head	1.12;
access;
symbols
	RELENG_8_4:1.12.0.2
	RELENG_9_1_0_RELEASE:1.11.2.1.4.2
	RELENG_9_1:1.11.2.1.0.4
	RELENG_9_1_BP:1.11.2.1
	RELENG_8_3_0_RELEASE:1.7.2.7.2.1
	RELENG_8_3:1.7.2.7.0.2
	RELENG_8_3_BP:1.7.2.7
	RELENG_9_0_0_RELEASE:1.11.2.1.2.1
	RELENG_9_0:1.11.2.1.0.2
	RELENG_9_0_BP:1.11.2.1
	RELENG_9:1.11.0.2
	RELENG_9_BP:1.11
	RELENG_7_4_0_RELEASE:1.6.2.1.6.1
	RELENG_8_2_0_RELEASE:1.7.2.5.2.1
	RELENG_7_4:1.6.2.1.0.6
	RELENG_7_4_BP:1.6.2.1
	RELENG_8_2:1.7.2.5.0.2
	RELENG_8_2_BP:1.7.2.5
	RELENG_8_1_0_RELEASE:1.7.2.1.4.1
	RELENG_8_1:1.7.2.1.0.4
	RELENG_8_1_BP:1.7.2.1
	RELENG_7_3_0_RELEASE:1.6.2.1.4.1
	RELENG_7_3:1.6.2.1.0.4
	RELENG_7_3_BP:1.6.2.1
	RELENG_8_0_0_RELEASE:1.7.2.1.2.1
	RELENG_8_0:1.7.2.1.0.2
	RELENG_8_0_BP:1.7.2.1
	RELENG_8:1.7.0.2
	RELENG_8_BP:1.7
	RELENG_7_2_0_RELEASE:1.6.2.1.2.1
	RELENG_7_2:1.6.2.1.0.2
	RELENG_7_2_BP:1.6.2.1
	RELENG_7_1_0_RELEASE:1.6.6.1
	RELENG_6_4_0_RELEASE:1.4.12.1
	RELENG_7_1:1.6.0.6
	RELENG_7_1_BP:1.6
	RELENG_6_4:1.4.0.12
	RELENG_6_4_BP:1.4
	RELENG_7_0_0_RELEASE:1.6
	RELENG_6_3_0_RELEASE:1.4
	RELENG_7_0:1.6.0.4
	RELENG_7_0_BP:1.6
	RELENG_6_3:1.4.0.10
	RELENG_6_3_BP:1.4
	RELENG_7:1.6.0.2
	RELENG_7_BP:1.6
	RELENG_6_2_0_RELEASE:1.4
	RELENG_6_2:1.4.0.8
	RELENG_6_2_BP:1.4
	RELENG_5_5_0_RELEASE:1.3.8.1
	RELENG_5_5:1.3.8.1.0.4
	RELENG_5_5_BP:1.3.8.1
	RELENG_6_1_0_RELEASE:1.4
	RELENG_6_1:1.4.0.6
	RELENG_6_1_BP:1.4
	RELENG_6_0_0_RELEASE:1.4
	RELENG_6_0:1.4.0.4
	RELENG_6_0_BP:1.4
	RELENG_6:1.4.0.2
	RELENG_6_BP:1.4
	RELENG_5_4_0_RELEASE:1.3.8.1
	RELENG_5_4:1.3.8.1.0.2
	RELENG_5_4_BP:1.3.8.1
	RELENG_4_11_0_RELEASE:1.1.2.3
	RELENG_4_11:1.1.2.3.0.8
	RELENG_4_11_BP:1.1.2.3
	RELENG_5_3_0_RELEASE:1.3
	RELENG_5_3:1.3.0.10
	RELENG_5_3_BP:1.3
	RELENG_5:1.3.0.8
	RELENG_5_BP:1.3
	RELENG_4_10_0_RELEASE:1.1.2.3
	RELENG_4_10:1.1.2.3.0.6
	RELENG_4_10_BP:1.1.2.3
	RELENG_5_2_1_RELEASE:1.3
	RELENG_5_2_0_RELEASE:1.3
	RELENG_5_2:1.3.0.6
	RELENG_5_2_BP:1.3
	RELENG_4_9_0_RELEASE:1.1.2.3
	RELENG_4_9:1.1.2.3.0.4
	RELENG_4_9_BP:1.1.2.3
	RELENG_5_1_0_RELEASE:1.3
	RELENG_5_1:1.3.0.4
	RELENG_5_1_BP:1.3
	RELENG_4_8_0_RELEASE:1.1.2.3
	RELENG_4_8:1.1.2.3.0.2
	RELENG_4_8_BP:1.1.2.3
	RELENG_5_0_0_RELEASE:1.3
	RELENG_5_0:1.3.0.2
	RELENG_5_0_BP:1.3
	RELENG_4_7_0_RELEASE:1.1.2.2
	RELENG_4_7:1.1.2.2.0.2
	RELENG_4_7_BP:1.1.2.2
	RELENG_4_6_2_RELEASE:1.1.2.1
	RELENG_4_6_1_RELEASE:1.1.2.1
	RELENG_4_6_0_RELEASE:1.1.2.1
	RELENG_4_6:1.1.2.1.0.2
	RELENG_4_6_BP:1.1.2.1
	RELENG_4:1.1.0.2;
locks; strict;
comment	@# @;


