Date: Fri, 24 Jul 1998 19:17:43 +0200 From: Andreas Klemm <andreas@klemm.gtn.com> To: hackers@FreeBSD.ORG Subject: Re: Bug in the latest change to /etc/security Message-ID: <19980724191743.B10326@klemm.gtn.com> In-Reply-To: <19980724124358.A17572@ucb.crimea.ua>; from Ruslan Ermilov on Fri, Jul 24, 1998 at 12:43:58PM %2B0300 References: <19980724124358.A17572@ucb.crimea.ua>
next in thread | previous in thread | raw e-mail | index | archive | help
On Fri, Jul 24, 1998 at 12:43:58PM +0300, Ruslan Ermilov wrote: > Hi! > > The change was made by Andreas Klemm as described in PR#7050. > > I like this change, but it has a bug. > > The /etc/security script runs daily, and every time it is running > it looks "login failures" and "refused connect" in /var/log/messages. > > Suppose, I have the following line in my /etc/newsyslog.conf: > /var/log/messages 664 5 * 168 Z > > It means that my /var/log/messages rotates once a week. > Then, if I had "login failure" message on Monday, I'll get the same > message during the whole week until the next log rotation. > > In the second case I have /var/log/messages rotating several times a day. > Then I will see the warning messages from latest log only. > > Anyone has an idea how to fix? > Sorry, but I think it's up to you, how often you rotate the messages file. Important was for me, that _if_ we have a security script (and surely we do), we don't want to hide such important messages... If you see them more than once it's better than nothing at all ! Andreas /// -- Andreas Klemm http://www.FreeBSD.ORG/~andreas What gives you 90% more speed, for example, in kernel compilation ? http://www.FreeBSD.ORG/~fsmp/SMP/akgraph-a/graph1.html "NT = Not Today" (Maggie Biggs) ``powered by FreeBSD SMP'' To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-hackers" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?19980724191743.B10326>