From owner-freebsd-security@FreeBSD.ORG  Sat Feb 18 00:53:56 2012
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
Delivered-To: freebsd-security@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 0FDBE106566B
	for <freebsd-security@freebsd.org>;
	Sat, 18 Feb 2012 00:53:56 +0000 (UTC)
	(envelope-from emilien@tlapale.com)
Received: from mail.atelo.org (mail.atelo.org [87.98.156.81])
	by mx1.freebsd.org (Postfix) with ESMTP id C8A848FC08
	for <freebsd-security@freebsd.org>;
	Sat, 18 Feb 2012 00:53:55 +0000 (UTC)
Received: from [128.200.46.45] (dhcp046045.mobile.ss.uci.edu [128.200.46.45])
	by mail.atelo.org (Postfix) with ESMTPSA id 4D0E761F0D
	for <freebsd-security@freebsd.org>;
	Sat, 18 Feb 2012 00:35:32 +0000 (UTC)
Message-ID: <4F3EF2BC.7050206@tlapale.com>
Date: Fri, 17 Feb 2012 16:37:16 -0800
From: =?ISO-8859-1?Q?=C9milien_Tlapale?= <emilien@tlapale.com>
User-Agent: Mozilla/5.0 (X11; Linux x86_64;
	rv:10.0.1) Gecko/20120212 Thunderbird/10.0.1
MIME-Version: 1.0
To: freebsd-security@freebsd.org
References: <20120217120034.201EB106574C@hub.freebsd.org>
	<20120217152400.261AC106564A@hub.freebsd.org>
	<CAE-mSO+sa2Cu0aQksEXGyMnyns3=aAL8odmzQNMEJ77dpUAgmw@mail.gmail.com>
	<20120217194851.D76DE1065670@hub.freebsd.org>
	<4F3EE1C9.4030601@quip.cz>
	<20120217235620.4BEF4106566B@hub.freebsd.org>
In-Reply-To: <20120217235620.4BEF4106566B@hub.freebsd.org>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Subject: Re: periodic security run output gives false positives after 1 year
X-BeenThere: freebsd-security@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: "Security issues \[members-only posting\]"
	<freebsd-security.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>, 
	<mailto:freebsd-security-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-security>
List-Post: <mailto:freebsd-security@freebsd.org>
List-Help: <mailto:freebsd-security-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>, 
	<mailto:freebsd-security-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sat, 18 Feb 2012 00:53:56 -0000

On 17/02/2012 15:56, Roger Marquis wrote:
>> It is similar to y2k problem and dates with YY format instead of YYYY 
>> - it was fine for many years...
>
> Is it?  If I recall Y2K had more to do with 2 digit year fields that 
> should
> have been 4 digit.
Whereas we have a 0 digits year field.
>
> I suspect it was not common practice to leave logs on the server for more
> than a year when Allman originally wrote syslog, and I have not seen an
> environment where logs are left in /var/log for over a year. 
But now, fascist-like laws in a lot of countries require us to store log 
files for a *long* time, for everything.