1.12
date	2012.11.17.01.49.04;	author svnexp;	state Exp;
branches
	1.12.2.1;
next	1.11;

1.11
date	2011.03.27.03.06.58;	author dougb;	state Exp;
branches
	1.11.2.1;
next	1.10;

1.10
date	2010.11.13.00.40.43;	author brooks;	state Exp;
branches;
next	1.9;

1.9
date	2010.11.09.18.46.44;	author delphij;	state Exp;
branches;
next	1.8;

1.8
date	2010.07.19.20.19.14;	author gabor;	state Exp;
branches;
next	1.7;

1.7
date	2008.09.21.22.02.26;	author sam;	state Exp;
branches
	1.7.2.1;
next	1.6;

1.6
date	2006.08.25.07.34.36;	author trhodes;	state Exp;
branches
	1.6.2.1
	1.6.6.1;
next	1.5;

1.5
date	2006.05.12.19.17.34;	author mlaier;	state Exp;
branches;
next	1.4;

1.4
date	2004.11.24.18.41.53;	author mlaier;	state Exp;
branches
	1.4.2.1
	1.4.12.1;
next	1.3;

1.3
date	2002.10.25.15.23.26;	author thomas;	state Exp;
branches
	1.3.8.1;
next	1.2;

1.2
date	2002.07.18.12.32.57;	author ru;	state Exp;
branches;
next	1.1;

1.1
date	2001.12.07.23.57.38;	author cjc;	state Exp;
branches
	1.1.2.1;
next	;

1.12.2.1
date	2012.11.17.01.49.04;	author svnexp;	state dead;
branches;
next	1.12.2.2;

1.12.2.2
date	2013.03.28.13.02.43;	author svnexp;	state Exp;
branches;
next	;

1.11.2.1
date	2011.09.23.00.51.37;	author kensmith;	state Exp;
branches
	1.11.2.1.2.1
	1.11.2.1.4.1;
next	1.11.2.2;

1.11.2.2
date	2012.11.17.11.36.11;	author svnexp;	state Exp;
branches;
next	;

1.11.2.1.2.1
date	2011.11.11.04.20.22;	author kensmith;	state Exp;
branches;
next	1.11.2.1.2.2;

1.11.2.1.2.2
date	2012.11.17.08.36.11;	author svnexp;	state Exp;
branches;
next	;

1.11.2.1.4.1
date	2012.08.05.23.54.33;	author kensmith;	state Exp;
branches;
next	1.11.2.1.4.2;

1.11.2.1.4.2
date	2012.11.17.08.47.01;	author svnexp;	state Exp;
branches;
next	;

1.7.2.1
date	2009.08.03.08.13.06;	author kensmith;	state Exp;
branches
	1.7.2.1.2.1
	1.7.2.1.4.1;
next	1.7.2.2;

1.7.2.2
date	2010.11.06.21.04.01;	author gabor;	state Exp;
branches;
next	1.7.2.3;

