Changes in security.functions

aa48259f337100e79933d660fec8856371f761ed - periodic.conf: remove long deprecated security_daily_compat_var()

Mon, 15 Apr 2024 11:05:17 +0000

periodic.conf: remove long deprecated security_daily_compat_var()This function is documented to be gone in after 11. Time to remove thiscompat shim.PR: 275296Reviewed by: jrm (mentor)MFC after: 1 monthDifferential Revision: https://reviews.freebsd.org/D44796 List of files: /src/usr.sbin/periodic/etc/security/security.functions

d0b2dbfa0ecf2bbc9709efc5e20baf8e4b44bbbf - Remove $FreeBSD$: one-line sh pattern

Wed, 16 Aug 2023 17:55:03 +0000

Remove $FreeBSD$: one-line sh patternRemove /^\s*#[#!]?\s*\$FreeBSD\$.*$\n/ List of files: /src/usr.sbin/periodic/etc/security/security.functions

81ea85a8845662ca329a954eeeb3e6d4124282a2 - Move all periodic related config and scripts to usr.sbin/periodic/

Sat, 11 Aug 2018 17:11:08 +0000

Move all periodic related config and scripts to usr.sbin/periodic/This makes pkgbase easier by tagging these as CONFS so they are properlytagged as config files.Approved by: will (mentor)Sponsored by: Essen HackathonDifferential Revision: https://reviews.freebsd.org/D16553 List of files: /src/usr.sbin/periodic/etc/security/security.functions

cc15f41351406a4ab69f767d70038ecbaf092803 - Fix 100.chksetuid and 110.neggrpperm for mountpoints with spaces

Fri, 25 Aug 2017 00:28:56 +0000

Fix 100.chksetuid and 110.neggrpperm for mountpoints with spacesAlso, fix them for mountpoints with tabs.PR: 48325Reported by: pguyot@kallisys.net, aaron@baugher.bizMFC after: 3 weeks List of files: /src/usr.sbin/periodic/etc/security/security.functions

05ef7ed17bc01122387461672141977e5f5e2461 - Use '^[>+][^+]' instead of '^[>+]' with grep(1) when filtering the

Fri, 29 Jan 2016 01:54:32 +0000

Use '^[>+][^+]' instead of '^[>+]' with grep(1) when filtering thediff(1) output between two files in "new_only"-mode. Otherwise,with the default of using unified format a remnant of the headerin the output is the result. This is especially irritating whenthe two files differ but the second one is empty, amounting to thevestige of the header being the only readout.Reported by: Stefan HaemmerlMFC after: 3 days List of files: /src/usr.sbin/periodic/etc/security/security.functions

69b55c23cb93350a21cd39c317881cda0b9187ca - Make the period of each periodic security script configurable.

Tue, 27 Aug 2013 21:20:28 +0000

Make the period of each periodic security script configurable.There are now six additional variables weekly_status_security_enable weekly_status_security_inline weekly_status_security_output monthly_status_security_enable monthly_status_security_inline monthly_status_security_outputalongside their existing daily counterparts. They all have the samedefault values.All other "daily_status_security_${scriptname}_${whatever}"variables have been renamed to "security_status_${name}_${whatever}".A compatibility shim has been introduced for the old variable names,which we will be able to remove in 11.0-RELEASE."security_status_${name}_enable" is still a boolean but a new"security_status_${name}_period" allows to define the period ofeach script. The value is one of "daily" (the default for backwardcompatibility), "weekly", "monthly" and "NO".Note that when the security periodic scripts are run directly fromcrontab(5) (as opposed to being called by daily or weekly periodicscripts), they will run unless the test is explicitely disabled with a"NO", either for in the "_enable" or the "_period" variable.When the security output is not inlined, the mail subject has beenchanged from "$host $arg run output" to "$host $arg $period run output".For instance: myfbsd security run output -> myfbsd security daily run outputI don't think this is considered as a stable API, but feel free tocorrect me if I'm wrong.Finally, I will rearrange periodic.conf(5) and default/periodic.confto put the security options in their own section. I left them inplace for this commit to make reviewing easier.Reviewed by: hackers@ List of files: /src/usr.sbin/periodic/etc/security/security.functions

d7883da19f09c7541201426ed9737bae992bd6ff - When looking for new lines in diff output, grep for '^[>+]' instead of

Mon, 22 Aug 2005 09:33:36 +0000

When looking for new lines in diff output, grep for '^[>+]' instead of'^>', in order to catch both normal and unified diffs.Problem reported by: volker at vwsoft dot com via -stableMFC after: 3 days List of files: /src/usr.sbin/periodic/etc/security/security.functions

59583bf53c7daa42cbd5af26114520b3ac14528d - Add a knob 'daily_status_security_diff_flags' controlling the

Thu, 23 Sep 2004 02:00:52 +0000

Add a knob 'daily_status_security_diff_flags' controlling theformat of the 'diff' output generated during periodic(8) scripts.Submitted by: keramida (script changes)Reviewed by: keramida (man page changes) List of files: /src/usr.sbin/periodic/etc/security/security.functions

3b5ba84fd21bfd20e12375b8ffd1aa0fa3431bae - Have mktemp(1) construct the temporary file name for us instead

Mon, 30 Jun 2003 22:06:26 +0000

Have mktemp(1) construct the temporary file name for us insteadof providing a template manually.Submitted by: Lars Eggert List of files: /src/usr.sbin/periodic/etc/security/security.functions

da509dd2934f0b3ae587cdfd312d2d64442fafef - Do not emit a message on stderr when one of the compared files

Sat, 16 Nov 2002 14:58:39 +0000

Do not emit a message on stderr when one of the compared filesis shorter than the other.Reviewed by: robertoMFC after: 3 days List of files: /src/usr.sbin/periodic/etc/security/security.functions

cb9eff8a9e6e4e2b624996d2f8ae9d4c734effe4 - Factor out code across various /etc/periodic/security scripts into a

Fri, 25 Oct 2002 15:14:16 +0000

Factor out code across various /etc/periodic/security scripts into aseparate file, /etc/periodic/security/security.functions.Reviewed by: roberto (mentor)Approved by: re@ List of files: /src/usr.sbin/periodic/etc/security/security.functions