From owner-freebsd-questions@freebsd.org  Tue Jun 11 12:36:47 2019
Return-Path: <owner-freebsd-questions@freebsd.org>
Delivered-To: freebsd-questions@mailman.ysv.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1])
 by mailman.ysv.freebsd.org (Postfix) with ESMTP id 6A11A15B9A6A
 for <freebsd-questions@mailman.ysv.freebsd.org>;
 Tue, 11 Jun 2019 12:36:47 +0000 (UTC)
 (envelope-from kremels@kreme.com)
Received: from mail.covisp.net (mail.covisp.net [65.121.55.42])
 (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
 (Client did not present a certificate)
 by mx1.freebsd.org (Postfix) with ESMTPS id 9E8638A045
 for <freebsd-questions@freebsd.org>; Tue, 11 Jun 2019 12:36:46 +0000 (UTC)
 (envelope-from kremels@kreme.com)
From: "@lbutlr" <kremels@kreme.com>
Content-Type: text/plain;
	charset=utf-8
Content-Transfer-Encoding: quoted-printable
Subject: Re: Daily Security is compiling about my backup drive
Date: Tue, 11 Jun 2019 06:36:38 -0600
References: <D49BD090-6325-4918-A8D7-90BB28BA714F@kreme.com>
To: FreeBSD <freebsd-questions@freebsd.org>
In-Reply-To: <D49BD090-6325-4918-A8D7-90BB28BA714F@kreme.com>
Message-Id: <184B84B0-C4F9-4DC5-9F55-98B26422EE37@kreme.com>
X-Mailer: Apple Mail (2.3554.18.2)
X-Rspamd-Queue-Id: 9E8638A045
X-Spamd-Bar: -
Authentication-Results: mx1.freebsd.org;
 spf=pass (mx1.freebsd.org: domain of kremels@kreme.com designates 65.121.55.42
 as permitted sender) smtp.mailfrom=kremels@kreme.com
X-Spamd-Result: default: False [-1.22 / 15.00]; ARC_NA(0.00)[];
 NEURAL_HAM_MEDIUM(-0.99)[-0.993,0]; FROM_HAS_DN(0.00)[];
 R_SPF_ALLOW(-0.20)[+mx]; MISSING_MIME_VERSION(2.00)[];
 MIME_GOOD(-0.10)[text/plain]; TO_MATCH_ENVRCPT_ALL(0.00)[];
 DMARC_NA(0.00)[kreme.com]; RCPT_COUNT_ONE(0.00)[1];
 NEURAL_HAM_LONG(-0.98)[-0.977,0];
 IP_SCORE(-0.28)[ip: (-0.97), ipnet: 65.112.0.0/12(-0.34), asn: 209(-0.06),
 country: US(-0.06)]; TO_DN_ALL(0.00)[];
 MX_GOOD(-0.01)[mail.covisp.net];
 NEURAL_HAM_SHORT(-0.56)[-0.559,0]; RCVD_COUNT_ZERO(0.00)[0];
 FROM_EQ_ENVFROM(0.00)[]; R_DKIM_NA(0.00)[];
 MIME_TRACE(0.00)[0:+];
 ASN(0.00)[asn:209, ipnet:65.112.0.0/12, country:US];
 MID_RHS_MATCH_FROM(0.00)[]; RCVD_TLS_ALL(0.00)[];
 RCVD_IN_DNSWL_LOW(-0.10)[42.55.121.65.list.dnswl.org : 127.0.5.1]
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <https://lists.freebsd.org/mailman/options/freebsd-questions>, 
 <mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions/>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <https://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
 <mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 11 Jun 2019 12:36:47 -0000

On May 31, 2019, at 6:09 AM, @lbutlr <kremels@kreme.com> wrote:
> The Daily Security update email that FreeBS generates is reporting a =
lot of error on my /mnt/backup drive (like setuid errors). Is there a =
way to let the periodic process ignore this mount point?

I=E2=80=99ve been looking for information on how to do this, and have =
come up empty.

It=E2=80=99s about 1000 lines every day.

/etc/periodic/security/100.chksetuid is the file that runs the check, =
but I am hesitant to edit the file.

I can disable the check entirely

/etc/defaults/periodic.conf:security_status_chksetuid_enable=3D=E2=80=9CYE=
S"

But I only want to exclude /mnt/backup from the check. It appears the =
only thing I could do is exclude /usr/local/bin from my backups (which I =
can=E2=80=99t do as many of those executables are custom local binaries =
and scripts) or to edit the 100.chksetuid file and set $MP manually.

--=20
At 20:43 the dome of St. Elvis Cathedral shattered... and the Devil
walked the earth again. He'd never really left.