Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 16 Apr 2001 14:54:33 +0200
From:      Dirk Froemberg <dirk@FreeBSD.org>
To:        cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org
Subject:   Re: cvs commit: src/etc security
Message-ID:  <20010416145433.A22338@physik.TU-Berlin.DE>
In-Reply-To: <20010414175237.B18559@sunbay.com>; from ru@FreeBSD.org on Sat, Apr 14, 2001 at 05:52:37PM %2B0300
References:  <200104141345.f3EDj8007137@freefall.freebsd.org> <20010414175237.B18559@sunbay.com>

next in thread | previous in thread | raw e-mail | index | archive | help
Hi!

On Sat, Apr 14, 2001 at 05:52:37PM +0300, Ruslan Ermilov wrote:
> On Sat, Apr 14, 2001 at 06:45:08AM -0700, Dirk Froemberg wrote:
> > dirk        2001/04/14 06:45:08 PDT
> > 
> >   Modified files:        (Branch: RELENG_4)
> >     etc                  security 
> >   Log:
> >   MFC: Log denied IXFR.
> >   
> >   Approved by:	jkh
> >   
> >   Revision   Changes    Path
> >   1.36.2.13  +2 -2      src/etc/security
> > 
> Could we please calm down these to the named_enable="YES" case?
> This would require sourcing rc.conf's by /etc/security.

I'd rather add an extra daily periodic file (e. g. 470.status-named)
and do some aggregation (i. e. list attempts from hosts for zones
only once) instead of listing every line from /var/log/messages.
I'm not quite sure if it belongs to security, anyway.

This extra file could be disabled via /etc/periodic.conf.

	Regards Dirk

-- 
Dirk Froemberg

FreeBSD: The Power to Serve!		http://www.FreeBSD.org/

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe cvs-all" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010416145433.A22338>