From owner-freebsd-bugs@FreeBSD.ORG Wed Jun 22 04:40:14 2011 Return-Path: Delivered-To: freebsd-bugs@hub.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 40787106567A for ; Wed, 22 Jun 2011 04:40:14 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:4f8:fff6::28]) by mx1.freebsd.org (Postfix) with ESMTP id 30CCC8FC0A for ; Wed, 22 Jun 2011 04:40:14 +0000 (UTC) Received: from freefall.freebsd.org (localhost [127.0.0.1]) by freefall.freebsd.org (8.14.4/8.14.4) with ESMTP id p5M4eEqs052528 for ; Wed, 22 Jun 2011 04:40:14 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.14.4/8.14.4/Submit) id p5M4eEHG052527; Wed, 22 Jun 2011 04:40:14 GMT (envelope-from gnats) Date: Wed, 22 Jun 2011 04:40:14 GMT Message-Id: <201106220440.p5M4eEHG052527@freefall.freebsd.org> To: freebsd-bugs@FreeBSD.org From: Jaakko Heinonen Cc: Subject: Re: misc/158121: The "security run output" contains log entries which are a year old. X-BeenThere: freebsd-bugs@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: Jaakko Heinonen List-Id: Bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 22 Jun 2011 04:40:14 -0000 The following reply was made to PR misc/158121; it has been noted by GNATS. From: Jaakko Heinonen To: Jesper Wallin Cc: bug-followup@FreeBSD.org Subject: Re: misc/158121: The "security run output" contains log entries which are a year old. Date: Wed, 22 Jun 2011 07:32:25 +0300 On 2011-06-21, Jesper Wallin wrote: > The log entries in /var/log/auth.log does not contain the year. > Because of this, if you rarely logon to the machine (or for some other > reason doesn't manage to reach the 100K limit before newsyslog rotate > your auth.log) the "security run output" will send you a year old > logs. :-) > >Fix: > Make newsyslog rotate auth.log regardless of it's size or make somehow > make sshd/syslogd log the year as well. You can configure interval based rotation in /etc/newsyslog.conf . See the description for "when" field in newsyslog.conf(5) manual page. -- Jaakko