From owner-freebsd-security Tue Nov 10 06:11:07 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id GAA26159 for freebsd-security-outgoing; Tue, 10 Nov 1998 06:11:07 -0800 (PST) (envelope-from owner-freebsd-security@FreeBSD.ORG) Received: from phoenix (phoenix.aye.net [206.185.8.134]) by hub.freebsd.org (8.8.8/8.8.8) with SMTP id GAA26150 for ; Tue, 10 Nov 1998 06:11:05 -0800 (PST) (envelope-from brich@aye.net) Received: (qmail 15928 invoked by uid 7506); 10 Nov 1998 14:09:16 -0000 Received: from localhost (sendmail-bs@127.0.0.1) by localhost with SMTP; 10 Nov 1998 14:09:16 -0000 Date: Tue, 10 Nov 1998 09:09:16 -0500 (EST) From: Barrett Richardson To: Open Systems Networking cc: freebsd-security@FreeBSD.ORG Subject: Re: chflags on log files question In-Reply-To: Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Maybe syslog is opening the file read/write and then positioning the file pointer at the end. That will fail when the uappnd flag is set (it must be opened for append). - Barrett On Tue, 10 Nov 1998, Open Systems Networking wrote: > > Ok I setup a firewall box running with secure level 3. > And added the following flags to /var/log files, uappnd and sappnd. > This should allow syslog to continue to write to the files correct? > > For instance: > > -rw-r--r-- 1 root bin uappnd,sappnd 6581 Nov 3 01:15 sec-log > > Is where my sshd connections are logged, although why it hasn't logged > any since the 3rd im still working on. But the flags should still allow > syslog to write to them correct? > > Chris > > -- > "You both seem to be ignoring the fact that the networking market is > driven by so-called 'IT professionals' these days, most of whom can't > tell the difference between an ARP and a carp." --Wes Peters > > ===================================| Open Systems FreeBSD Consulting. > FreeBSD 3.0 is available now! | Phone: (402)573-9124 / ICQ # 20016186 > -----------------------------------| 3335 N. 103 Plaza, Omaha, NE 68134 > FreeBSD: The power to serve! | E-Mail: opsys@open-systems.net > http://www.freebsd.org | Consulting, Network Engineering, Security > ===================================| http://open-systems.net > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-security" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message