1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
|
man/st_snapshot.hourly.dbx man/systraq.dbx: fix FIXME's in typesetted output
configure PTS commit messages, see manual.dbx
---
tmpmount stuff : remove from list.
/etc/mtab -> /proc/mounts
tmpfs /run/user/0 .....
gets mounted and umounted quite frequent
(seen on Debian jessie system)
----
FIXME: add e.g. ssh+git://git.debian.org/git/collab-maint/systraq.git :
Makefile.am, bootstrap: s/svn2cl/git2cl/ FIXME nog niet klaar; git log
--pretty --numstat --summary -- systraq | git2cl does not do the trick....
----
still TO DO VERSION/FIXME in ./man/st_snapshot.pod / convert to .dbx
- Don't use pod but docbook for st_snapshot manpage.
--------
add to requirements: docbook-dsssl docbook-xml
docbookx.dtd is needed, shipped by:
docbook: /usr/share/sgml/docbook/dtd/4.5/docbookx.dtd
docbook-xml: /usr/share/xml/docbook/schema/dtd/4.0/docbookx.dtd
docbook-dsssl: /usr/share/sgml/docbook/stylesheet/dsssl/modular/dtds/dbdsssl/dbdsssl.dtd
(sid)root@nusku:~# apt -V install docbook-dsssl jade docbook-xml jadetex
The following NEW packages will be installed:
docbook-dsssl (1.79-9)
docbook-xml (4.5-7.3)
fontconfig-config (2.11.0-6.3)
fonts-dejavu-core (2.35-1)
jade (1.2.1-47.3+b1)
jadetex (3.13-16)
libavahi-client3 (0.6.31-5)
libavahi-common-data (0.6.31-5)
libavahi-common3 (0.6.31-5)
libcups2 (2.1.0-5)
[...]
libxpm4 (3.5.11-1+b1)
libxt6 (1.1.5-1)
libzzip-0-13 (0.13.62-3)
poppler-data (0.4.7-3)
sgml-base (1.26+nmu4)
sgml-data (2.0.10)
t1utils (1.38-4)
tex-common (6.04)
texlive-base (2015.20151016-1)
texlive-binaries (2015.20150524.37493-7)
texlive-fonts-recommended (2015.20151016-1)
texlive-generic-recommended (2015.20151016-1)
texlive-latex-base (2015.20151016-1)
texlive-latex-recommended (2015.20151016-1)
tipa (1.3-20)
x11-common (7.7+12)
xdg-utils (1.1.1-1)
xml-core (0.13+nmu2)
(sid)root@nusku:~# apt -V install docbook-xsl
The following NEW packages will be installed:
docbook-xsl (1.78.1+dfsg-1)
(sid)root@nusku:~# apt -V install xsltproc
The following NEW packages will be installed:
libxslt1.1 (1.1.28-2+b2)
xsltproc (1.1.28-2+b2)
(sid)root@nusku:~# apt -V install w3m
The following NEW packages will be installed:
libgc1c2 (7.4.2-7)
libgpm2 (1.20.4-6.1+b2)
w3m (0.5.3-25+b1)
-------------------
- netstat -Wanptu ipv wat-ie nu doet?
уто 07 11:44 <Fruit> mits dat als root draait
уто 07 11:45 <Fruit> anders -Wantu
уто 07 11:51 <joostvb> --wide --all --numeric --tcp --udp
уто 07 11:51 <joostvb> dat wil je dus
уто 07 11:52 <Fruit> vooral -p wil je
- ff-netstat: run as root, add -p. We should have lib/root-scripts/ .
- add: monitor raid stuff within lvm, repquota -a,
ls /var/mail/, ip[6]tables -L -v
- add NN-unknown-owner:
find / -nouser -ls
find / -nogroup -ls
уто 07 12:55 <Fruit> find / -perm +0002 -ls
уто 07 12:55 <Fruit> aka alles wat world writable is
уто 07 12:57 <Fruit> find / \( -nouser -o -nogroup -o -perm +0002 \) -ls
- take over filetraq from Sergio Talens-Oliag? He seems no longer interested;
he's still active in Debian (as of 2014-01). latest filetraq upstream: 2000
(as of 2014-01).
- since squeeze, debsums installs its own cronjob. Decide wether we
still need to supply our debsums script.
better use the debsums cronjob; it is disabled by default btw.
- add a configure-systraq script (to tarball, or to debian package).
---------
- first section of daily mail should contain warnings, and be empty
in case all is fine. only in second section fyi stuff should be mentioned.
See Debian's checksecurity for an implementation.
- Split requirements in manual in cvs-build-time, build-time and run-time;
document all run-time dependencies, get configure.ac check for them.
- Finish systraq manual: add diagram listing dependencies (see the FIXME)
- Systraq should silently ignore non-world-readable to-be-monitored files in
homedirectories. This is nice on systems where some users like to have e.g.
~/.bashrc monitored and others do not. Document this behaviour, and instruct
admins to check for readability when setting up list of to be monitored
files. Check what happens when permissions change: are we getting warned? I
guess we should be warned. Bug reported by Lionel Elie Mamane.
- Make this package usable on systems with a configured filetraq:
> What to do with filetraq.default
> What to do with filetraq cron job
|
