From owner-freebsd-questions@FreeBSD.ORG  Tue Jul 27 22:58:01 2004
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id AC7DC16A4CE
	for <freebsd-questions@freebsd.org>;
	Tue, 27 Jul 2004 22:58:01 +0000 (GMT)
Received: from server.tcslea.org (server.tcslea.org [205.238.132.218])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 7734243D2F
	for <freebsd-questions@freebsd.org>;
	Tue, 27 Jul 2004 22:58:01 +0000 (GMT)
	(envelope-from chris@coolarrow.com)
X-ExtScanner: Niversoft's FindAttachments (free)
X-Antivirus: clamav via cgpav
Received: from [205.238.178.37] (HELO system)
  by server.tcslea.org (CommuniGate Pro SMTP 4.2b7)
  with ESMTP id 432859; Tue, 27 Jul 2004 17:58:00 -0500
Message-ID: <200407271757530797.09E141DE@coolarrow.com>
In-Reply-To: <4106BCA6.8070908@daleco.biz>
References: <200407270748000178.07B2E20B@coolarrow.com>
 <4106BCA6.8070908@daleco.biz>
X-Mailer: Courier 3.50.00.09.1098 (http://www.rosecitysoftware.com) (P)
Date: Tue, 27 Jul 2004 17:57:53 -0500
From: "Chris" <chris@coolarrow.com>
To: "Kevin D. Kinsey, DaleCo, S.P." <kdk@daleco.biz>
Mime-Version: 1.0
Content-Type: text/plain; charset="ISO-8859-1"
Content-Transfer-Encoding: quoted-printable
cc: freebsd-questions@freebsd.org
Subject: Re[2]: security run output
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 27 Jul 2004 22:58:01 -0000

*This message was transferred with a trial version of CommuniGate(tm) Pro*

Hmm, I found:

/etc/periodic/security/700.kernelmsg

which seems to be what generates the information I was talking about in the=
 email. So I guess you were correct that it's not from /var/log/messages=
 after all.

Having said that, I don't have any idea if there is something in that small=
 script that I could change to increase the number of lines it puts into=
 the email. It's a bourne shell script, it appears:

if [ -r /etc/defaults/periodic.conf ]
then
    . /etc/defaults/periodic.conf
    source_periodic_confs
fi

. /etc/periodic/security/security.functions

rc=3D0

case "$daily_status_security_kernelmsg_enable" in
    [Yy][Ee][Ss])
        dmesg 2>/dev/null |
            check_diff new_only dmesg - "${host} kernel log messages:"
        rc=3D$?;;
    *)  rc=3D0;;
esac

exit $rc


And thanks for that script - I'll give it a try.

Chris