
9			if [ ! -e /var/lock/subsys/rkhunter ]; then
10
11			# Try to keep the SysInit boot scan from colliding with us (highly unlikely)
12			/bin/touch /var/lock/subsys/rkhunter
13
14			# Source system configuration parameters.
15			if [ -e /etc/sysconfig/rkhunter ] ; then
16			. /etc/sysconfig/rkhunter
17			else
18			MAILTO=root@localhost
19			fi
20
21			# If a diagnostic mode scan was requested, setup the parameters
22			if [ "$DIAG_SCAN" == "yes" ]; then
23			RKHUNTER_FLAGS="--checkall --skip-keypress --nocolors --quiet --appendlog --display-logfile"
24			else
25			RKHUNTER_FLAGS="--cronjob --nocolors --report-warnings-only"
26			fi
27
28			# Set a few critical parameters
29			RKHUNTER=/usr/bin/rkhunter
30			LOGFILE=/var/log/rkhunter/rkhunter.log
31
32			# Run RootKit Hunter if available
33			if [ -x $RKHUNTER ]; then
34			/bin/echo -e "\n--------------------- Start Rootkit Hunter Update ---------------------" \
35			> $TMPFILE1
36			/bin/nice -n 10 $RKHUNTER --update --nocolors 2>&1 >> $TMPFILE1
37			/bin/echo -e "\n---------------------- Start Rootkit Hunter Scan ----------------------" \
38			>> $TMPFILE1
39			/bin/nice -n 10 $RKHUNTER $RKHUNTER_FLAGS 2>&1 >> $TMPFILE1
40			XITVAL=$?
41			/bin/echo -e "\n----------------------- End Rootkit Hunter Scan -----------------------" \
42			>> $TMPFILE1
43
44			if [ $XITVAL != 0 ]; then
45			/bin/cat $TMPFILE1 \| /bin/mail -s "rkhunter Daily Run on $(hostname)" $MAILTO
46			fi
47			/bin/cat $TMPFILE1 >> $LOGFILE
48			fi
49
50			# Delete the gating lockfile
51			/bin/rm -f /var/lock/subsys/rkhunter
52			fi
53
54			# Delete the secure tempfile
55			/bin/rm -f $TMPFILE1
56
57			exit $XITVAL