Commit 52b61579853ee251c0fa6689a29e0ba3c8f68bff - debian-goodies

Imported Debian version 0.27 Javier Fernandez-Sanguino 11 years ago

6 changed file(s) with 407 addition(s) and 30 deletion(s). Raw diff Collapse all Expand all

+188

-14

checkrestart less more

0	0	#!/usr/bin/python
1	1
	2	# Copyright (C) 2001 Matt Zimmerman <mdz@debian.org>
	3	#
	4	# Further updated by Javier Fernandez-Sanguino <jfs@debian.org>
	5	# - included patch from Justin Pryzby <justinpryzby_AT_users.sourceforge.net>
	6	# to work with the latest Lsof - modify to reduce false positives by not
	7	# complaining about deleted inodes/files under /tmp/, /var/log/ or named
	8	# /SYSV.
	9
	10	# PENDING:
	11	# - included code from 'psdel' contributed by Sam Morris <sam_AT_robots.org.uk> to
	12	# make the program work even if lsof is not installed
	13	# (available at http://robots.org.uk/src/psdel)
	14	#
	15	#
	16	# This program is free software; you can redistribute it and/or modify
	17	# it under the terms of the GNU General Public License as published by
	18	# the Free Software Foundation; either version 2, or (at your option)
	19	# any later version.
	20
	21	# This program is distributed in the hope that it will be useful,
	22	# but WITHOUT ANY WARRANTY; without even the implied warranty of
	23	# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
	24	# GNU General Public License for more details.
	25
	26	# You should have received a copy of the GNU General Public License
	27	# along with this program; if not, write to the Free Software
	28	# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston,
	29	# MA 02110-1301 USA
	30	#
	31	# On Debian systems, a copy of the GNU General Public License may be
	32	# found in /usr/share/common-licenses/GPL.
	33
2	34	import sys
3		import os
	35	import os, errno
4	36	import re
	37	import stat
	38	import pwd
	39	import sys
	40	import string
5	41
6	42	if os.getuid() != 0:
7	43	sys.stderr.write('This program must be run as root\n')
8	44	sys.stderr.write('in order to collect information about all open file descriptors\n')
9	45	sys.exit(1)
10	46
	47
	48	def find_cmd(cmd):
	49	dirs = [ '/', '/usr/', '/usr/local/', sys.prefix ]
	50	for d in dirs:
	51	for sd in ('bin', 'sbin'):
	52	location = os.path.join(d, sd, cmd)
	53	if os.path.exists(location):
	54	return location
	55	return 0
	56
	57
11	58	def main():
12	59	process = None
13		processes = {}
14		for line in os.popen('lsof +L1 -F n').readlines():
15		field, data = line[0], line[1:-1]
16
17		if field == 'p':
18		process = processes.setdefault(data,Process(int(data)))
19		elif field == 'n':
20		process.files.append(data)
21
22		toRestart = filter(lambda process: process.needsRestart(),
23		processes.values())
	60	toRestart = {}
	61
	62	toRestart = lsofcheck()
	63	# Check if we have lsof, if not, use psdel
	64	# if find_cmd('lsof'):
	65	# toRestart = lsofcheck()
	66	# else:
	67	# TODO - This does not work yet:
	68	# toRestart = psdelcheck()
	69
24	70	print "Found %d processes using old versions of upgraded files" % len(toRestart)
25	71
26	72	if len(toRestart) == 0:

96	142	for process in package.processes:
97	143	print "\t%s\t%s" % (process.pid,process.program)
98	144
	145	def lsofcheck():
	146	processes = {}
	147
	148	for line in os.popen('lsof +XL -F nf').readlines():
	149	field, data = line[0], line[1:-1]
	150
	151	if field == 'p':
	152	process = processes.setdefault(data,Process(int(data)))
	153	elif field == 'k':
	154	process.links.append(data)
	155	elif field == 'n':
	156	# Remove the previous entry to check if this is something we should do
	157	if data.startswith('/SYSV'):
	158	last = process.descriptors.pop()
	159	if not re.compile("DEL").search(last):
	160	process.files.append(data)
	161	else:
	162	process.files.append(data)
	163	elif field == 'f':
	164	process.descriptors.append(data)
	165
	166	toRestart = filter(lambda process: process.needsRestart(),
	167	processes.values())
	168	return toRestart
	169
	170	def psdelcheck():
	171	# TODO - Needs to be fixed to work here
	172	# Useful for seeing which processes need to be restarted after you upgrade
	173	# programs or shared libraries. Written to replace checkrestart(1) from the
	174	# debian-goodies, which often misses out processes due to bugs in lsof; see
	175	# <http://bugs.debian.org/264985> for more information.
	176
	177	numeric = re.compile(r'\d+')
	178	toRestart = map (delmaps, map (string.atoi, filter (numeric.match, os.listdir('/proc'))))
	179	return toRestart
	180
	181	def delmaps (pid):
	182	processes = {}
	183	process = processes.setdefault(pid,Process(int(pid)))
	184	deleted = re.compile(r'(.*) $deleted$$')
	185	boring = re.compile(r'/(dev/zero\|SYSV([\da-f]{8}))')
	186
	187	mapline = re.compile(r'^[\da-f]{8}-[\da-f]{8} [r-][w-][x-][sp-] '
	188	r'[\da-f]{8} [\da-f]{2}:[\da-f]{2} (\d+) *(.+)( $deleted$)?\n$')
	189	maps = open('/proc/%d/maps' % (pid))
	190	for line in maps.readlines ():
	191	m = mapline.match (line)
	192	if (m):
	193	inode = string.atoi (m.group (1))
	194	file = m.group (2)
	195	if inode == 0:
	196	continue
	197	# remove ' (deleted)' suffix
	198	if deleted.match (file):
	199	file = file [0:-10]
	200	if boring.match (file):
	201	continue
	202	# list file names whose inode numbers do not match their on-disk
	203	# values; or files that do not exist at all
	204	try:
	205	if os.stat (file)[stat.ST_INO] != inode:
	206	process = processes.setdefault(pid,Process(int(pid)))
	207	except OSError, (e, strerror):
	208	if e == errno.ENOENT:
	209	process = processes.setdefault(pid,Process(int(pid)))
	210	else:
	211	sys.stderr.write ('checkrestart (psdel): %s %s: %s\n' % (SysProcess.get(pid).info (), file, os.strerror (e)))
	212	else:
	213	print 'checkrestart (psdel): Error parsing "%s"' % (line [0:-1])
	214	maps.close ()
	215
	216	return process
	217
	218
	219	class SysProcess:
	220	re_name = re.compile('Name:\t(.*)$')
	221	re_uids = re.compile('Uid:\t(\d+)\t(\d+)\t(\d+)\t(\d+)$')
	222	processes = {}
	223	def get (pid):
	224	try:
	225	return Process.processes [pid]
	226	except KeyError:
	227	Process.processes [pid] = Process (pid)
	228	return Process.get (pid)
	229
	230	# private
	231	def __init__ (self, pid):
	232	self.pid = pid
	233
	234	status = open ('/proc/%d/status' % (self.pid))
	235	for line in status.readlines ():
	236	m = self.re_name.match (line)
	237	if m:
	238	self.name = m.group (1)
	239	continue
	240	m = self.re_uids.match (line)
	241	if m:
	242	self.user = pwd.getpwuid (string.atoi (m.group (1)))[0]
	243	continue
	244	status.close ()
	245
	246	def info (self):
	247	return '%d %s %s' % (self.pid, self.name, self.user)
	248
99	249	class Process:
100	250	def __init__(self, pid):
101	251	self.pid = pid
102	252	self.files = []
	253	self.descriptors = []
	254	self.links = []
103	255
104	256	try:
105	257	self.program = self.cleanFile(os.readlink('/proc/%d/exe' % self.pid))

114	266	f = f[:null]
115	267	return re.sub('( $deleted$\|.dpkg-new).*$','',f)
116	268
	269	# Check if a process needs to be restarted, previously we would
	270	# just check if it used libraries named '.dpkg-new' since that's
	271	# what dpkg would do. Now we need to be more contrieved.
117	272	def needsRestart(self):
118	273	for f in self.files:
119		if f.endswith('.dpkg-new'):
120		return 1
	274	#print "Checking %s" % f
	275	# We don't care about log files
	276	if f.startswith('/var/log/'):
	277	continue
	278	# Or about files under /tmp
	279	if f.startswith('/tmp/'):
	280	continue
	281	# TODO: it should only care about library files (i.e. /lib, /usr/lib and the like)
	282	# build that check with a regexp to exclude others
	283	if f.endswith(' (deleted)'):
	284	return 1
	285	if re.compile("$path inode=[0-9]+$$").search(f):
	286	return 1
	287	for f in self.descriptors:
	288	# If it begins with SYSV it is not a deleted file
	289	if re.compile("DEL").search(f):
	290	return 1
	291	for f in self.links:
	292	if f == 0:
	293	return 1
121	294	return 0
122	295
123	296	class Package:

128	301
129	302	if __name__ == '__main__':
130	303	main()
	304

+71

-0

checkrestart.1 less more

	0	.\" checkrestart.1 - provide a list of processess that need to be restarted
	1	.\" Copyright (C) 2006 Javier Fernandez-Sanguino
	2	.\" Everybody is allowed to distribute this manual page,
	3	.\" to modify it, and to distribute modifed versions of it.
	4	.TH checkrestart 1 "December 19 2006" "debian\-goodies" "debian\-goodies"
	5	.SH NAME
	6	checkrestart \- check which processes need to be restarted after an upgrade
	7	.SH SYNOPSIS
	8	.B checkrestart
	9	.SH DESCRIPTION
	10	The
	11	.B checkrestart
	12	program tries to determine if there are processes in the system
	13	that need to be restarted after a system upgrade. This is necessary since an upgrade
	14	will usually bring new system libraries and running processes will be still
	15	using the old versions of the libraries. In \fIstable\fP Debian GNU/Linux
	16	systems this is typically needed to eliminate a system exposure to a
	17	vulnerability which might have been fixed by upgrading a library which that
	18	process makes use of.
	19
	20	.P
	21	Consequently,
	22	.B checkrestart
	23	is sometimes used as an audit tool to find outdated versions of libraries in use,
	24	particularly after security upgrades. Administrators should not, however, rely
	25	on its output completely (see \fBBUGS\fP below).
	26
	27	.P
	28	This script needs to run as root in order to obtain the information it needs
	29	for analysis.
	30
	31	.SH EXIT STATUS
	32
	33	The program will exit with error (1) if a non-root user tries to run it. Otherwise,
	34	it will always exit with error status 0.
	35
	36	.SH BUGS
	37	This program might fail if the output of the \fIlsof\fP utility changes since it
	38	depends on it to detect which deleted files are used by processes. It might
	39	also output some false positives depending on the processes' behaviour since
	40	it does not check yet if the (deleted) files in use are really libraries.
	41
	42	.P
	43	.B Checkrestart
	44	is also sensitive to the kernel version in use. And might fail to work with newer
	45	(or older) versions.
	46
	47	.P
	48	A rewrite to make it less dependant on \fIlsof\fP could improve this, however.
	49
	50	.SH SEE ALSO
	51	.B lsof(8)
	52
	53	.SH AUTHOR
	54
	55	.B checkrestart
	56	was written by Matt Zimmerman for the Debian
	57	GNU/Linux distribution.
	58
	59	.SH COPYRIGHT AND LICENCE
	60
	61	Copyright (C) 2001 Matt Zimmerman <mdz@debian.org>
	62
	63	This program is free software; you can redistribute it and/or modify
	64	it under the terms of the GNU General Public License as published by
	65	the Free Software Foundation; either version 2, or (at your option)
	66	any later version.
	67
	68	On Debian systems, a copy of the GNU General Public License may be
	69	found in /usr/share/common-licenses/GPL.
	70

+32

-0

debian/changelog less more

	0	debian-goodies (0.27) unstable; urgency=medium
	1
	2	[ Fixes I would like to see in etch, even though we're on freeze now ]
	3	* Fix checkrestart with patch provided by Justin Pryzby, modify to reduce
	4	false positives by not complaining about deleted inodes/files under
	5	/tmp/, /var/log/ or named /SYSV. This fixes the long-standing issue that
	6	made this script rather useless (related to lsof, see bug #297029, and to
	7	changes in dpkg) (Closes: #264985)
	8	(Note I have included the code from Sam Morris, available at
	9	http://robots.org.uk/src/psdel and contributed in the BTS. But it still
	10	needs to be massaged to work as a replacement for lsof)
	11	* Write a manpage for checkrestart so administrators are aware that this
	12	tool should not be completely relied on.
	13	* Update the version of network-test which fixes some of the bugs already
	14	fixed in the experimental 'ifupdown-extra' package:
	15	[ Note: Post-etch network-test will be removed from this package but
	16	I rather not try to introduce an experimental package such as
	17	ifupdown-extra into etch right now ]
	18	* Make network-test use bash (Closed: #401363)
	19	* Do not analyse resolv.conf lines that have been commented out.
	20	* Change network-test so it does not complain loudly if ethtool is not
	21	installed (just recommends its installation)
	22	* Fix duplicate spaces in the script as well as some typos with patch
	23	provided by Norbert Kiesel (Closed: #400463)
	24	* Change behaviour of network-test when testing ethernet link
	25	(based on ifupdown-extra's 'check-network-cable' tests) this is better
	26	(and more reliable) than just using 'ifconfig' but requires users
	27	install additional software.
	28	* Lintian error fix: FSF address
	29
	30	-- Javier Fernandez-Sanguino Pen~a <jfs@computer.org> Tue, 19 Dec 2006 01:59:13 +0100
	31
0	32	debian-goodies (0.26) unstable; urgency=low
1	33
2	34	* Remove extra space from which-pkg-broke which introduced a syntax

