Subversion Repositories vnag

Rev

Rev 36 | Go to most recent revision | Show entire file | Regard whitespace | Details | Blame | Last modification | View Log | RSS feed

Rev 36 Rev 59
Line 1... Line 1...
1
<?php /* <ViaThinkSoftSignature>
1
<?php /* <ViaThinkSoftSignature>
2
bFkiEkyHItv+AQwBu8Jbs+2mPVVp1pljo6oKwEQyS5ugT4dyqfHUANCFJfSr0/Wgw
2
Fm798K8OnhYRk2wZ5LGT1eZv1U9J4+xksI2BNLu4KZxIw2YI06hHPgG9ZkiYp88+Y
3
IhTtUl9TkfC8ZZ41AZod3llWwMp2qJJ4GaBY2etFvOmRSWhEECLu1z43MCt3Q5Dvt
3
EuW8MeTg1z1ee4f8qNi9ZLLpSyiWEK9sAvJYJeWNq9Nx3avUf10Caa9iU3UQp4cT5
4
FrkzApfPb3bzX4tUFKi4/z2HJhbnOsQQcUFRPznV3PU8A8xEA1sdPOrnV/IcIDKAk
4
d2NC00RqKZRtBC5rPZ6u+ZXNoEz1UN6Z3b//FlXtRW1adXqgPpCNhw4HM192iXDld
5
eMucV6Bch2F6tU1qi7LRlTufNUpqCtPYy1UaLUvzxRLBraLKjdRzVDa06IakJM4OH
5
5YXYDhEsH7/mF0TJ4bFkRmNG5FDsX9uM0+SD5vZ8VgW4HW0KwO3qJG89QOelc1TmO
6
zU0tsg3P3fLwEiFecWSLCjt2dyo6woJgPnxFf6W9qETgNX7ItjiCktf9P6YEd6XQ3
6
88fFklxG3wmTZU/c1mCOT7tgrl4AVmUamNyZRygaeKWORfTM8m1PrFm86MyGCvLR+
7
+jWZoIm4/SuQqbWnUxlT6k8ejvfE3iM0WOIv9mfJHcMgwQPCEAPVu7aPazLi/x3Xc
7
ZVr8mqtAV5mJt3NR9NxpkxuLJN8qPpEuMzbQV/0MfjsRjdA/bLaXA186maJ7IaS1a
8
vHlgHP9A8ED6a+jh4H1bmrZbW+DpOJ8jhvPvr1kdDTq/vJtadPZkONux7XM7LgzAW
8
69+xLqrLbcBn+c4Keej72vAdhSs2HmpPqO6wVTsV24LMVDWgS5IEYDfK5ylHCikTI
9
kpQTmRCXh/FkIEOpHWeW/PNKlBqQzPglsi6liiHnN3LMAb9F1PXqMOXxcwbkKGrQJ
9
YQesBoQELvXEtKuJI5EJCBsH0uDuIiuL2xe7btJJi8fUYaBHXOW50KoY0HWlIntXd
10
I/pGasdex+fVUI0py45Uost/PWP8P89DIxq4BU5nI8Mki4N1MlPf0Pty1ndFwk3Z4
10
UuI/CABDWgVE1XMqUu4xemM6mGoPcZY1V5FtV4A06KtXTEbmqRwileEe12jO3aVKq
11
kU8/rdYy1/krfwEt5Cz8FhvA2SSgFgzeX4rqly/u/Q8uyzMVoCK3N26EelKfzO8ux
11
HrOoGY6ZB3gk1AxH7sUeUKFWJ6yS+zzUriEoka0YrJVrBgG3g6yaNDebNU4KVNx+G
12
jhlnBtiwbemDK+pnkLAELbk5pkf158W4Sdl4ejeuVno1Az78w4R5pOatx1Jf6MzIA
12
zQalJ6+k0RaWMdysrRy3/IJlDhu9Vt77QRb7twP9c8WARJsGgEKCTwuutlD10Cl8m
13
lf3xsFT5aycWk16OyhHIjrITl7UZcb98ykv0FWy7+NqDFM9sK/GSrs52FNPzxw3mk
13
IpJ0CJj4fHDqLJHvXJNb9IH2G1W1YxfmPYqsscfW+n0mVBnp3ZjVo4iuV0Gr4hrS6
14
YPEofkp1Qn/qxm6+t0TAqFkXBzGEAvkG+xRRDhGrDf6iFx03baortdMxmcHTqsMsA
14
WwBMX6XApPU8shgUwUf3mENE7WY8EKaNpybZsn3OTxAGXnJ2293x+o1Zm29Xv3Ovq
15
BlBxM2VWto7OuTtUgjPn6lFasHERSWoqgUrxomP18OBuh/6Cjb3ajeGL6OQEyvLbQ
15
R9VszqfHCaGq2V51BAPKGydtgF2QF93mL8vwlfqH1v/m/kRujRjLQfYv7T8+6CxI7
16
HAcBssnfott7LSgZbsqIMIBT1xrki92FMmN/jzcE8eVZ4Dx0f/+4gyAFyqptE/FAn
16
hpXCp9LLsr2KsCNF1B8cxiyBv8fFF1bB9+HpzU+Z5sCIB91XdTs21XaaLHXDg2qJZ
17
w70HGdVZFy6MBxXUSCt83Wz4uDdIV/SQEOa826pR6X7/Zl7EBRPNJoSnGZfucpau/
17
E9SjmfIK3IqG1AYN6CFsEUX0wCloHI1Ua3XtClBQAJaxbsvRdk0SM0nJjPTxsC9MX
18
+NEbOfp0TZODpbqBeKRLBCyqJFQfwQEhOE97/am30pIrIAob6lAcNXeimgunQawld
18
ZGVlDxPR0RZSA5XD93OYrF28ZWnGMhSyet2zEUSEcLmAKlCO1WJbGzgq9Prd+HvRL
19
DQLJVhpCbsHYcMHlmIqqKc+jCefCf+T0grx34t9+fRap90eYs0KHxHo9Ubr71I178
19
UJqjbc1FjmPN/ZllnxHiP3/N7Xq307hUmar8lNF4FcLjXcaMzA4umMBUcY2wMxugc
20
iLWcYrN0mve5cNFJ9aHUg8VT3i1wuJYzl1ZXJeuDOynddmIEmHjVEMIdsA3wKGHIm
20
ENsHEkIBh9jzOFnvRDP1K0T44ZVR4l376Qm3nb2ULcvTA1E2Dq5U0H3t1AuniPgCP
21
aB9cPgTkw+dkKkkCqpHZYcqeBBvbQZ3fkovhubKfYdwfX1QwtBjFZmdgayL3gQNJZ
21
D62RRZOp3ZH+5RNQnsMHPL87eyK0XA/VAT7wQah9GnL1d54ocXDyDrVGrJXEiq8dN
22
EOr7w8qmnHD+B00v526nYpNqKBWqyQXe5anmrm02e7SC+G4JiMiaLLvy6wo7ya3of
22
J2Zrd6Dd/7TAI1lcPuwUv4BxPP2o2ecsFVC2wi49v/HNPwrpGaRIocVG7XB2/tQvA
23
Q==
23
A==
24
</ViaThinkSoftSignature> */ ?>
24
</ViaThinkSoftSignature> */ ?>
25
<?php
25
<?php
26
 
