Linux 服务器日常巡检脚本分享 #yyds干货盘点# _服务器

【Linux 服务器日常巡检脚本分享 #yyds干货盘点#】大鹏一日同风起，扶摇直上九万里。这篇文章主要讲述Linux 服务器日常巡检脚本分享 #yyds干货盘点#相关的知识，希望能为你提供帮助。

#!/bin/bash #主机信息每日巡检IPADDR=$(ifconfig eth0|grep inet addr|awk -F [ :] print $13) #环境变量PATH没设好，在cron里执行时有很多命令会找不到 export PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin:/root/bin source /etc/profile[ $(id -u) -gt 0 ] & & echo "请用root用户执行此脚本！" & & exit 1 centosVersion=$(awk print $(NF-1) /etc/redhat-release) VERSION="2020-03-16"#日志相关 PROGPATH=`echo $0 | sed -e s,[\\\\/][^\\\\/][^\\\\/]*$,,` [ -f $PROGPATH ] & & PROGPATH="." LOGPATH="$PROGPATH/log" [ -e $LOGPATH ] || mkdir $LOGPATH RESULTFILE="$LOGPATH/HostDailyCheck-$IPADDR-`date +%Y%m%d`.txt"#定义报表的全局变量 report_DateTime="" #日期 ok report_Hostname="" #主机名 ok report_OSRelease="" #发行版本 ok report_Kernel="" #内核 ok report_Language="" #语言/编码 ok report_LastReboot="" #最近启动时间 ok report_Uptime="" #运行时间（天） ok report_CPUs="" #CPU数量 ok report_CPUType="" #CPU类型 ok report_Arch="" #CPU架构 ok report_MemTotal="" #内存总容量(MB) ok report_MemFree="" #内存剩余(MB) ok report_MemUsedPercent="" #内存使用率% ok report_DiskTotal="" #硬盘总容量(GB) ok report_DiskFree="" #硬盘剩余(GB) ok report_DiskUsedPercent="" #硬盘使用率% ok report_InodeTotal="" #Inode总量 ok report_InodeFree="" #Inode剩余 ok report_InodeUsedPercent="" #Inode使用率 ok report_IP="" #IP地址 ok report_MAC="" #MAC地址 ok report_Gateway="" #默认网关 ok report_DNS="" #DNS ok report_Listen="" #监听 ok report_Selinux="" #Selinux ok report_Firewall="" #防火墙 ok report_USERs="" #用户 ok report_USEREmptyPassword="" #空密码用户 ok report_USERTheSameUID="" #相同ID的用户 ok report_PasswordExpiry="" #密码过期（天） ok report_RootUser="" #root用户 ok report_Sudoers="" #sudo授权 ok report_SSHAuthorized="" #SSH信任主机 ok report_SSHDProtocolVersion="" #SSH协议版本 ok report_SSHDPermitRootLogin="" #允许root远程登录 ok report_DefunctProsess="" #僵尸进程数量 ok report_SelfInitiatedService="" #自启动服务数量 ok report_SelfInitiatedProgram="" #自启动程序数量 ok report_RuningService="" #运行中服务数 ok report_Crontab="" #计划任务数 ok report_Syslog="" #日志服务 ok report_SNMP="" #SNMP OK report_NTP="" #NTP ok report_JDK="" #JDK版本 ok function version() echo "" echo "" echo "系统巡检脚本：Version $VERSION"function getCpuStatus() echo "" echo "" echo "############################ CPU检查 #############################" Physical_CPUs=$(grep "physical id" /proc/cpuinfo| sort | uniq | wc -l) Virt_CPUs=$(grep "processor" /proc/cpuinfo | wc -l) CPU_Kernels=$(grep "cores" /proc/cpuinfo|uniq| awk -F :print $2) CPU_Type=$(grep "model name" /proc/cpuinfo | awk -F :print $2 | sort | uniq) CPU_Arch=$(uname -m) echo "物理CPU个数:$Physical_CPUs" echo "逻辑CPU个数:$Virt_CPUs" echo "每CPU核心数:$CPU_Kernels" echo " CPU型号:$CPU_Type" echo " CPU架构:$CPU_Arch" #报表信息 report_CPUs=$Virt_CPUs #CPU数量 report_CPUType=$CPU_Type #CPU类型 report_Arch=$CPU_Arch #CPU架构function getMemStatus() echo "" echo "" echo "############################ 内存检查 ############################" if [[ $centosVersion < 7 ]]; then free -mo else free -h fi #报表信息 MemTotal=$(grep MemTotal /proc/meminfo| awk print $2) #KB MemFree=$(grep MemFree /proc/meminfo| awk print $2) #KB let MemUsed=MemTotal-MemFree MemPercent=$(awk "BEGIN if($MemTotal==0)printf 100elseprintf \\"%.2f\\",$MemUsed*100/$MemTotal") report_MemTotal="$((MemTotal/1024))""MB" #内存总容量(MB) report_MemFree="$((MemFree/1024))""MB" #内存剩余(MB) report_MemUsedPercent="$(awk "BEGIN if($MemTotal==0)printf 100elseprintf \\"%.2f\\",$MemUsed*100/$MemTotal")""%" #内存使用率%function getDiskStatus() echo "" echo "" echo "############################ 磁盘检查 ############################" df -hiP | sed s/Mounted on/Mounted/> /tmp/inode df -hTP | sed s/Mounted on/Mounted/> /tmp/disk join /tmp/disk /tmp/inode | awk print $1,$2,"|",$3,$4,$5,$6,"|",$8,$9,$10,$11,"|",$12| column -t #报表信息 diskdata=https://www.songbingjia.com/android/$(df -TP | sed 1d | awk $2!