Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 24 Aug 2013 14:38:15 +0100
From:      RW <rwmaillists@googlemail.com>
To:        freebsd-hackers@freebsd.org
Subject:   Re: weekly periodic security status
Message-ID:  <20130824143815.39ea88f3@gumby.homeunix.com>
In-Reply-To: <20130822204958.GC24767@caravan.chchile.org>
References:  <20130822204958.GC24767@caravan.chchile.org>

next in thread | previous in thread | raw e-mail | index | archive | help
On Thu, 22 Aug 2013 22:49:58 +0200
Jeremie Le Hen wrote:

> Hi,
> 
> I plan to commit the attached patch.  This allows the turn the daily
> security checks into weekly checks.  You do this by adding the
> following to periodic.conf(5):
> 
>     daily_status_security_enable=NO
>     weekly_status_security_enable=YES
> 
> All other $daily_status_security_whatever variables will be renamed to
> $security_status_whatever.  The old variable name is supported but
> prints a warning.
> 

All daily_status_security_enable does is control whether the security
scripts are run from daily, but security is a periodic dirctory in its
own right.

You can simply set daily_status_security_enable=NO and put a
separate security entry in crontab (or anacrontab).   You can also
symlink the lightweight security scripts in a separate directory and
run those on all, or some, of the days you don't run the full security
pass.

In short the current support is more powerful and flexible than
anything suggested in this thread so far.



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20130824143815.39ea88f3>