Description: 	The mod_uptime module obtains the system boot time value 
		for comparison with scans.
Version: 	0.2

--- osiris-4.1.8-orig/src/osirisd/modules/mod_uptime/Makefile	1970-01-01 01:00:00.000000000 +0100
+++ osiris-4.1.8-1/src/osirisd/modules/mod_uptime/Makefile	2005-04-22 23:11:32.000000000 +0200
@@ -0,0 +1,16 @@
+
+include ../Makefile
+
+SRCS=mod_uptime.c
+OBJS=$(SRCS:.c=.o)
+
+module: ${SRCS} ${OBJS}
+
+INCS=-I../.. -I../../../libosiris -I../../../libfileapi -I../../../..
+
+# meta-rule for compiling any "C" source file.
+$(OBJS): $(SRCS)
+	$(CC) $(DEFS) $(DEFAULT_INCLUDES) ${INCLUDES} ${INCS} $(AM_CPPFLAGS) \
+	$(CPPFLAGS) $(AM_CFLAGS)  $(CFLAGS) -c $(SRCS)
+	cp $@ ..
+
--- osiris-4.1.8-orig/src/osirisd/modules/mod_uptime/README	1970-01-01 01:00:00.000000000 +0100
+++ osiris-4.1.8-1/src/osirisd/modules/mod_uptime/README	2005-04-22 23:11:32.000000000 +0200
@@ -0,0 +1,36 @@
+
+Module: mod_uptime
+Author: Brian Wotring (brian@shmoo.com)
+
+
+
+DESCRIPTION:
+
+The mod_uptime module obtains the system boot time value for comparison
+with scans.
+
+USE:
+
+To use this module, all  that is needed is to include it in the System
+block of a scan configuration, e.g.:
+
+    <System>
+    ...
+    Include mod_uptime
+    ...
+    </System>
+
+
+PARAMETERS:
+
+There are no parameters for this module.
+
+PLATFORMS:
+    
+Currently, this module is implemented for FreeBSD, OpenBSD,
+Linux, Solaris, and Mac OS X.
+
+NOTES:
+
+
+
--- osiris-4.1.8-orig/src/osirisd/modules/mod_uptime/mod_uptime.c	1970-01-01 01:00:00.000000000 +0100
+++ osiris-4.1.8-1/src/osirisd/modules/mod_uptime/mod_uptime.c	2005-04-22 23:11:32.000000000 +0200
@@ -0,0 +1,178 @@
+
+/******************************************************************************
+**
+**  This program is free software; you can redistribute it and/or
+**  modify it, however, you cannot sell it.
+**
+**  This program is distributed in the hope that it will be useful,
+**  but WITHOUT ANY WARRANTY; without even the implied warranty of
+**  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
+**
+**  You should have received a copy of the license attached to the
+**  use of this software.  If not, visit www.shmoo.com/osiris for
+**  details.
+**
+******************************************************************************/
+
+/*****************************************************************************
+**
+**  File:    mod_uptime.c
+**  Date:    March 22, 2004
+**
+**  Author:  Brian Wotring
+**  Purpose: platform specific methods for obtaining the system boot time.
+**
+******************************************************************************/
+
+#include "libosiris.h"
+#include "libfileapi.h"
+#include "rootpriv.h"
+#include "common.h"
+#include "version.h"
+
+#include "scanner.h"
+#include "logging.h"
+#include "config.h"
+
+#ifdef HAVE_SYS_SYSCTL_H
+#include <sys/sysctl.h>
+#endif
+
+#ifdef SYSTEM_SUNOS
+#include <utmpx.h>
+#endif
+
+#ifdef SYSTEM_LINUX
+#include <utmp.h>
+#endif
+
+#define PROC_FILE "/proc/uptime"
+#define OSI_WTMP_FILE "/var/log/wtmp"
+
+static const char *MODULE_NAME = "mod_uptime";
+
+
+void mod_uptime( SCANNER *scanner )
+{
+    SCAN_RECORD_TEXT_1 record;
+    char *time = NULL;
+    char *temp;
+
+    initialize_scan_record( (SCAN_RECORD *)&record,
+                             SCAN_RECORD_TYPE_TEXT_1 );
+
+    osi_strlcpy( record.module_name, MODULE_NAME,
+                 sizeof( record.module_name ) );
+
+#if defined(SYSTEM_FREEBSD) || defined(SYSTEM_OPENBSD) || defined(SYSTEM_DARWIN)
+    {
+        time_t t;
+        struct timeval result;
+
+        int request[2] = { CTL_KERN, KERN_BOOTTIME };
+        size_t result_len = sizeof(result);
+
+        if( sysctl( request, 2, &result, &result_len, NULL, 0 ) < 0)
+        {
+            log_error( "unable to obtain uptime value." );
+            return;
+        }
+
+        t = result.tv_sec;
+        time = ctime( &t );
+    }
+
+#elif defined(SYSTEM_SUNOS)
+    {
+        struct utmpx * ent;
+        time_t t;
+
+        while( ( ent = getutxent() ) )
+        {
+            if( !strcmp( "system boot", ent->ut_line ) )
+            {
+                t = ent->ut_tv.tv_sec;
+                time = ctime( &t );
+            }
+        }
+    }
+
+#elif defined(SYSTEM_LINUX)
+    {
+        FILE *fp;
+        time_t t;
+        struct utmp ut;
+
+        char buf[40];
+        char buf2[10];
+        int filecount = 0;
+
+next_file:
+
+        osi_strlcpy( buf, OSI_WTMP_FILE, sizeof( buf ) );
+
+        if( filecount > 0 )
+        {
+            osi_snprintf( buf2, sizeof(buf2), "%d", filecount );
+            osi_strlcat( buf, buf2, sizeof(buf) );
+        }
+
+        fp = osi_fopen( buf, "r", 0 );
+
+        if( fp == NULL )
+        {
+            log_error( "unable to obtain uptime value." );
+            return;
+        }
+
+        while(1)
+        {
+            int rc = fread( &ut, 1, sizeof(ut), fp );
+
+            /* end of file, try next. */
+
+            if( rc == 0 )
+            {
+                filecount++;                
+                fclose( fp );
+
+                goto next_file;
+            }
+
+            /* found restart event. */
+
+            if( ( strcmp( ut.ut_name, "reboot" ) == 0 ) ||
+                ( strcmp( ut.ut_name, "shutdown" ) == 0 ) )
+            {
+
+                t = ut.ut_time;
+                time = ctime( &t );
+
+                break;
+            }
+        }
+
+        fclose( fp );
+    }
+#endif
+
+    if( time == NULL )
+    {
+        log_error( "unable to obtain uptime value." );
+        return;
+    }
+
+    /* remove any trailing newline from the ctime() calls. */
+
+    if( ( temp = strchr( time, '\n' ) ) )
+    {
+        (*temp) = '\0';
+    }
+
+    osi_strlcpy( record.name, "uptime", sizeof( record.name ) );
+    osi_strlcpy( record.data, time, sizeof( record.data ) );
+
+    send_scan_data( scanner, (SCAN_RECORD *)&record );
+}
+
+