Page MenuHomeFreeBSD

periodic/security: Introduce $security_status_loginfail_ignore for 800.loginfail
ClosedPublic

Authored by michaelo on Fri, Jun 19, 5:24 PM.
Tags
None
Referenced Files
Unknown Object (File)
Fri, Jun 26, 7:32 AM
Unknown Object (File)
Thu, Jun 25, 9:40 AM
Unknown Object (File)
Thu, Jun 25, 6:47 AM
Unknown Object (File)
Wed, Jun 24, 2:39 PM
Unknown Object (File)
Wed, Jun 24, 8:11 AM
Unknown Object (File)
Wed, Jun 24, 5:57 AM
Unknown Object (File)
Wed, Jun 24, 5:07 AM
Unknown Object (File)
Tue, Jun 23, 11:20 PM

Details

Summary

Introduce a new variable "security_status_loginfail_ignore" to filter unwanted
login failure messages from the daily security checks.

Co-authored-by: Michael Osipov <michaelo@FreeBSD.org>
PR: 295191
MFC after: 1 week

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Skipped
Unit
Tests Skipped
Build Status
Buildable 74068
Build 70951: arc lint + arc unit

Event Timeline

The commit message says "are no" instead of "are not". You might consider something simpler because users can really filter out whatever they want.

Introduce a new variable "security_status_loginfail_ignore" to filter unwanted login failure messages from the daily security checks.

share/man/man5/periodic.conf.5
1041–1043
  1. Rather than egrep(1), say extended regular expression, since egrep is deprecated in POSIX in favor of grep -E.
  2. Simplify the text. Users can really filter out whatever they want.

@jrm, reasonable points. Thank you!

michaelo marked an inline comment as done.
This revision is now accepted and ready to land.Sat, Jun 20, 8:24 PM