Page MenuHomeFreeBSD

Quiet 450.status-security when *_inline="YES"
ClosedPublic

Authored by asomers on Apr 3 2017, 11:26 PM.
Tags
None
Referenced Files
Unknown Object (File)
Wed, Aug 12, 7:41 PM
Unknown Object (File)
Tue, Aug 11, 9:25 AM
Unknown Object (File)
Tue, Aug 11, 9:10 AM
Unknown Object (File)
Tue, Aug 11, 9:05 AM
Unknown Object (File)
Tue, Aug 11, 8:28 AM
Unknown Object (File)
Mon, Aug 10, 7:24 PM
Unknown Object (File)
Fri, Aug 7, 6:46 PM
Unknown Object (File)
Mon, Jul 27, 4:05 PM
Subscribers

Details

Summary

Quiet 450.status-security when *_inline="YES"

Previously, 450.status-security would always set rc=3 in inline mode,
because it doesn't know whether "periodic security" is going to find
anything interesting. But this annoyingly results in daily reports that
simply say "Security check: \n\n-- End of daily output --".

This change fixes that by testing whether "periodic security" printed
anything, and setting 450.status-security's exit status to 3 if it did. An
alternative would be to change the exit status of periodic(8) to be the
worst of its scripts' exit statuses, but that would be a more intrusive
change.

Test Plan

Manually run 450.status-periodic with and without _inline, and with and
without any interesting results.

Diff Detail

Repository
rS FreeBSD src repository - subversion
Lint
Lint Not Applicable
Unit
Tests Not Applicable