-3

debian/copyright less more

20	20
21	21	# You should have received a copy of the GNU General Public License
22	22	# along with this program; if not, write to the Free Software
23		# Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA
24		# 02111-1307, USA.
25		#
	23	# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston,
	24	# MA 02110-1301 USA
26	25
27	26	On Debian systems, a copy of the GNU General Public License may be
28	27	found in /usr/share/common-licenses/GPL.

-1

debian/rules less more

62	62	# dh_installinit
63	63	# dh_installcron
64	64	dh_installman debget.1 debman.1 dglob.1 dgrep.1 dpigs.1 popbugs.1 \
65		which-pkg-broke.1 network-test.1
	65	which-pkg-broke.1 network-test.1 checkrestart.1
66	66	# dh_installinfo
67	67	# dh_undocumented
68	68	dh_installchangelogs

+113

-12

network-test less more

0	0	#!/bin/bash
1		# Network testing script v 1.3
2		# (c) 2005 Javier Fernandez-Sanguino
	1	# Network testing script v 1.8
	2	# (c) 2005,2006 Javier Fernandez-Sanguino
3	3	#
4	4	# This script will test your system's network configuration using basic
5	5	# tests and providing both information (INFO messages), warnings (WARN)

88	88
89	89	# Check if all commands we need are available
90	90	# NOTE: if using nslookup add "nslookup dnsutils"
91		( echo -e "netstat net-tools\nifconfig net-tools\nping netkit-ping\n\
92		arp net-tools\nip iproute\nhost bind9-host\nmktemp debianutils\nnc netcat" \|
	91	( echo -e "netstat net-tools\nifconfig net-tools\n\
	92	ping netkit-ping\|inetutils-ping\|iputils-ping\n\
	93	arp net-tools\nip iproute\nhost host\|bind9-host\nmktemp debianutils\n\
	94	nc netcat" \|
93	95	while read cmd package; do
94	96	if ! `which $cmd 2>/dev/null >&2`; then
95	97	echo "$cmd is not available! (please install $package)" >&2
96	98	exit 1
97	99	fi
98	100	done ) \|\| exit 1
	101	# Recommended programs
	102	( echo -e "ethtool ethtool" \|
	103	while read cmd package; do
	104	if ! `which $cmd 2>/dev/null >&2`; then
	105	echo "$cmd is not available (consider installing $package)" >&2
	106	exit 1
	107	fi
	108	done )
	109
	110	# Default route for programs
	111	ETHTOOL=/usr/sbin/ethtool
	112	MIITOOL=/sbin/mii-tool
	113
	114	# Other needs
	115	# We need /proc/net
	116	if [ ! -d /proc/net ] ; then
	117	echo "/proc is not available! Please mount it ('mount -t /proc')" >&2
	118	exit 1
	119	fi
99	120
100	121
101	122	# Extract the interface of our default route