="tmpfs"print) #KB disktotal=$(echo "$diskdata" | awk total+=$3ENDprint total) #KB diskused=$(echo "$diskdata" | awk total+=$4ENDprint total) #KB diskfree=$((disktotal-diskused)) #KB diskusedpercent=$(echo $disktotal $diskused | awk if($1==0)printf 100elseprintf "%.2f",$2*100/$1) inodedata=https://www.songbingjia.com/android/$(df -iTP | sed 1d | awk $2!="tmpfs"print) inodetotal=$(echo "$inodedata" | awk total+=$3ENDprint total) inodeused=$(echo "$inodedata" | awk total+=$4ENDprint total) inodefree=$((inodetotal-inodeused)) inodeusedpercent=$(echo $inodetotal $inodeused | awk if($1==0)printf 100elseprintf "%.2f",$2*100/$1) report_DiskTotal=$((disktotal/1024/1024))"GB" #硬盘总容量(GB) report_DiskFree=$((diskfree/1024/1024))"GB" #硬盘剩余(GB) report_DiskUsedPercent="$diskusedpercent""%" #硬盘使用率% report_InodeTotal=$((inodetotal/1000))"K" #Inode总量 report_InodeFree=$((inodefree/1000))"K" #Inode剩余 report_InodeUsedPercent="$inodeusedpercent""%" #Inode使用率%function getSystemStatus() echo "" echo "" echo "############################ 系统检查 ############################" if [ -e /etc/sysconfig/i18n ]; then default_LANG="$(grep "LANG=" /etc/sysconfig/i18n | grep -v "^#" | awk -F " print $2)" else default_LANG=$LANG fi export LANG="en_US.UTF-8" Release=$(cat /etc/redhat-release 2> /dev/null) Kernel=$(uname -r) OS=$(uname -o) Hostname=$(uname -n) SELinux=$(/usr/sbin/sestatus | grep "SELinux status: " | awk print $3) LastReboot=$(who -b | awk print $3,$4) uptime=$(uptime | sed s/.*up \$[^,]*\$, .*/\\1/) echo " 系统：$OS" echo " 发行版本：$Release" echo " 内核：$Kernel" echo " 主机名：$Hostname" echo " SELinux：$SELinux" echo "语言/编码：$default_LANG" echo " 当前时间：$(date +%F %T)" echo " 最后启动：$LastReboot" echo " 运行时间：$uptime" #报表信息 report_DateTime=$(date +"%F %T") #日期 report_Hostname="$Hostname" #主机名 report_OSRelease="$Release" #发行版本 report_Kernel="$Kernel" #内核 report_Language="$default_LANG" #语言/编码 report_LastReboot="$LastReboot" #最近启动时间 report_Uptime="$uptime" #运行时间（天） report_Selinux="$SELinux" export LANG="$default_LANG"function getServiceStatus() echo "" echo "" echo "############################ 服务检查 ############################" echo "" if [[ $centosVersion > 7 ]]; then conf=$(systemctl list-unit-files --type=service --state=enabled --no-pager | grep "enabled") process=$(systemctl list-units --type=service --state=running --no-pager | grep ".service") #报表信息 report_SelfInitiatedService="$(echo "$conf" | wc -l)" #自启动服务数量 report_RuningService="$(echo "$process" | wc -l)" #运行中服务数量 else conf=$(/sbin/chkconfig | grep -E ":on|:启用") process=$(/sbin/service --status-all 2> /dev/null | grep -E "is running|正在运行") #报表信息 report_SelfInitiatedService="$(echo "$conf" | wc -l)" #自启动服务数量 report_RuningService="$(echo "$process" | wc -l)" #运行中服务数量 fi echo "服务配置" echo "--------" echo "$conf" | column -t echo "" echo "正在运行的服务" echo "--------------" echo "$process"function getAutoStartStatus() echo "" echo "" echo "############################ 自启动检查 ##########################" conf=$(grep -v "^#" /etc/rc.d/rc.local| sed /^$/d) echo "$conf" #报表信息 report_SelfInitiatedProgram="$(echo $conf | wc -l)" #自启动程序数量function getLoginStatus() echo "" echo "" echo "############################ 登录检查 ############################" last | headfunction getNetworkStatus() echo "" echo "" echo "############################ 网络检查 ############################" if [[ $centosVersion < 7 ]]; then /sbin/ifconfig -a | grep -v packets | grep -v collisions | grep -v inet6 else #ip a for i in $(ip link | grep BROADCAST | awk -F: print $2); do ip add show $i | grep -E "BROADCAST|global"| awk print $2 | tr \\n; echo "" ; done fi GATEWAY=$(ip route | grep default | awk print $3) DNS=$(grep nameserver /etc/resolv.conf| grep -v "#" | awk print $2 | tr \\n , | sed s/,$//) echo "" echo "网关：$GATEWAY " echo " DNS：$DNS" #报表信息 IP=$(ip -f inet addr | grep -v 127.0.0.1 | grep inet | awk print $NF,$2 | tr \\n , | sed s/,$//) MAC=$(ip link | grep -v "LOOPBACK\\|loopback" | awk print $2 | sed N; s/\\n// | tr \\n , | sed s/,$//) report_IP="$IP" #IP地址 report_MAC=$MAC #MAC地址 report_Gateway="$GATEWAY" #默认网关 report_DNS="$DNS" #DNSfunction getListenStatus() echo "" echo "" echo "############################ 监听检查 ############################" TCPListen=$(ss -ntul | column -t) echo "$TCPListen" #报表信息 report_Listen="$(echo "$TCPListen"| sed 1d | awk /tcp/ print $5 | awk -F: print $NF | sort | uniq | wc -l)"function getCronStatus() echo "" echo "" echo "############################ 计划任务检查 ########################" Crontab=0 for shell in $(grep -v "/sbin/nologin" /etc/shells); do for user in $(grep "$shell" /etc/passwd| awk -F: print $1); do crontab -l -u $user > /dev/null 2> & 1 status=$? if [ $status -eq 0 ]; then echo "$user" echo "--------" crontab -l -u $user let Crontab=Crontab+$(crontab -l -u $user | wc -l) echo "" fi done done #计划任务 find /etc/cron* -type f | xargs -i ls -l| column -t let Crontab=Crontab+$(find /etc/cron* -type f | wc -l) #报表信息 report_Crontab="$Crontab" #计划任务数function getHowLongAgo() # 计算一个时间戳离现在有多久了 datetime="$*" [ -z "$datetime" ] & & echo "错误的参数：getHowLongAgo() $*" Timestamp=$(date +%s -d "$datetime") #转化为时间戳 Now_Timestamp=$(date +%s) Difference_Timestamp=$(($Now_Timestamp-$Timestamp)) days=0; hours=0; minutes=0; sec_in_day=$((60*60*24)); sec_in_hour=$((60*60)); sec_in_minute=60 while (( $(($Difference_Timestamp-$sec_in_day)) > 1 )) do let Difference_Timestamp=Difference_Timestamp-sec_in_day let days++ done while (( $(($Difference_Timestamp-$sec_in_hour)) > 1 )) do let Difference_Timestamp=Difference_Timestamp-sec_in_hour let hours++ done echo "$days 天 $hours 小时前"function getUserLastLogin() # 获取用户最近一次登录的时间，含年份 # 很遗憾last命令不支持显示年份，只有"last -t YYYYMMDDHHMMSS"表示某个时间之间的登录，我们只能用最笨的方法了，对比今天之前和今年元旦之前（或者去年之前和前年之前……）某个用户登录次数，如果登录统计次数有变化，则说明最近一次登录是今年。 username=$1 : $username:="`whoami`" thisYear=$(date +%Y) oldesYear=$(last | tail -n1 | awk print $NF) while(( $thisYear > = $oldesYear)); do loginBeforeToday=$(last $username | grep $username | wc -l) loginBeforeNewYearsDayOfThisYear=$(last $username -t $thisYear"0101000000" | grep $username | wc -l) if [ $loginBeforeToday -eq 0 ]; then echo "从未登录过" break elif [ $loginBeforeToday -gt $loginBeforeNewYearsDayOfThisYear ]; then lastDateTime=$(last -i $username | head -n1 | awk for(i=4; i< (NF-2); i++)printf"%s ",$i)" $thisYear" #格式如: Sat Nov 2 20:33 2015 lastDateTime=$(date "+%Y-%m-%d %H:%M:%S" -d "$lastDateTime") echo "$lastDateTime" break else thisYear=$((thisYear-1)) fi donefunction getUserStatus() echo "" echo "" echo "############################ 用户检查 ############################" #/etc/passwd 最后修改时间 pwdfile="$(cat /etc/passwd)" Modify=$(stat /etc/passwd | grep Modify | tr .