1.7.2.3
date	2010.11.07.11.39.48;	author delphij;	state Exp;
branches;
next	1.7.2.4;

1.7.2.4
date	2010.11.07.11.51.57;	author delphij;	state Exp;
branches;
next	1.7.2.5;

1.7.2.5
date	2010.11.23.01.39.30;	author delphij;	state Exp;
branches
	1.7.2.5.2.1;
next	1.7.2.6;

1.7.2.6
date	2011.02.06.13.59.03;	author brooks;	state Exp;
branches;
next	1.7.2.7;

1.7.2.7
date	2011.03.28.19.39.53;	author dougb;	state Exp;
branches
	1.7.2.7.2.1;
next	1.7.2.8;

1.7.2.8
date	2012.11.17.10.35.56;	author svnexp;	state Exp;
branches;
next	;

1.7.2.1.2.1
date	2009.10.25.01.10.29;	author kensmith;	state Exp;
branches;
next	;

1.7.2.1.4.1
date	2010.06.14.02.09.06;	author kensmith;	state Exp;
branches;
next	;

1.7.2.5.2.1
date	2010.12.21.17.09.25;	author kensmith;	state Exp;
branches;
next	;

1.7.2.7.2.1
date	2012.03.03.06.15.13;	author kensmith;	state Exp;
branches;
next	1.7.2.7.2.2;

1.7.2.7.2.2
date	2012.11.17.08.24.38;	author svnexp;	state Exp;
branches;
next	;

1.6.2.1
date	2009.01.12.17.19.17;	author sam;	state Exp;
branches
	1.6.2.1.2.1
	1.6.2.1.4.1
	1.6.2.1.6.1;
next	1.6.2.2;

1.6.2.2
date	2011.03.28.19.42.21;	author dougb;	state Exp;
branches;
next	1.6.2.3;

1.6.2.3
date	2012.11.17.08.01.19;	author svnexp;	state Exp;
branches;
next	;

1.6.2.1.2.1
date	2009.04.15.03.14.26;	author kensmith;	state Exp;
branches;
next	;

1.6.2.1.4.1
date	2010.02.10.00.26.20;	author kensmith;	state Exp;
branches;
next	;

1.6.2.1.6.1
date	2010.12.21.17.10.29;	author kensmith;	state Exp;
branches;
next	1.6.2.1.6.2;

1.6.2.1.6.2
date	2012.11.17.08.16.37;	author svnexp;	state Exp;
branches;
next	;

1.6.6.1
date	2008.11.25.02.59.29;	author kensmith;	state Exp;
branches;
next	;

1.4.2.1
date	2012.11.17.07.39.06;	author svnexp;	state Exp;
branches;
next	;

1.4.12.1
date	2008.10.02.02.57.24;	author kensmith;	state Exp;
branches;
next	;

1.3.8.1
date	2004.12.08.00.37.50;	author mlaier;	state Exp;
branches;
next	;

1.1.2.1
date	2002.02.25.10.53.47;	author cjc;	state Exp;
branches;
next	1.1.2.2;

1.1.2.2
date	2002.07.18.12.36.07;	author ru;	state Exp;
branches;
next	1.1.2.3;

1.1.2.3
date	2002.11.07.19.38.46;	author thomas;	state Exp;
branches;
next	1.1.2.4;

1.1.2.4
date	2012.11.17.07.22.39;	author svnexp;	state Exp;
branches;
next	;


desc
@@


1.12
log
@Switching exporter and resync
@
text
@# $FreeBSD: head/etc/periodic/security/Makefile 220049 2011-03-27 03:06:58Z dougb $

.include <bsd.own.mk>

FILES=	100.chksetuid \
	110.neggrpperm \
	200.chkmounts \
	300.chkuid0 \
	400.passwdless \
	410.logincheck \
	700.kernelmsg \
	800.loginfail \
	900.tcpwrap \
	security.functions