138	159	return $status
139	160	}
140	161
	162	check_if_link_miitool () {
	163	ifname=$1
	164	[ ! -x "$MIITOOL" ] && return 0
	165	status=0
	166	if $MIITOOL $ifname 2>&1\| grep -q "no link"; then
	167	status=1
	168	fi
	169	return $status
	170	}
	171
	172	check_if_link_ethtool () {
	173	# Check if the interface has link
	174	# Note: Unlike other sections of the script we need to be root
	175	# to test this
	176	ifname=$1
	177	[ ! -x "$ETHTOOL" ] && return 0
	178	status=0
	179	LINK=`$ETHTOOL $ifname 2>&1\| grep "Link detected"`
	180	# If ethtool fails to print out the link line we break off
	181	# notice that ethtool cannot get the link status out of all
	182	# possible network interfaces
	183	[ -z "$LINK" ] && return
	184	if ! echo $LINK \| grep -q "Link detected: yes" ; then
	185	status=1
	186	fi
	187	return $status
	188	}
	189
	190	check_if_link_iplink () {
	191	ifname=$1
	192	status=0
	193	[ ! -x /sbin/ip ] && return 0
	194	if /sbin/ip link show $ifname 2>&1 \| grep -q "NO-CARRIER"; then
	195	status=1
	196	fi
	197	return $status
	198	}
	199
	200
	201
	202	check_if_link() {
	203	status=-1
	204	iface=$1
	205	# Use ethtool if installed (preferable to mii-tool)
	206	# If none are installed we will test using 'ip link show'
	207	if [ "`id -u`" -eq 0 ] ; then
	208	if [ -x "$ETHTOOL" ] ; then
	209	check_if_link_ethtool $iface
	210	status=$?
	211	elif [ -x "$MIITOOL" ]; then
	212	check_if_link_miitool $iface
	213	status=$?
	214	fi
	215	fi
	216	# If no test has done use ip link
	217	if [ $status -eq -1 ]; then
	218	check_if_link_iplink $iface
	219	status=$?
	220	fi
	221	return $status
	222	}
	223
141	224	# Check network interfaces
142	225	check_if () {
143	226	ifname=$1
144	227	status=0
145	228	[ -z "$ifname" ] && return 1
	229	# Check if the interface has a link
	230	case "$ifname" in
	231	eth*) check_if_link $ifname ; status=$?;;
	232	*) ;;
	233	esac
	234	# Print results
	235	if [ $status -ne 0 ] ; then
	236	if [ "$ifname" = "$defaultif" ] ; then
	237	echo "ERR: The $ifname interface that is associated with your default route has no link!"
	238	else
	239	echo "WARN: Interface $ifname does not have link"
	240	fi
	241	fi
146	242	# Find IP addresses for $ifname
147	243	inetaddr=`ip addr show $ifname \| grep inet \| awk '{print $2}'`
148	244	if [ -z "$inetaddr" ] ; then

151	247	else
152	248	# TODO: WARN if more than 2 IP addresses?
153	249	echo $inetaddr \| while read ipaddr; do
154		echo "INFO: The $ifname interface has IP address $ipaddr assigned"
	250	echo "INFO: The $ifname interface has IP address $ipaddr assigned"
155	251	done
156	252	fi
157	253

172	268	elif [ "$rxpkts" -eq 0 ] ; then
173	269	echo "WARN: The $ifname interface has not received any packets."
174	270	else
175		echo "INFO: The $ifname interface has tx and rx packets."
	271	echo "INFO: The $ifname interface has tx and rx packets."
176	272	fi
177	273	# TODO: It should be best if there was a comparison with tx/rx packets.
178	274	# a few errors are not uncommon if the card has been running for a long

192	288	ip link show \| egrep '^[[:digit:]]' \|
193	289	while read ifnumber ifname status extra; do
194	290	ifname=`echo $ifname \|sed -e 's/:$//'`
195		if [ -z "`echo $status \| grep UP\>`" ] && \
196		[ -z "`echo $status \| grep UP,`" ] ; then
	291	# TODO: this is redundant with the check if_link test
	292	# (although faster since using it would make us call 'ip'
	293	# twice.
	294	if [ -n "`echo $status \| grep NO-CARRIER`" ] ; then
197	295	if [ "$ifname" = "$defaultif" ] ; then
198	296	echo "ERR: The $ifname interface that is associated with your default route is down!"
199	297	status=1
200	298	elif [ "$ifname" = "lo" ] ; then
201		echo "ERR: Your lo inteface is down, this might cause issues with local applications (but not necessarily with network connectivity)"
	299	echo "ERR: Your lo interface is down, this might cause issues with local applications (but not necessarily with network connectivity)"
202	300	else
203	301	echo "WARN: The $ifname interface is down"
204	302	fi

279	377	nsok=0
280	378	tempfile=`mktemp tmptestnet.XXXXXX` \|\| { echo "ERR: Cannot create temporary file! Aborting! " >&2 ; exit 1; }
281	379	trap " [ -f \"$tempfile\" ] && /bin/rm -f -- \"$tempfile\"" 0 1 2 3 13 15
282		# TODO should warn about resolv.conf entries with more than one
283		# ip address in the nameserver line
284		cat /etc/resolv.conf \|grep -v ^# \| grep nameserver \|
	380	cat /etc/resolv.conf \| grep -v ^# \| grep nameserver \|
285	381	awk '/nameserver/ { for (i=2;i<=NF;i++) { print $i ; } }' >$tempfile
286	382	for nameserver in `cat $tempfile`; do
287	383	nsfound=$(( $nsfound + 1 ))

386	482
387	483	exit 0
388	484
	485
	486	# Set our locale environment, just in case ethtool gets translated
	487	LC_ALL=C
	488	export LC_ALL
	489