| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
r316342:
Consolidate random sleeps in periodic scripts
Multiple periodic scripts sleep for a random amount of time in order to
mitigate the thundering herd problem. This is bad, because the sum of
multiple uniformly distributed random variables approaches a normal
distribution, so the problem isn't mitigated as effectively as it would be
with a single sleep.
This change creates a single configurable anticongestion sleep. periodic
will only sleep if at least one script requires it, and it will never sleep
more than once per invocation. It also won't sleep if periodic was run
interactively, fixing an unrelated longstanding bug.
PR: 217055
PR: 210188
Reviewed by: cy
MFC after: 3 weeks
Differential Revision: https://reviews.freebsd.org/D10211
r316358:
Fix man page typo from r316342
Reported by: rgrimes
MFC after: 20 days
X-MFC-With: 316342
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
periodic(8) already handles the security_show_{success,info,badconfig}
variables correctly. However, those variables aren't explicitly set in
/etc/defaults/periodic.conf or anywhere else, which suggests to the user
that they shouldn't be used.
etc/defaults/periodic.conf
Explicitly set defaults for security_show_{success,info,badconfig}
usr.sbin/periodic/periodic.sh
Update usage string
usr.sbin/periodic/periodic.8
Minor man page updates
One thing I'm _not_ doing is recommending setting security_output to
/var/log/security.log or adding that file to /etc/newsyslog.conf, because
periodic(8) would create it with default permissions, usually 644, and
that's probably a bad idea.
Reviewed by: brd
MFC after: 4 weeks
Sponsored by: Spectra Logic Corp
Differential Revision: https://reviews.freebsd.org/D6477
|
|\
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
Off by default, build behaves normally.
WITH_META_MODE we get auto objdir creation, the ability to
start build from anywhere in the tree.
Still need to add real targets under targets/ to build packages.
Differential Revision: D2796
Reviewed by: brooks imp
|
| | |
|
| |\
| |/
|/| |
|
| |\ |
|
| | | |
|
| | |
| | |
| | |
| | | |
Requested by: Simon Gerraty <sjg@juniper.net>
|
| |/
|/|
| |
| |
| | |
PR: 191174
Submitted by: Franco Fichtner <franco@lastsummer.de>
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
More concretely, periodic security scripts defaults to being
called from daily ones -- daily context -- so the mail subject
will now be "${HOST} daily security run output" instead of
"{HOST} security run output".
If you switch the period of some security checks to weekly, you
will receive another email "${HOST} weekly security run output".
|
|/
|
|
|
| |
allow periodic security scripts to know if they have been called in
a daily or a weekly context.
|
|
|
|
|
|
|
|
|
|
|
| |
starting up before the previous script finishes. This prevents an
infinite number of them from piling up and slowing a system down.
Since all the refactoring to make this happen required churning the
indenting of most of this file, make the indentation more consistent.
Reviewed by: simon
MFC after: 1 week
|
|
|
|
|
|
|
|
| |
Although groff_mdoc(7) gives another impression, this is the ordering
most widely used and also required by mdocml/mandoc.
Reviewed by: ru
Approved by: philip, ed (mentors)
|
|
|
|
|
|
|
| |
PR: docs/113975
Submitted by: Marian Cerny <jojo@matfyz.cz>
Reviewed by: keramida
Approved by: re (bmah)
|
|
|
|
| |
Approved by: re (hrs)
|
|
|
|
|
|
|
|
|
|
|
| |
The man page part of the patch is my fault, the changes to the
periodic script is Dominik's.
PR: 88486
Submitted by: Dominik Brettnacher <domi@saargate.de>
Reviewed by: brian
Approved by: re
MFC after: 1 month
|
| |
|
| |
|
| |
|
|
|
|
|
|
| |
Submitted by: David Wolfskill <david@catwhisker.org>
PR: 37036
MFC after: 1 week
|
| |
|
|
|
|
|
|
|
|
|
|
| |
of /etc/daily. Some time later, /etc/daily became a set of periodic(8)
scripts. Now, this evolution continues, and /etc/security has been
broken into periodic(8) scripts to make local customization easier and
more maintainable.
Reviewed by: ru
Approved by: ru
|
|
|
|
|
|
| |
periodic(8) scripts must be useable as a sh(1) variable.
MFC after: 2 days
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
|
|
|
| |
- MAN[1-9] -> MAN.
|
| |
|
| |
|
| |
|
|
|
|
|
|
| |
command-line arguments.
Noticed by: dynamo <dynamo@ime.net>
|
| |
|
|
|
|
|
|
|
| |
it again and again, practically begging the Bad Man to insert his symlink
underneath it and send us down the path to oblivion.
Noticed by: David Lary <dlary@secureworks.net>
|
|
|
|
| |
Spotted by: Manfred Antar <null@pozo.com>
|
|
|
|
|
|
| |
If $<basedir>_output is not set, don't redirect output
PR: 21395
|
|
|
|
| |
Submitted by: James Barkley <jbarkley@wgate.com>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
so that we don't see any more ``null message body, hope that's
ok'' messages.
We now see something like ``No output from the 3 files processed''.
Lump all output for a given periodic argument together so that
people with /usr/local/etc/periodic/daily (for example) will
get the output of those jobs together with the normal daily run
rather than getting a second email.
Prompted by: ben
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
All periodic sub-scripts <larf> now have their return codes interpreted
by periodic(8). Output may be masked based on variable values in
periodic.conf.
It's also now possible to email periodic output to arbitrary addresses,
or to send it to a log file, examples of which can be found in
newsyslog.conf.
The upshot of it all should be no discernable changes to the default
behaviour of periodic(8).
PR: 21250
|
|
|
|
|
|
|
| |
The only change in the default functionality should be that
the output reports are slightly more verbose WRT files deleted.
Not objected to by: freebsd-arch
|
|
|
|
| |
/etc/defaults/rc.conf now exports.
|
|
|
|
|
|
|
|
| |
This is needed so passwd diffs show the hostname instead of
" passwd diffs:"
PR: 17651
Submitted by: Giorgos Keramidas <keramida@ceid.upatras.gr>
|
| |
|
|
|
|
| |
PR: docs/11253
|
|
|
|
| |
Submitted by: Kevin Street <street@iname.com
|
|
|
|
|
|
|
|
|
| |
to a hostname. This will help those who keep a cluster of machines all with
the same hostname but different domain names.
PR: bin/9091
Submitted By: Heikki Suonsivu <hsu@clinet.fi>
No Response From: -current mailing list
|
|
|
|
|
| |
Submitted by: Dennis Glatting <dennis.glatting@software-munitions.com>
(misc/9147)
|