Gentoo Forums

Code: Select all

#!/bin/sh
# script to check for any Gentoo advisory and notify admins via email.
# Requires Gentoolkit
#
# to be called from cron, eg.
# * */6 * * * glsa-mail.sh
#
# Released under the GPL.
# Author Giovanni Ferri <FonderiaDigitale@gechi.it>
# Gechi web site www.gechi.it
                                                                                                                                                                                   
                                                                                                                                                                                   
# change this! :)
email="root"
                                                                                                                                                                                   
checkGLSA () {
tmpfile="/tmp/GLSA_${RANDOM}"
mailfile="/tmp/GLSA_${RANDOM}"
IFS="
"
glsa-check --nocolor --list 2>/dev/null > $tmpfile
lines=`perl -0777pe 's/^(?:.*\n){4}//' $tmpfile`
rm -f $tmpfile
year=`date +%Y`
for each in $lines; do
        GLSAn=`echo "$each"|cut -d' ' -f1`
        type=`echo "$each"|cut -d' ' -f2`
        case $type in
                        *N*)
                                if [ "$got" != 1 ]; then
                                                got=1
                                                echo "$HOSTNAME could be affected by this vulnerability:" >> $mailfile
                                                echo >> $mailfile
                                fi
                                glsa-check --dump $GLSAn 2>/dev/null >> $mailfile
                        ;;
        esac
done
}
                                                                                                                                                                                   
checkGLSA
cat $mailfile|mail $email -s 'new GLSA vulnerability found!! Check your machine.'
                                                                                                                                                                                   
if [ "$got" == 1 ]; then
        rm -f $tmpfile $mailfile
else
        exit 0
fi

Code: Select all

#!/usr/bin/env python

# Lo script controlla i Gentoo Advisory e notifica eventuali rischi via mail
# Richiede gentoolkit  e un programma mail funzionante da riga di comando
# glsa-mail.py puo' essere richiamato via cron, es:
# * */6 * * * glsa-mail.py
# Implementazione python di glsa-mail.sh di Giovanni Ferri <FonderiaDigitale@gechi.it>
# Rilasciato sotto licenza GPL
# Federico Galli - fede@sideralis.net - www.sideralis.net
# Riccardo Galli - riccardo@sideralis.net - www.sideralis.net

#Usage:
#glsa-check.py TO SMTP PORT
#SMTP default = localhost
#PORT default = 24

import os, sys, re
from email.MIMEBase import MIMEBase
from email.MIMEText import MIMEText
import email.Utils as Utils
import smtplib, StringIO

argc=len(sys.argv)
if not 2<=argc<=4:
    print 'Usage: addressTO [smtpserver [port]]'
    sys.exit(1)

to=sys.argv[1]
server= argc in (3,4) and sys.argv[2] or "localhost"
port=argc==4 and int(sys.argv[3]) or 25

PATTERN=re.compile(r'(?P<date>\d+-\d+)\s\[(?P<status>.)\]\s(?P<desc>.*)\(\s(?P<prog>.+)\s\)',re.MULTILINE)

soggetto="glsa-check report"
intestazione="Sono state rilevate le seguenti vulnerabilita':\n\n"

stdin,stdout,stderr=os.popen3("glsa-check --list")
text=stdout.read()
stderr=StringIO.StringIO()
stdout.close()

lista_prob=[]
lista_attachs=[]

for line in PATTERN.findall(text):
    if line[1]=='N':
        lista_prob.append(line[2])
        stdin,stdout,stderr=os.popen3('glsa-check --dump %s' % line[0])
        body=stdout.read()
        stderr=StringIO.StringIO()
        stdout.close()
        lista_attachs.append(body)

if not lista_attachs : sys.exit(0)

body=intestazione+'\n'.join(lista_prob)

import socket

msg=MIMEBase('multipart','mixed')
msg['From']="glsa-check@%s.py"% socket.gethostname() or 'sideralis.net'
msg['To']=to
msg['Date']=Utils.formatdate()
msg['Message-ID']=Utils.make_msgid()
msg['Subject']=soggetto
msg.attach(MIMEText(body))

for i in lista_attachs:
    msg.attach(MIMEText(i))

try:
    s=smtplib.SMTP(server,port)
    s.sendmail(msg['From'],msg['To'],str(msg))
    s.quit()
except smtplib.SMTPException,e:
    print e

Code: Select all

blackman@altair blackman $ time python glsa-report.py fede@sideralis.net smtp.fastwebnet.it

real	0m1.081s
user	0m0.854s
sys	0m0.052s
blackman@altair blackman $ time python glsa-check.py fede@sideralis.net smtp.fastwebnet.it

real	0m2.158s
user	0m1.259s
sys	0m0.065s
blackman@altair blackman $      

Code: Select all

#!/usr/bin/env python

# Lo script controlla i Gentoo Advisory e notifica eventuali rischi via mail
# Richiede gentoolkit  e un programma mail funzionante da riga di comando
# glsa-mail.py puo' essere richiamato via cron, es:
# * */6 * * * glsa-mail.py
# Revisione python di glsa-mail.sh di Giovanni Ferri <FonderiaDigitale@gechi.it>
# Rilasciato sotto licenza GPL
# Federico Galli - fede@sideralis.net - www.sideralis.net
# Riccardo Galli - riccardo@sideralis.net - www.sideralis.net

