jcoffey-dev
db19bef328
--dirs accepted any path and fed it to `find -delete` running as root,
with no confirmation: `--clean --dirs /home` removed every file in /home
past the age threshold, and `--dirs /` did it system-wide.
Now refuses protected directories, comparing the readlink -f resolved
path so a symlink or /tmp/../home cannot smuggle one through, and
requires absolute paths. Anything outside the /tmp,/var/tmp defaults
also needs an interactive confirmation -- or --yes, so unattended use
stays possible; without a tty and without --yes it refuses rather than
hanging in cron.
usage() sliced fixed line numbers (head -22 | tail -n +18) and had
already outgrown them, truncating --help mid-list at --age. So --dirs,
the one option that could destroy a system, was the one option --help
never mentioned. Replaced with a sed range that tracks the comment block
wherever it moves.
The first version of the protected-path check let "/" through: it
compared against "${p%/}", which turns the "/" entry into an empty
string that matches nothing. Caught by testing the guard against the
paths it exists to stop, rather than assuming it worked.
Linux System Administration Scripts
Automate routine tasks: This project provides a collection of Bash scripts to automate common Linux system administration duties. Automating daily sysadmin tasks improves efficiency and consistency by reducing manual repetition and the risk of human error. Each script is designed to be distribution-agnostic, using only standard base utilities (e.g. rsync, tar, awk, grep, netstat/ss, systemctl) available on most Linux systems. All scripts are released under the GNU GPL v3.0 license and include usage information in their headers.
Included Scripts
backup.sh– Backup Utility: Archive directories into compressed tarballs for backups.restore.sh– Restore Utility: Restore files from backup archives.disk_cleanup.sh– Disk Usage & Cleanup: Report disk usage and identify large files; optionally clean package caches and temporary files to free space.log_inspect.sh– Log Inspection: Search within log files or tail the latest system logs for troubleshooting.log_rotate.sh– Log Rotation: Compress and rotate old log files to prevent excessive disk usagenetwork_info.sh– Network & Firewall Info: Show network interface details, routing table, open listening ports, and basic firewall (iptables) rules.process_monitor.sh– Process Management: List top resource-consuming processes and allow termination of processes by name or PID.security_audit.sh– Security Audit: Scan for security issues like world-writable files, SUID/SGID executables, and open network ports.service_manager.sh– Service Management: Start, stop, restart, or check status of system services, and enable/disable services at boot.sys_monitor.sh– System Monitoring: Display system uptime, resource utilization (CPU, memory, disk), and top processes.update_system.sh– System Updates: Apply available package updates and patches (works with apt, yum/dnf, zypper, pacman).user_manage.sh– User and Group Management: Create or remove user accounts and groups, modify user group memberships, and lock/unlock accounts.zimbra_backup.sh- Create a backup for a zimbra mailbox.zimbra_restore.sh- Restore a backup for a zimbra mailbox.rsync_magic.sh- A smart Bash script that wraps rsync for safe, flexible, and efficient file synchronization and backups.