From owner-freebsd-current Sat Sep 9 12:12:42 2000 Delivered-To: freebsd-current@freebsd.org Received: from scientia.demon.co.uk (scientia.demon.co.uk [212.228.14.13]) by hub.freebsd.org (Postfix) with ESMTP id EFD3237B422 for ; Sat, 9 Sep 2000 12:12:38 -0700 (PDT) Received: from strontium.scientia.demon.co.uk ([192.168.91.36] ident=root) by scientia.demon.co.uk with esmtp (Exim 3.16 #1) id 13Xopm-000ONl-00; Sat, 09 Sep 2000 18:54:34 +0100 Received: (from ben@localhost) by strontium.scientia.demon.co.uk (8.9.3/8.9.3) id SAA09125; Sat, 9 Sep 2000 18:54:34 +0100 (BST) (envelope-from ben) Date: Sat, 9 Sep 2000 18:54:34 +0100 From: Ben Smithurst To: Steve Ames Cc: freebsd-current@freebsd.org Subject: Re: fwd: [root: security check] Message-ID: <20000909185434.C77593@strontium.scientia.demon.co.uk> References: <20000909122528.A88592@virtual-voodoo.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2i In-Reply-To: <20000909122528.A88592@virtual-voodoo.com> Sender: owner-freebsd-current@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG Steve Ames wrote: >> virtual-voodoo.com changes in mounted filesystems: >> 6d5 >> < /dev/ad1s1g /source ufs rw 0 2 >> 8a8 >>> /dev/ad1s1g /source ufs rw 0 2 > > Got this is this morning's security check. This doesn't really > show a change. The actual change was from normal to soft-updates. > > Any way this can show what actually changed? 'mount -p' (which > /etc/security uses) doesn't show things such as soft-updates. In > fact I don't see a single mount option that does show everything... This is because the filesystem just moved in the mount list. I've seen this a few times. The fix is trivial, I think: --- security 2000/08/07 09:08:35 1.41 +++ security 2000/09/09 17:38:26 @@ -64,7 +64,7 @@ # Show changes in the way filesystems are mounted # [ -n "$ignore" ] && cmd="egrep -v ${ignore#|}" || cmd=cat -if mount -p | $cmd > $TMP; then +if mount -p | $cmd | sort > $TMP; then if [ ! -f $LOG/mount.today ]; then separator echo "no $LOG/mount.today" -- Ben Smithurst / ben@FreeBSD.org / PGP: 0x99392F7D To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-current" in the body of the message