| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
| |
strip the suffixes).
|
| |
|
|
|
|
|
|
|
| |
no output.
PR: 39618
MFC after: 1 week
|
|
|
|
|
|
|
|
|
|
| |
of wtmp.0 is done as mode 600.
This ensures that tight permissions set in /etc/newsyslog.conf for
wtmp logging aren't ``betrayed''.
Suggested by: lumpy <lumpy@the.whole.net>
MFC after: 3 days
|
|
|
|
|
|
|
|
|
|
|
| |
The change was introduced in src/etc/security 1.53 almost a year ago
in an attempt to see ipfw deny message logs.
However, ipfw deny/reject logs have been displayed since version 1.13
of the same file as a separate ``job'' and have since moved to
src/etc/periodic/security/500.ipfwdenied.
MFC after: 3 days
|
|
|
|
|
| |
Problem reported by: lumpy <lumpy@the.whole.net>
MFC after: 3 days
|
|
|
|
|
|
| |
Returning $? masks security output when ``periodic security'' is successful !
MFC after: 3 days
|
|
|
|
|
|
| |
PR: 23766
Mostly submitted by: lambert@ssabsd.csw.net
MFC after: 3 days
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Due to the way we run ls(1), through xargs(1), the leading whitespace
can change even when the setuid files haven't. To avoid displaying
these lines, we currently run diff(1) with the '-w' option. However,
this is probably not the ideal way to go; there is a very, very small
possibility for diff(1) to miss things is shouldn't. So, with the
leading space cleaned, we can revert to the '-b' option which is
"safer."
PR: conf/37618
Reviewed by: brian
MFC after: 3 days
|
|
|
|
|
|
| |
PR: 37529
Partially submitted by: Peter Hollaubek <fifteen@inext.hu>
MFC after: 1 week
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
clientmqueue (submit mail queue).
The new mailq display is only active if both the old
daily_status_mailq_enable is set to "YES" and the new
daily_status_include_submit_mailq is set to "YES" so people who disabled
440.status-mailq won't have any surprises.
Likewise, the new queue run is only active if both the old
daily_queuerun_enable is set to "YES" and the new daily_submit_queuerun
is set to "YES" so people who disabled 500.queuerun won't have any
surprises.
While I am here, remove the [ ! -d /var/spool/mqueue ] checks from
both scripts as the queue directory isn't always /var/spool/mqueue for
the main daemon -- it can be set to anything in the sendmail.cf file.
MFC after: 1 week
|
| |
|
|
|
|
|
|
| |
and teach it to look for more general classes of failures, including
SSH login failures. This is similar but not identical to a patch
submitted by aeonflux@synapse.subneural.net.
|
|
|
|
|
| |
PR: bin/35558
Submitted by: Nicolas Rachinsky <list@rachinsky.de>
|
|
|
|
|
|
|
|
| |
the output of all goes well.
PR: 34825
Submitted by: Valentin Nechayev <netch@netch.kiev.ua>
MFC after: 3 weeks
|
| |
|
|
|
|
| |
PR: bin/32822
|
|
|
|
|
|
|
|
|
|
| |
of /etc/daily. Some time later, /etc/daily became a set of periodic(8)
scripts. Now, this evolution continues, and /etc/security has been
broken into periodic(8) scripts to make local customization easier and
more maintainable.
Reviewed by: ru
Approved by: ru
|
|
|
|
| |
same way the daily run output does.
|
|
|
|
|
|
| |
PR: 32113
Submitted by: Yar Tikhiy <yar@comp.chem.msu.su>
MFC after: 1 week
|
|
|
|
|
|
|
|
|
| |
the idea of not masking passwords on comments in case the
administrator comments out an entry without clearing the
password. Instead completely ignore comments (since they have no
security impact) when doing the diff of the old and new passwd file.
Suggested by: rwatson
|
|
|
|
|
|
|
|
|
|
| |
Backup passwd and group files:
1c1
< # $FreeBSD:(password):09:07 peter Exp $
---
> # $FreeBSD:(password):27:16 ache Exp $
MFC after: 1 week
|
| |
|
| |
|
|
|
|
|
|
|
|
| |
files to look an (in the same way that /etc/security does).
Don't single-quote $start, reducing it to an empty string.
MFC after: 3 days
|
|
|
|
|
|
| |
Submitted by: NIIMI Satoshi <sa2c@and.or.jp>
PR: 28355
MFC after: 1 week
|
|
|
|
|
| |
PR: 27707
Approved by: bmah, markm
|
| |
|
| |
|
| |
|
|
|
|
|
|
|
|
| |
originally submitted patch (oops!).
Also check for an empty $daily_accounting_save.
Submitted by: Udo Schweigert <Udo.Schweigert@cert.siemens.de>
|
|
|
|
|
| |
Submitted by: Udo Schweigert <Udo.Schweigert@cert.siemens.de>
MFC after: 2 weeks
|
|
|
|
| |
Reminded by: gshapiro
|
|
|
|
| |
to perl5 modules installed by hand.
|
|
|
|
|
| |
PR: bin/26836
Submitted by: Matthew Seaman <matthew.seaman@tornadogroup.com>
|
| |
|
| |
|
|
|
|
| |
LC_ALL takes precedence over other LC_* envariables.
|
| |
|
|
|
|
|
| |
This has the benefit of adding a random start time element as daily
processing takes a different amount of time on different machines.
|
|
|
|
|
|
|
| |
users in line with ${daily,weekly,monthly}_output using a new
$daily_status_security_output variable.
PR: 24643
|
|
|
|
| |
in their name.
|
| |
|
|
|
|
|
| |
PR: 23805
Submitted mostly by: Norbert Papke <npapke@telus.net>
|
|
|
|
|
|
|
|
| |
from being installed, and make rmail conditional on neither of
NO_SENDMAIL and NOUUCP.
PR: bin/21321
Submitted by: Me
|
|
|
|
|
| |
PR: 21600
Submitted by: David Wolfskill <dhw@whistle.com>
|
|
|
|
| |
Submitted by: Philipp Mergenthaler <un1i@rz.uni-karlsruhe.de>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
All periodic sub-scripts <larf> now have their return codes interpreted
by periodic(8). Output may be masked based on variable values in
periodic.conf.
It's also now possible to email periodic output to arbitrary addresses,
or to send it to a log file, examples of which can be found in
newsyslog.conf.
The upshot of it all should be no discernable changes to the default
behaviour of periodic(8).
PR: 21250
|
|
|
|
| |
PR: 20841
|
|
|
|
|
| |
The maintainers of share/examples/diskless/README.TEMPLATING and mergemaster
have been contacted so those may be updated as well.
|