| awk print $2,$3)echo "/etc/passwd 最后修改时间：$Modify ($(getHowLongAgo $Modify))" echo "" echo "特权用户" echo "--------" RootUser="" for user in $(echo "$pwdfile" | awk -F: print $1); do if [ $(id -u $user) -eq 0 ]; then echo "$user" RootUser="$RootUser,$user" fi done echo "" echo "用户列表" echo "--------" USERs=0 echo "$( echo "用户名 UID GID HOME SHELL 最后一次登录" for shell in $(grep -v "/sbin/nologin" /etc/shells); do for username in $(grep "$shell" /etc/passwd| awk -F: print $1); do userLastLogin="$(getUserLastLogin $username)" echo "$pwdfile" | grep -w "$username" |grep -w "$shell"| awk -F: -v lastlogin="$(echo "$userLastLogin" | tr_)" print $1,$3,$4,$6,$7,lastlogin done let USERs=USERs+$(echo "$pwdfile" | grep "$shell"| wc -l) done )" | column -t echo "" echo "空密码用户" echo "----------" USEREmptyPassword="" for shell in $(grep -v "/sbin/nologin" /etc/shells); do for user in $(echo "$pwdfile" | grep "$shell" | cut -d: -f1); do r=$(awk -F: $2=="!!"print $1 /etc/shadow | grep -w $user) if [ ! -z $r ]; then echo $r USEREmptyPassword="$USEREmptyPassword,"$r fi done done echo "" echo "相同ID的用户" echo "------------" USERTheSameUID="" UIDs=$(cut -d: -f3 /etc/passwd | sort | uniq -c | awk $1> 1print $2) for uid in $UIDs; do echo -n "$uid"; USERTheSameUID="$uid" r=$(awk -F: ORS=""; $3=="$uid"print ":",$1 /etc/passwd) echo "$r" echo "" USERTheSameUID="$USERTheSameUID $r," done #报表信息 report_USERs="$USERs" #用户 report_USEREmptyPassword=$(echo $USEREmptyPassword | sed s/^,//) report_USERTheSameUID=$(echo $USERTheSameUID | sed s/,$//) report_RootUser=$(echo $RootUser | sed s/^,//) #特权用户function getPasswordStatus echo "" echo "" echo "############################ 密码检查 ############################" pwdfile="$(cat /etc/passwd)" echo "" echo "密码过期检查" echo "------------" result="" for shell in $(grep -v "/sbin/nologin" /etc/shells); do for user in $(echo "$pwdfile" | grep "$shell" | cut -d: -f1); do get_expiry_date=$(/usr/bin/chage -l $user | grep Password expires | cut -d: -f2) if [[ $get_expiry_date =never || $get_expiry_date = never ]]; then printf "%-15s 永不过期\\n" $user result="$result,$user:never" else password_expiry_date=$(date -d "$get_expiry_date" "+%s") current_date=$(date "+%s") diff=$(($password_expiry_date-$current_date)) let DAYS=$(($diff/(60*60*24))) printf "%-15s %s天后过期\\n" $user $DAYS result="$result,$user:$DAYS days" fi done done report_PasswordExpiry=$(echo $result | sed s/^,//)echo "" echo "密码策略检查" echo "------------" grep -v "#" /etc/login.defs | grep -E "PASS_MAX_DAYS|PASS_MIN_DAYS|PASS_MIN_LEN|PASS_WARN_AGE"function getSudoersStatus() echo "" echo "" echo "############################ Sudoers检查 #########################" conf=$(grep -v "^#" /etc/sudoers| grep -v "^Defaults" | sed /^$/d) echo "$conf" echo "" #报表信息 report_Sudoers="$(echo $conf | wc -l)"function getInstalledStatus() echo "" echo "" echo "############################ 软件检查 ############################" rpm -qa --last | head | column -t function getProcessStatus() echo "" echo "" echo "############################ 进程检查 ############################" if [ $(ps -ef | grep defunct | grep -v grep | wc -l) -ge 1 ]; then echo "" echo "僵尸进程"; echo "--------" ps -ef | head -n1 ps -ef | grep defunct | grep -v grep fi echo "" echo "内存占用TOP10" echo "-------------" echo -e "PID %MEM RSS COMMAND $(ps aux | awk print $2, $4, $6, $11 | sort -k3rn | head -n 10 )"| column -t echo "" echo "CPU占用TOP10" echo "------------" top b -n1 | head -17 | tail -11 #报表信息 report_DefunctProsess="$(ps -ef | grep defunct | grep -v grep|wc -l)"function getJDKStatus() echo "" echo "" echo "############################ JDK检查 #############################" java -version 2> /dev/null if [ $? -eq 0 ]; then java -version 2> & 1 fi echo "JAVA_HOME=\\"$JAVA_HOME\\"" #报表信息 report_JDK="$(java -version 2> & 1 | grep version | awk print $1,$3 | tr -d ")"function getSyslogStatus() echo "" echo "" echo "############################ syslog检查 ##########################" echo "服务状态：$(getState rsyslog)" echo "" echo "/etc/rsyslog.conf" echo "-----------------" cat /etc/rsyslog.conf 2> /dev/null | grep -v "^#" | grep -v "^\\\\$" | sed /^$/d | column -t #报表信息 report_Syslog="$(getState rsyslog)"function getFirewallStatus() echo "" echo "" echo "############################ 防火墙检查 ##########################" #防火墙状态，策略等 if [[ $centosVersion < 7 ]]; then /etc/init.d/iptables status > /dev/null 2> & 1 status=$? if [ $status -eq 0 ]; then s="active" elif [ $status -eq 3 ]; then s="inactive" elif [ $status -eq 4 ]; then s="permission denied" else s="unknown" fi else s="$(getState iptables)" fi echo "iptables: $s" echo "" echo "/etc/sysconfig/iptables" echo "-----------------------" cat /etc/sysconfig/iptables 2> /dev/null #报表信息 report_Firewall="$s"function getSNMPStatus() #SNMP服务状态，配置等 echo "" echo "" echo "############################ SNMP检查 ############################" status="$(getState snmpd)" echo "服务状态：$status" echo "" if [ -e /etc/snmp/snmpd.conf ]; then echo "/etc/snmp/snmpd.conf" echo "--------------------" cat /etc/snmp/snmpd.conf 2> /dev/null | grep -v "^#" | sed /^$/d fi #报表信息 report_SNMP="$(getState snmpd)"function getState() if [[ $centosVersion < 7 ]]; then if [ -e "/etc/init.d/$1" ]; then if [ `/etc/init.d/$1 status 2> /dev/null | grep -E "is running|正在运行" | wc -l` -ge 1 ]; then r="active" else r="inactive" fi else r="unknown" fi else #CentOS 7+ r="$(systemctl is-active $1 2> & 1)" fi echo "$r"function getSSHStatus() #SSHD服务状态，配置,受信任主机等 echo "" echo "" echo "############################ SSH检查 #############################" #检查受信任主机 pwdfile="$(cat /etc/passwd)" echo "服务状态：$(getState sshd)" Protocol_Version=$(cat /etc/ssh/sshd_config | grep Protocol | awk print $2) echo "SSH协议版本：$Protocol_Version" echo "" echo "信任主机" echo "--------" authorized=0 for user in $(echo "$pwdfile" | grep /bin/bash | awk -F: print $1); do authorize_file=$(echo "$pwdfile" | grep -w $user | awk -F: printf $6"/.ssh/authorized_keys") authorized_host=$(cat $authorize_file 2> /dev/null | awk print $3 | tr \\n , | sed s/,$//) if [ ! -z $authorized_host ]; then echo "$user 授权 \\"$authorized_host\\" 无密码访问" fi let authorized=authorized+$(cat $authorize_file 2> /dev/null | awk print $3|wc -l) doneecho "" echo "是否允许ROOT远程登录" echo "--------------------" config=$(cat /etc/ssh/sshd_config | grep PermitRootLogin) firstChar=$config:0:1 if [ $firstChar == "#" ]; then PermitRootLogin="yes" #默认是允许ROOT远程登录的 else PermitRootLogin=$(echo $config | awk print $2) fi echo "PermitRootLogin $PermitRootLogin"echo "" echo "/etc/ssh/sshd_config" echo "--------------------" cat /etc/ssh/sshd_config | grep -v "^#" | sed /^$/d#报表信息 report_SSHAuthorized="$authorized" #SSH信任主机 report_SSHDProtocolVersion="$Protocol_Version" #SSH协议版本 report_SSHDPermitRootLogin="$PermitRootLogin" #允许root远程登录function getNTPStatus() #NTP服务状态，当前时间，配置等 echo "" echo "" echo "############################ NTP检查 #############################" if [ -e /etc/ntp.conf ]; then echo "服务状态：$(getState ntpd)" echo "" echo "/etc/ntp.conf" echo "-------------" cat /etc/ntp.conf 2> /dev/null | grep -v "^#" | sed /^$/d fi #报表信息 report_NTP="$(getState ntpd)"function uploadHostDailyCheckReport() json=" \\"DateTime\\":\\"$report_DateTime\\", \\"Hostname\\":\\"$report_Hostname\\", \\"OSRelease\\":\\"$report_OSRelease\\", \\"Kernel\\":\\"$report_Kernel\\", \\"Language\\":\\"$report_Language\\", \\"LastReboot\\":\\"$report_LastReboot\\", \\"Uptime\\":\\"$report_Uptime\\", \\"CPUs\\":\\"$report_CPUs\\", \\"CPUType\\":\\"$report_CPUType\\", \\"Arch\\":\\"$report_Arch\\", \\"MemTotal\\":\\"$report_MemTotal\\", \\"MemFree\\":\\"$report_MemFree\\", \\"MemUsedPercent\\":\\"$report_MemUsedPercent\\", \\"DiskTotal\\":\\"$report_DiskTotal\\", \\"DiskFree\\":\\"$report_DiskFree\\", \\"DiskUsedPercent\\":\\"$report_DiskUsedPercent\\", \\"InodeTotal\\":\\"$report_InodeTotal\\", \\"InodeFree\\":\\"$report_InodeFree\\", \\"InodeUsedPercent\\":\\"$report_InodeUsedPercent\\", \\"IP\\":\\"$report_IP\\", \\"MAC\\":\\"$report_MAC\\", \\"Gateway\\":\\"$report_Gateway\\", \\"DNS\\":\\"$report_DNS\\", \\"Listen\\":\\"$report_Listen\\", \\"Selinux\\":\\"$report_Selinux\\", \\"Firewall\\":\\"$report_Firewall\\", \\"USERs\\":\\"$report_USERs\\", \\"USEREmptyPassword\\":\\"$report_USEREmptyPassword\\", \\"USERTheSameUID\\":\\"$report_USERTheSameUID\\", \\"PasswordExpiry\\":\\"$report_PasswordExpiry\\", \\"RootUser\\":\\"$report_RootUser\\", \\"Sudoers\\":\\"$report_Sudoers\\", \\"SSHAuthorized\\":\\"$report_SSHAuthorized\\", \\"SSHDProtocolVersion\\":\\"$report_SSHDProtocolVersion\\", \\"SSHDPermitRootLogin\\":\\"$report_SSHDPermitRootLogin\\", \\"DefunctProsess\\":\\"$report_DefunctProsess\\", \\"SelfInitiatedService\\":\\"$report_SelfInitiatedService\\", \\"SelfInitiatedProgram\\":\\"$report_SelfInitiatedProgram\\", \\"RuningService\\":\\"$report_RuningService\\", \\"Crontab\\":\\"$report_Crontab\\", \\"Syslog\\":\\"$report_Syslog\\", \\"SNMP\\":\\"$report_SNMP\\", \\"NTP\\":\\"$report_NTP\\", \\"JDK\\":\\"$report_JDK\\" " #echo "$json" curl -l -H "Content-type: application/json" -X POST -d "$json" "$uploadHostDailyCheckReportApi" 2> /dev/nullfunction getchage_file_24h()echo "############################ 文件检查 #############################" check2=$(find / -name *.sh -mtime -1) check21=$(find / -name *.asp -mtime -1) check22=$(find / -name *.php -mtime -1) check23=$(find / -name *.aspx -mtime -1) check24=$(find / -name *.jsp -mtime -1) check25=$(find / -name *.html -mtime -1) check26=$(find / -name *.htm -mtime -1) check9=$(find / -name core -exec ls -l\\; ) check10=$(cat /etc/crontab) check12=$(ls -alt /usr/bin | head -10) cat < < EOF############################查看所有被修改过的文件返回最近24小时内的############################ $check2 $check21 $check22 $check23 $check24 $check25 $check26 $line############################检查定时文件的完整性############################ $check10 $line############################查看系统命令是否被替换############################ $check12 $line EOFfunction check() version getSystemStatus getCpuStatus getMemStatus getDiskStatus getNetworkStatus getListenStatus getProcessStatus getServiceStatus getAutoStartStatus getLoginStatus getCronStatus getUserStatus getPasswordStatus getSudoersStatus getJDKStatus getFirewallStatus getSSHStatus getSyslogStatus getSNMPStatus getNTPStatus getInstalledStatus getchage_file_24h#执行检查并保存检查结果 check > $RESULTFILEecho "检查结果：$RESULTFILE" echo -e "`date "+%Y-%m-%d %H:%M:%S"` 企业平台巡检报告"| mail -a $RESULTFILE -s "企业平台巡检报告" test@163.com

