diff options
| author | jim-p <jimp@pfsense.org> | 2013-01-10 13:58:44 -0500 |
|---|---|---|
| committer | jim-p <jimp@pfsense.org> | 2013-01-10 14:02:45 -0500 |
| commit | e6b741a59c1d470ddfe830551d4759cb3d0c5856 (patch) | |
| tree | 0aa1aa4033ef9d3ac39bdd36715caa3d22a7f316 /etc | |
| parent | 43ba3952594e4a3639d290db1a72c78d9814176b (diff) | |
| download | pfsense-e6b741a59c1d470ddfe830551d4759cb3d0c5856.zip pfsense-e6b741a59c1d470ddfe830551d4759cb3d0c5856.tar.gz | |
Put syslogd into secure mode so no remote log messages are accepted. Sending to a remote syslog server still works with this option.
Diffstat (limited to 'etc')
| -rw-r--r-- | etc/inc/system.inc | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/etc/inc/system.inc b/etc/inc/system.inc index 9c178f7..037bc27 100644 --- a/etc/inc/system.inc +++ b/etc/inc/system.inc @@ -586,9 +586,9 @@ EOD; // Are we logging to a least one remote server ? if(strpos($syslogconf, "@") != false) - $retval = mwexec_bg("/usr/sbin/syslogd -c -c -l /var/dhcpd/var/run/log -f {$g['varetc_path']}/syslog.conf"); + $retval = mwexec_bg("/usr/sbin/syslogd -s -c -c -l /var/dhcpd/var/run/log -f {$g['varetc_path']}/syslog.conf"); else { - $retval = mwexec_bg("/usr/sbin/syslogd -c -c -l /var/dhcpd/var/run/log -f {$g['varetc_path']}/syslog.conf"); + $retval = mwexec_bg("/usr/sbin/syslogd -s -c -c -l /var/dhcpd/var/run/log -f {$g['varetc_path']}/syslog.conf"); } } else { |