26
 
27
/*
27
/*
28
 * VNag - Nagios Framework for PHP
28
 * VNag - Nagios Framework for PHP
29
 * Developed by Daniel Marschall, ViaThinkSoft <www.viathinksoft.com>
29
 * Developed by Daniel Marschall, ViaThinkSoft <www.viathinksoft.com>
30
 * Licensed under the terms of the Apache 2.0 license
30
 * Licensed under the terms of the Apache 2.0 license
31
 *
31
 *
32
 * Revision 2018-11-03
32
 * Revision 2022-12-18
33
 *
33
 *
34
 * Changelog:
34
 * Changelog:
35
 * 2018-08-01   1.0   Initial release
35
 * 2018-08-01   1.0   Initial release
36
 * 2018-09-02   1.1   Added argument -e|--emptyok
36
 * 2018-09-02   1.1   Added argument -e|--emptyok
37
 *                    Output a warning if the Linux user does not exist.
37
 *                    Output a warning if the Linux user does not exist.
38
 * 2018-10-01   1.2   Fixed a bug where too many unnecessary requests were sent to ipinfo.io
38
 * 2018-10-01   1.2   Fixed a bug where too many unnecessary requests were sent to ipinfo.io
39
 *                    Cache file location ~/.last_ipcache is now preferred
39
 *                    Cache file location ~/.last_ipcache is now preferred
40
 *                    A token for ipinfo.io can now be provided
40
 *                    A token for ipinfo.io can now be provided
41
 * 2018-11-03   1.2.1 "system boot" lines are now excluded
41
 * 2018-11-03   1.2.1 "system boot" lines are now excluded
-
 
