| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
| |
eavesdrop on other users' communications.
|
|
|
|
| |
Suggested by: Jesper Skriver <jesper@FreeBSD.org>
|
|
|
|
|
|
| |
permissions on some files, and give hints as to what those permissions
might be. Note also that the current more liberal permissions might
get changed in future revisions.
|
|
|
|
| |
Reviewed by: peter
|
|
|
|
|
| |
PR: 27901
Submitted by: Anders Nordby <anders@fix.no> (stylistic changes by me)
|
|
|
|
|
|
| |
PR: 25329
Submitted by: Yoshihiro Koya Yoshihiro.Koya@math.yokohama-cu.ac.jp
MFC after: 1 week
|
|
|
|
| |
(MFC candidate)
|
|
|
|
|
|
|
|
|
|
|
| |
default syslog target for console messages (when enabled in
syslog.conf). Use the same rotation defaults as with
/var/log/messages -- every 100kb of log, compress back logs,
and keep five rotated logs.
o Note: phk also thought it would be useful to force rotation
each boot. This commit does not introduce such a rotation.
Reviewed by: phk
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
All periodic sub-scripts <larf> now have their return codes interpreted
by periodic(8). Output may be masked based on variable values in
periodic.conf.
It's also now possible to email periodic output to arbitrary addresses,
or to send it to a log file, examples of which can be found in
newsyslog.conf.
The upshot of it all should be no discernable changes to the default
behaviour of periodic(8).
PR: 21250
|
|
|
|
|
|
|
|
|
|
|
| |
wheel to trash logfiles is not exactly good security policy. There have
been several gid wheel holes in ports. Various other files were changed
as well (eg: the locate database were set to more restrictive modes (444)
by their generation scripts) so this should be safe for them. utmp and
wtmp are mode 644 already on all the systems we checked.
Submitted by: jkb
Reviewed by: kris
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
an all.log for logging all messages, and one to demonstrate use of loghosts.
Also, a matching entry in newsyslog.conf for all.log.
Per request of Garrett Wollman, also modified the maillog entry to use the
@T newsyslog time specification mechanism. Because newsyslog doesn't
support the mod date specification machanism, couldn't change other
entries that required more than one execution a month, but less than once
a day.
Approved by: jkh
Reviewed by: freebsd-security
|
| |
|
| |
|
|
|
|
|
|
|
|
|
| |
should be used from now on for anything security but not auth-related.
Included are updates for all relevant manpages and also to /etc files,
creating a new /var/log/security. Nothing in the system logs to
/var/log/security yet as of the time of this commit.
Reviewed by: rgrimes, imp, chris
|
|
|
|
| |
consistant with chown(8).
|
| |
|
| |
|
|
|
|
|
| |
PR: 11511
Reviewed by: des
|
|
|
|
|
|
|
| |
let it rotate /var/log/wtmp again, and update monthly/200.accounting to
take this into account. (Some sites might want to change the parameters
of the rotation; it's easier to do this when it's all centralized in
newsyslog.conf.)
|
| |
|
|
|
|
|
| |
keep the last ten weeks of data.
Submitted by: jmb
|
|
|
|
| |
Remove wtmp
|
| |
|
| |
|
|
|
|
| |
Suggested by: ache
|
| |
|
| |
|
|
|
|
|
|
| |
that it matched the terms used in the manual page.
Closes PR# 2663.
|
|
|
|
|
|
|
|
| |
This will make a number of things easier in the future, as well as (finally!)
avoiding the Id-smashing problem which has plagued developers for so long.
Boy, I'm glad we're not using sup anymore. This update would have been
insane otherwise.
|
| |
|
|
|
|
|
|
| |
/var/run/amd.pid and added the "-l /var/log/amd.log" option there too
added an entry for the "rotation" of /var/log/amd.log to newsyslog.conf
|
|
|
|
|
| |
Increase rotating log sizes in newsyslog.conf to reflect
more common case
|
|
|
|
|
| |
1) It have nothing common to (new)syslog messages
2) acct.* rotating allowed only after "sa -s" run!
|
| |
|
|
/usr/sbin/newsyslog - see the man-page for it for details) - i put all
the "rotations" which were in /etc/[daily,weekly,monthly] in here
|