Linux 服务器日常巡检脚本分享 #yyds干货盘点#

推荐阅读

如何下载bt磁力种子

亚索在永恩出来后新台词 mysql的特征及性能

三星W2019手机屏幕失灵维修价格

解压包子使用感怎么样网红解压包子里面是什么

经常莫名其妙的就来一下胸口痛，想知道怎么了

非法吸收公众存款罪怎么处罚非法吸收公众存款罪怎么处罚的

方太烤箱烧烤用哪个模式方太烤箱烤红薯用哪个模式

大金空调制冷可以制热没反应大金空调为什么加热不制冷解决步骤

湖山入映—西湖游记

石斛粉一天吃多少克为好

《LOL》IG经理透露,战队被官方针对,选手在韩服无法正常游戏,这事你怎么看？

莲子煮粥一次放几个

数据分析行业的薪酬,游戏公司数据分析工程师薪酬

原神神鹤是谁原神神鹤雨海阵容厉害吗

?V怎么读汜怎么读

有没有专门抓小三的机构专业捉小三团队多少钱

公司不证明个人可以申请工伤鉴定吗

大众辉昂的发动机是进口的吗大众辉昂的发动机是进口的吗多少钱

八下期中语文考卷

二零小麦粉和三零面粉的区别二零小麦粉和三零面粉的区别是什么