From owner-p4-projects@FreeBSD.ORG  Wed Nov 21 08:50:08 2012
Return-Path: <owner-p4-projects@FreeBSD.ORG>
Delivered-To: p4-projects@freebsd.org
Received: by hub.freebsd.org (Postfix, from userid 32767)
 id 22CF87A3; Wed, 21 Nov 2012 08:50:08 +0000 (UTC)
Delivered-To: perforce@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52])
 by hub.freebsd.org (Postfix) with ESMTP id D57D57A1
 for <perforce@freebsd.org>; Wed, 21 Nov 2012 08:50:07 +0000 (UTC)
 (envelope-from pjd@freebsd.org)
Received: from skunkworks.freebsd.org (skunkworks.freebsd.org
 [IPv6:2001:4f8:fff6::2d])
 by mx1.freebsd.org (Postfix) with ESMTP id BB2CD8FC12
 for <perforce@freebsd.org>; Wed, 21 Nov 2012 08:50:07 +0000 (UTC)
Received: from skunkworks.freebsd.org (localhost [127.0.0.1])
 by skunkworks.freebsd.org (8.14.5/8.14.5) with ESMTP id qAL8o7bl072478
 for <perforce@freebsd.org>; Wed, 21 Nov 2012 08:50:07 GMT
 (envelope-from pjd@freebsd.org)
Received: (from perforce@localhost)
 by skunkworks.freebsd.org (8.14.5/8.14.5/Submit) id qAL8o7vu072475
 for perforce@freebsd.org; Wed, 21 Nov 2012 08:50:07 GMT
 (envelope-from pjd@freebsd.org)
Date: Wed, 21 Nov 2012 08:50:07 GMT
Message-Id: <201211210850.qAL8o7vu072475@skunkworks.freebsd.org>
X-Authentication-Warning: skunkworks.freebsd.org: perforce set sender to
 pjd@freebsd.org using -f
From: Pawel Jakub Dawidek <pjd@FreeBSD.org>
Subject: PERFORCE change 219824 for review
To: Perforce Change Reviews <perforce@freebsd.org>
Precedence: bulk
X-BeenThere: p4-projects@freebsd.org
X-Mailman-Version: 2.1.14
List-Id: p4 projects tree changes <p4-projects.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/options/p4-projects>,
 <mailto:p4-projects-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/p4-projects>
List-Post: <mailto:p4-projects@freebsd.org>
List-Help: <mailto:p4-projects-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/p4-projects>,
 <mailto:p4-projects-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 21 Nov 2012 08:50:08 -0000

http://p4web.freebsd.org/@@219824?ac=10

Change 219824 by pjd@pjd_anger on 2012/11/21 08:49:06

	Add a note that auditdistd configuration file can contain passwords
	and thus permissions should be carefully configured.
	
	Suggested by:	rwatson

Affected files ...

.. //depot/projects/trustedbsd/openbsm/bin/auditdistd/auditdistd.8#3 edit
.. //depot/projects/trustedbsd/openbsm/bin/auditdistd/auditdistd.conf.5#3 edit

Differences ...

==== //depot/projects/trustedbsd/openbsm/bin/auditdistd/auditdistd.8#3 (text+ko) ====

@@ -52,6 +52,9 @@
 Specify alternative location of the configuration file.
 The default location is
 .Pa /etc/security/auditdistd.conf .
+Note: the configuration file may contain passwords.
+Care should be taken to configure proper permissions on this file
+.Li ( eg. 0600 ) .
 .It Fl d
 Print or log debugging information.
 This option can be specified multiple times to raise the verbosity

==== //depot/projects/trustedbsd/openbsm/bin/auditdistd/auditdistd.conf.5#3 (text+ko) ====

@@ -36,6 +36,10 @@
 .Xr auditdistd 8
 daemon.
 .Sh DESCRIPTION
+Note: the configuration file may contain passwords.
+Care should be taken to configure proper permissions on this file
+.Li ( eg. 0600 ) .
+.Pp
 Every line starting with # is treated as comment and ignored.
 .Sh CONFIGURATION FILE SYNTAX
 General syntax of the