Hi there,
A while back I did a little bit of hacking and put together a package
with "standard" cron tasks. These tasks includes:
- backup stuff the cron package currently backups
- some other simple backups (the 'backup-simple' program and
manpage are included)
- common cron-related packages that most system administrators will like to
have in a stock Debian system (through dependancies). This includes:
- Basic system accounting (implement in sysstat)
- Basic logfile reporting (implemented through logcheck)
- Basic security checks (implemented through checksecurity and Tiger)
- Integrity file monitoring (through tripwire, aide, integrit or samhain)
- Check if the system is up-to-date (using cron-apt or apt-watch,
this requires an Internet connection)
Packages are available at http://people.debian.org/~jfs/cron-standard/
I'm currently considering a post-sarge change that would imply moving the
cron tasks in the cron package to this cron-standard package and have
'cron' Depend (if this package is uploaded a >optional priority)
or Recommend this.
I'm looking at comments on what additional tasks do you think that should
be included in such a package and wether or not this kind of package is
needed. The package could later on be enhanced by providing:
- Basic database backups (for both MySQL and PostgreSQL if they are
installed)
Following mechanisms similar to those described at
http://www.redhat.com/docs/manuals/database/RHDB-2.1-Manual/admin_user/backup.ht
ml
- Basic process and service monitoring (dead processes, zombies...)
Like in http://shelldorado.com/scripts/cmds/checkps.txt
(which uses http://shelldorado.com/scripts/cmds/psold.txt)
- Basic filesystem analysis (checksecurity implements this but it should
probably be moved here)
Like in: http://shelldorado.com/scripts/cmds/checkfs.txt
- System's user accounting (maybe using sac?)
- Review user's usage of the system
Like in http://shelldorado.com/scripts/cmds/dusage.txt
At least, based on the discussion at #257393, it would be best if the cron
tasks were separated from the main program itself. But then again, this
might be over-engineering.
Comments welcome.
Regards
Javier
Attachment:
signature.asc
Description: Digital signature