42
 * 2022-12-18   1.2.2 Use the new cache directory now
42
 */
43
 */
43
 
44
 
44
// QUE: should we allow usernames to have wildcards, regexes or comma separated?
45
// QUE: should we allow usernames to have wildcards, regexes or comma separated?
45
 
46
 
46
declare(ticks=1);
47
declare(ticks=1);
Line 54... Line 55...
54
 
55
 
55
        private $cache = null;
56
        private $cache = null;
56
        private $cacheFile = null;
57
        private $cacheFile = null;
57
        private $cacheDirty = false;
58
        private $cacheDirty = false;
58
 
59
 
59
        protected function getIpCacheFile() {
-
 
60
                $homedir = @getenv('HOME');
-
 
61
                if ($homedir) {
-
 
62
                        $try = "${homedir}/.last_ipcache";
-
 
63
                        if (file_exists($try)) return $try;
-
 
64
                        if (@touch($try)) return $try;
-
 
65
                }
-
 
66
 
-
 
67
                $user = posix_getpwuid(posix_geteuid());
-
 
68
                if (isset($user['dir'])) {
-
 
69
                        $homedir = $user['dir'];
-
 
70
                        $try = "${homedir}/.last_ipcache";
-
 
71
                        if (file_exists($try)) return $try;
-
 
72
                        if (@touch($try)) return $try;
-
 
73
                }
-
 
74
 
-
 
75
                if (isset($user['name'])) {
-
 
76
                        $username = $user['name'];
-
 
77
                        $try = "/tmp/ipcache_${username}.tmp";
-
 
78
                        if (file_exists($try)) return $try;
-
 
79
                        if (@touch($try)) return $try;
-
 
80
                }
-
 
81
 
-
 
82
                return false; // should usually never happen
-
 
83
        }
-
 
84
 
-
 
85
        public function __construct() {
60
        public function __construct() {
86
                parent::__construct();
61
                parent::__construct();
87
 
62
 
88
                if ($this->is_http_mode()) {
63
                if ($this->is_http_mode()) {
89
                        // Don't allow the standard arguments via $_REQUEST
64
                        // Don't allow the standard arguments via $_REQUEST
Line 103... Line 78...
103
                $this->getHelpManager()->setShortDescription('This plugin checks the logs of the tool "LAST" an warns when users have logged in with an unexpected IP/Country/ISP.');
78
                $this->getHelpManager()->setShortDescription('This plugin checks the logs of the tool "LAST" an warns when users have logged in with an unexpected IP/Country/ISP.');
104
                $this->getHelpManager()->setCopyright('Copyright (C) 2011-$CURYEAR$ Daniel Marschall, ViaThinkSoft.');
79
                $this->getHelpManager()->setCopyright('Copyright (C) 2011-$CURYEAR$ Daniel Marschall, ViaThinkSoft.');
105
                $this->getHelpManager()->setSyntax('$SCRIPTNAME$ [-v] [-e] [-u username] [-R regex] [--ipInfoToken token]');
80
                $this->getHelpManager()->setSyntax('$SCRIPTNAME$ [-v] [-e] [-u username] [-R regex] [--ipInfoToken token]');
106
                $this->getHelpManager()->setFootNotes('If you encounter bugs, please contact ViaThinkSoft at www.viathinksoft.com');
81
                $this->getHelpManager()->setFootNotes('If you encounter bugs, please contact ViaThinkSoft at www.viathinksoft.com');
107
 
82
 
108
                $this->cacheFile = $this->getIpCacheFile();
83
                $this->cacheFile = $this->get_cache_dir() . '/.last_ip_cache';
-
 
84
                if (!file_exists($this->cacheFile)) @touch($this->cacheFile);
109
                $this->cache = $this->cacheFile ? json_decode(file_get_contents($this->cacheFile),true) : array();
85
                $this->cache = $this->cacheFile ? json_decode(file_get_contents($this->cacheFile),true) : array();
110
        }
86
        }
111
 
87
 
112
        public function __destruct() {
88
        public function __destruct() {
113
                if ($this->cacheFile && $this->cacheDirty) {
89
                if ($this->cacheFile && $this->cacheDirty) {