#Usage:
#glsa-report.py TO SMTP PORT
#SMTP default = localhost
#PORT default = 25

import os, sys
from email.MIMEBase import MIMEBase
from email.MIMEText import MIMEText
import email.Utils as Utils
sys.path.insert(0, "/usr/lib/gentoolkit/pym")
from glsa import checkconfig, get_glsa_list, GlsaTypeException, Glsa, portage
import smtplib, random

argc=len(sys.argv)
if not 2<=argc<=4:
    print 'Usage: addressTO [smtpserver [port]]'
    sys.exit(1)

to=sys.argv[1]
server= argc in (3,4) and sys.argv[2] or "localhost"
port=argc==4 and int(sys.argv[3]) or 25

lista_prob=[]
lista_attachs=[]

glsaconfig = checkconfig(portage.config(clone=portage.settings))
completelist = get_glsa_list(glsaconfig["GLSA_DIR"], glsaconfig)
fileName='/tmp/tmp_blabla'+str(int(random.random()*100))

for myid in completelist:
    try:
        myglsa = Glsa(myid, glsaconfig)
    except GlsaTypeException, e:
        #print "invalid GLSA: %s (error message was: %s)" % (myid, e)
        continue
    if myglsa.isVulnerable():
        lista_prob.append(myglsa.title)
        myglsa.dump(outfile=fileName)
        fp=file(fileName)
        lista_attachs.append(fp.read())
        fp.close()
os.remove(fileName)

if not lista_attachs : sys.exit(0)

soggetto="glsa-check report"
intestazione="Sono state rilevate le seguenti vulnerabilita':\n\n"
body=intestazione+'\n'.join(lista_prob)

import socket

msg=MIMEBase('multipart','mixed')
msg['From']="glsa-check@%s.py"% socket.gethostname() or 'sideralis.net'
msg['To']=to
msg['Date']=Utils.formatdate()
msg['Message-ID']=Utils.make_msgid()
msg['Subject']=soggetto
msg.attach(MIMEText(body))

for i in lista_attachs:
    msg.attach(MIMEText(i))

try:
    s=smtplib.SMTP(server,port)
    s.sendmail(msg['From'],msg['To'],str(msg))
    s.quit()
except smtplib.SMTPException,e:
    print e

Code: Select all

fileName='/tmp/tmp_blabla'+str(int(random.random()*100)) 

Code: Select all

$ ./glsa-report.py -t xxx@yyyy.it -s smtp.tin.it
{'xxx@yyyy.it': (550, 'RCPT TO:<xxx@yyyy.it> Relaying not allowed - please use SMTP AUTH')}

Code: Select all

pitagora glsa-report-1.0 # glsa-report -t solkanar@ngi.it -s smtp.fastwebnet.it
Traceback (most recent call last):
  File "/usr/bin/glsa-report", line 94, in ?
    os.remove(fileName)
OSError: [Errno 2] No such file or directory: '/tmp/tmp_glsa-report18'
pitagora glsa-report-1.0 # glsa-report -t solkanar@ngi.it -s smtp.fastwebnet.it
Traceback (most recent call last):
  File "/usr/bin/glsa-report", line 94, in ?
    os.remove(fileName)
OSError: [Errno 2] No such file or directory: '/tmp/tmp_glsa-report44'
pitagora glsa-report-1.0 # glsa-report -t solkanar@ngi.it -s smtp.fastwebnet.it
Traceback (most recent call last):
  File "/usr/bin/glsa-report", line 94, in ?
    os.remove(fileName)
OSError: [Errno 2] No such file or directory: '/tmp/tmp_glsa-report92'
pitagora glsa-report-1.0 # glsa-report -t solkanar@ngi.it -s smtp.fastwebnet.it
Traceback (most recent call last):
  File "/usr/bin/glsa-report", line 94, in ?
    os.remove(fileName)
OSError: [Errno 2] No such file or directory: '/tmp/tmp_glsa-report77'

Code: Select all

for a in `lynx -dump http://www.gentoo.org/proj/en/devrel/roll-call/userinfo.xml|grep 0x`; do
    i=`expr match "$a" '.*\(0x........\).*'`
    case $i in
        0x????????) gpg --keyserver hkp://subkeys.pgp.net -q --search-keys "$i";;
    esac
done

Code: Select all

Attention: glsa-check@HexDEF6.py


A problem was found in an Email message you sent. 
This Email scanner intercepted it and stopped the entire message
reaching its destination. 

The problem was reported to be: 

Illegal breakage found in header name - potential virus


Please contact your I.T support personnel with any queries regarding this 
policy.

Code: Select all

body=intestazione+'\r\n'.join(lista_prob)+'\r\n'