# NB: keep these sorted by MK_* knobs

.if ${MK_IPFILTER} != "no"
FILES+=	510.ipfdenied
FILES+=	610.ipf6denied
.endif

.if ${MK_IPFW} != "no"
FILES+=	500.ipfwdenied \
	550.ipfwlimit
.endif

.if ${MK_PF} != "no"
FILES+=	520.pfdenied
.endif

.if ${MK_PKGTOOLS} != "no"
FILES+=	460.chkportsum
.endif

.include <bsd.prog.mk>
@


1.12.2.1
log
@file Makefile was added on branch RELENG_8_4 on 2013-03-28 13:02:43 +0000
@
text
@d1 36
@


1.12.2.2
log
@## SVN ## Exported commit - http://svnweb.freebsd.org/changeset/base/248810
## SVN ## CVS IS DEPRECATED: http://wiki.freebsd.org/CvsIsDeprecated
@
text
@a0 36
# $FreeBSD: releng/8.4/etc/periodic/security/Makefile 220112 2011-03-28 19:39:53Z dougb $

.include <bsd.own.mk>

FILES=	100.chksetuid \
	110.neggrpperm \
	200.chkmounts \
	300.chkuid0 \
	400.passwdless \
	410.logincheck \
	700.kernelmsg \
	800.loginfail \
	900.tcpwrap \
	security.functions

# NB: keep these sorted by MK_* knobs

.if ${MK_IPFILTER} != "no"
FILES+=	510.ipfdenied
FILES+=	610.ipf6denied
.endif

.if ${MK_IPFW} != "no"
FILES+=	500.ipfwdenied \
	550.ipfwlimit
.endif

.if ${MK_PF} != "no"
FILES+=	520.pfdenied
.endif

.if ${MK_PKGTOOLS} != "no"
FILES+=	460.chkportsum
.endif

.include <bsd.prog.mk>
@


1.11
log
@SVN rev 220049 on 2011-03-27 03:06:58Z by dougb

Hook the 220.backup-pkgdb script I added to the build unconditionally

Hook up 610.ipf6denied based on MK_IPFILTER as 510.ipfdenied is now

Poked by:	Andrzej Tobola <ato@@iem.pw.edu.pl>
@
text
@d1 1
a1 1
# $FreeBSD$
@


1.11.2.1
log
@SVN rev 225736 on 2011-09-23 00:51:37Z by kensmith

Copy head to stable/9 as part of 9.0-RELEASE release cycle.

Approved by:	re (implicit)
@
text
@@


1.11.2.2
log
@## SVN ##
## SVN ## Exported commit - http://svnweb.freebsd.org/changeset/base/ 242902
## SVN ## CVS IS DEPRECATED: http://wiki.freebsd.org/CvsIsDeprecated
## SVN ##
## SVN ## ------------------------------------------------------------------------
## SVN ## r242902 | dteske | 2012-11-11 23:29:45 +0000 (Sun, 11 Nov 2012) | 10 lines
## SVN ##
## SVN ## Fix a regression introduced by SVN r211417 that saw the breakage of a feature
## SVN ## documented in usr.sbin/sysinstall/help/shortcuts.hlp (reproduced below):
## SVN ##
## SVN ## If /usr/sbin/sysinstall is linked to another filename, say
## SVN ## `/usr/local/bin/configPackages', then the basename will be used
## SVN ## as an implicit command name.
## SVN ##
## SVN ## Reviewed by:	adrian (co-mentor)
## SVN ## Approved by:	adrian (co-mentor)
## SVN ##
## SVN ## ------------------------------------------------------------------------
## SVN ##
@
text
@d1 1
a1 1
# $FreeBSD: stable/9/etc/periodic/security/Makefile 220049 2011-03-27 03:06:58Z dougb $
@


1.11.2.1.4.1
log
@SVN rev 239080 on 2012-08-05 23:54:33Z by kensmith

Copy stable/9 to releng/9.1 as part of the 9.1-RELEASE release process.

Approved by:	re (implicit)
@
text
@@


1.11.2.1.4.2
log
@Switch importer
@
text
@d1 1
a1 1
# $FreeBSD: releng/9.1/etc/periodic/security/Makefile 220049 2011-03-27 03:06:58Z dougb $
@


1.11.2.1.2.1
log
@SVN rev 227445 on 2011-11-11 04:20:22Z by kensmith

Copy stable/9 to releng/9.0 as part of the FreeBSD 9.0-RELEASE release
cycle.

Approved by:	re (implicit)
@
text
@@


1.11.2.1.2.2
log
@Switch importer
@
text
@d1 1
a1 1
# $FreeBSD: releng/9.0/etc/periodic/security/Makefile 220049 2011-03-27 03:06:58Z dougb $
@


1.10
log
@SVN rev 215213 on 2010-11-13 00:40:43Z by brooks

Add an (off by default) check for negative permissions (where the
group on a object has less permissions that everyone).  These
permissions will not work reliably over NFS if you have more than
14 supplemental groups and are usually not what you mean.

MFC after:	1 week
@
text
@d20 1
@


1.9
log
@SVN rev 215045 on 2010-11-09 18:46:44Z by delphij

Hide 460.chkportsum in MK_PKGTOOLS != no case.

Submitted by:	Alex Kozlov <spam rm-rf kiev ua>
MFC after:	2 weeks
@
text
@d6 1
@


1.8
log
@SVN rev 210254 on 2010-07-19 20:19:14Z by gabor

- Add a periodic script, which can be used to find installed ports' files with
  mismatched checksum

PR:		conf/124641
Submitted by:	Alex Kozlov <spam@@rm-rf.kiev.ua>
Approved by:	delphij (mentor)
@
text
@a9 1
	460.chkportsum \
d30 4
@


1.7
log
@SVN rev 183242 on 2008-09-21 22:02:26Z by sam

add new build knobs and jigger some existing controls to improve
control over the result of buildworld and installworld; this especially
helps packaging systems such as nanobsd

Reviewed by:	various (posted to arch)
MFC after:	1 month
@
text
@d10 1
@


1.7.2.1
log
@SVN rev 196045 on 2009-08-03 08:13:06Z by kensmith

Copy head to stable/8 as part of 8.0 Release cycle.

Approved by:	re (Implicit)
@
text
@@


1.7.2.2
log
@SVN rev 214897 on 2010-11-06 21:04:01Z by gabor

MFC r210254:

  - Add a periodic script, which can be used to find installed ports' files with
    mismatched checksum

MFC r211141

  - Fixes to the chkportsum script to handle better some special cases,
    like spaces in filename

Approved by:	delphij (mentor)
@
text
@a8 1
	460.chkportsum \
@


1.7.2.3
log
@SVN rev 214911 on 2010-11-07 11:39:48Z by delphij

Revert r214897 in order to finish the merge properly without stopping
svn2cvs.

Pointy hat to:	delphij
@
text
@d9 1
@


1.7.2.4
log
@SVN rev 214912 on 2010-11-07 11:51:57Z by delphij

Redo r214897:

MFC r211141 (gabor)

- Fixes to the chkportsum script to handle better some special cases,
  like spaces in filename

Submitted by:   Alex Kozlov <spam@@rm-rf.kiev.ua>

MFC r210254 (gabor)

- Add a periodic script, which can be used to find installed ports' files with
  mismatched checksum

PR:             conf/124641
Submitted by:   Alex Kozlov <spam@@rm-rf.kiev.ua>
@
text
@a9 1
	460.chkportsum \
@


1.7.2.5
log
@SVN rev 215730 on 2010-11-23 01:39:30Z by delphij

MFC r204459 (antonie):

Add files to remove when MK_PKGTOOLS=no.

MFC r215045 [1]:

Hide 460.chkportsum in MK_PKGTOOLS != no case.

Submitted by:	Alex Kozlov <spam rm-rf kiev ua> [1]
@
text
@d10 1
a30 4
.if ${MK_PKGTOOLS} != "no"
FILES+=	460.chkportsum
.endif

@


1.7.2.6
log
@SVN rev 218372 on 2011-02-06 13:59:03Z by brooks

MFC r215213:

Add an (off by default) check for negative permissions (where the
group on a object has less permissions than everyone).  These
permissions will not work reliably over NFS if you have more than
14 supplemental groups and are usually not what you mean.
@
text
@a5 1
	110.neggrpperm \
@


1.7.2.7
log
@SVN rev 220112 on 2011-03-28 19:39:53Z by dougb

MFC r220020:

Add a daily period script to back up /var/db/pkg

MFC r220049:

Hook the 220.backup-pkgdb script I added to the build unconditionally
Hook up 610.ipf6denied based on MK_IPFILTER as 510.ipfdenied is now
@
text
@a19 1
FILES+=	610.ipf6denied
@


1.7.2.8
log
@## SVN ##
## SVN ## Exported commit - http://svnweb.freebsd.org/changeset/base/ 242909
## SVN ## CVS IS DEPRECATED: http://wiki.freebsd.org/CvsIsDeprecated
## SVN ##
## SVN ## ------------------------------------------------------------------------
## SVN ## r242909 | dim | 2012-11-12 07:47:19 +0000 (Mon, 12 Nov 2012) | 20 lines
## SVN ##
## SVN ## MFC r242625:
## SVN ##
## SVN ## Remove duplicate const specifiers in many drivers (I hope I got all of
## SVN ## them, please let me know if not).  Most of these are of the form:
## SVN ##
## SVN ## static const struct bzzt_type {
## SVN ##       [...list of members...]
## SVN ## } const bzzt_devs[] = {
## SVN ##       [...list of initializers...]
## SVN ## };
## SVN ##
## SVN ## The second const is unnecessary, as arrays cannot be modified anyway,
## SVN ## and if the elements are const, the whole thing is const automatically
## SVN ## (e.g. it is placed in .rodata).
## SVN ##
## SVN ## I have verified this does not change the binary output of a full kernel
## SVN ## build (except for build timestamps embedded in the object files).
## SVN ##
## SVN ## Reviewed by:	yongari, marius
## SVN ##
## SVN ## ------------------------------------------------------------------------
## SVN ##
@
text
@d1 1
a1 1
# $FreeBSD: stable/8/etc/periodic/security/Makefile 220112 2011-03-28 19:39:53Z dougb $
@


1.7.2.7.2.1
log
@SVN rev 232438 on 2012-03-03 06:15:13Z by kensmith

Copy stable/8 to releng/8.3 as part of 8.3-RELEASE release cycle.

Approved by:	re (implicit)
@
text
@@


1.7.2.7.2.2
log
@Switch importer
@
text
@d1 1
a1 1
# $FreeBSD: releng/8.3/etc/periodic/security/Makefile 220112 2011-03-28 19:39:53Z dougb $
@


1.7.2.5.2.1
log
@SVN rev 216617 on 2010-12-21 17:09:25Z by kensmith

Copy stable/8 to releng/8.2 in preparation for FreeBSD-8.2 release.

Approved by:	re (implicit)
@
text
@@


1.7.2.1.4.1
log
@SVN rev 209145 on 2010-06-14 02:09:06Z by kensmith

Copy stable/8 to releng/8.1 in preparation for 8.1-RC1.

Approved by:	re (implicit)
@
text
@@


1.7.2.1.2.1
log
@SVN rev 198460 on 2009-10-25 01:10:29Z by kensmith

Copy stable/8 to releng/8.0 as part of 8.0-RELEASE release procedure.

Approved by:	re (implicit)
@
text
@@


1.6
log
@Add login.conf checking to periodic security scripts.  If the login.conf file
is not UID/GID 0, limits will be ignored and a strange error sent to auth.log.

Head nod:	ru, rwatson
@
text
@d3 2
a9 4
	500.ipfwdenied \
	510.ipfdenied \
	520.pfdenied \
	550.ipfwlimit \
d15 15
@


1.6.2.1
log
@SVN rev 187106 on 2009-01-12 17:19:17Z by sam

sync build infrastructure changes with HEAD

Reviewed by:	imp
@
text
@a2 2
.include <bsd.own.mk>

d8 4
a16 15
# NB: keep these sorted by MK_* knobs

.if ${MK_IPFILTER} != "no"
FILES+=	510.ipfdenied
.endif

.if ${MK_IPFW} != "no"
FILES+=	500.ipfwdenied \
	550.ipfwlimit
.endif

.if ${MK_PF} != "no"
FILES+=	520.pfdenied
.endif

@


1.6.2.2
log
@SVN rev 220113 on 2011-03-28 19:42:21Z by dougb

MFC r220020:

Add a daily period script to back up /var/db/pkg

MFC r220049:

Hook the 220.backup-pkgdb script I added to the build unconditionally
Hook up 610.ipf6denied based on MK_IPFILTER as 510.ipfdenied is now
@
text
@a18 1
FILES+=	610.ipf6denied
@


1.6.2.3
log
@Switch importer
@
text
@d1 1
a1 1
# $FreeBSD: stable/7/etc/periodic/security/Makefile 220113 2011-03-28 19:42:21Z dougb $
@


1.6.2.1.6.1
log
@SVN rev 216618 on 2010-12-21 17:10:29Z by kensmith

Copy stable/7 to releng/7.4 in preparation for FreeBSD-7.4 release.

Approved by:	re (implicit)
@
text
@@


1.6.2.1.6.2
log
@Switch importer
@
text
@d1 1
a1 1
# $FreeBSD: releng/7.4/etc/periodic/security/Makefile 187106 2009-01-12 17:19:17Z sam $
@


1.6.2.1.4.1
log
@SVN rev 203736 on 2010-02-10 00:26:20Z by kensmith

Copy stable/7 to releng/7.3 as part of the 7.3-RELEASE process.

Approved by:	re (implicit)
@
text
@@


1.6.2.1.2.1
log
@SVN rev 191087 on 2009-04-15 03:14:26Z by kensmith

Create releng/7.2 from stable/7 in preparation for 7.2-RELEASE.

Approved by:	re (implicit)
@
text
@@


1.6.6.1
log
@SVN rev 185281 on 2008-11-25 02:59:29Z by kensmith

Create releng/7.1 in preparation for moving into RC phase of 7.1 release
cycle.

Approved by:	re (implicit)
@
text
@@


1.5
log
@Move etc/rc.firewall6 to ipfw2+v6, update related rc.d and periodic scripts.
Since ipfw2 now does dual-stack, statistics for IPv6 come from the ipfw
scripts as well.
@
text
@d7 1
@


1.4
log
@Teach periodic(8) security output to display information about blocked
packet counts by pf(4).

This adds a ``daily_status_security_pfdenied_enable'' variable to
periodic.conf, which defaults to ``YES'' as the matching IPF(W) versions.

The output will look like this (line wrapped):

  pf denied packets:
  > block drop log on rl0 proto tcp all [ Evaluations: 504986 Packets: 0
    Bytes: 0 States: 0 ]
  > block drop log on rl0 all [ Evaluations: 18559 Packets: 427 Bytes: 140578
    States: 0 ]

Submitted by:	clive (thanks a lot!)
MFC after:	2 weeks
@
text
@a10 2
	600.ip6fwdenied \
	650.ip6fwlimit \
@


1.4.2.1
log
@Switch importer
@
text
@d1 1
a1 1
# $FreeBSD: stable/6/etc/periodic/security/Makefile 138061 2004-11-24 18:41:53Z mlaier $
@


1.4.12.1
log
@SVN rev 183531 on 2008-10-02 02:57:24Z by kensmith

Create releng/6.4 from stable/6 in preparation for 6.4-RC1.

Approved by:	re (implicit)
@
text
@@


1.3
log
@Add newly-added sripts to FILES.

Reviewed by:	roberto
@
text
@d9 1
@


1.3.8.1
log
@MFC:
  Teach periodic(8) security output to display information about blocked
  packet counts by pf(4).

  This adds a `daily_status_security_pfdenied_enable'' variable to
  periodic.conf, which defaults to `YES'' as the matching IPF(W) versions.

  Submitted by:   clive (thanks a lot!)

PR:	conf/73959
@
text
@a8 1
	520.pfdenied \
@


1.2
log
@Install scripts via FILES (purposedly not via SCRIPTS that would
strip the suffixes).
@
text
@d8 1
d14 2
a15 1
	900.tcpwrap
@


1.1
log
@Long ago, there was just /etc/daily. Then /etc/security was split out
of /etc/daily. Some time later, /etc/daily became a set of periodic(8)
scripts. Now, this evolution continues, and /etc/security has been
broken into periodic(8) scripts to make local customization easier and
more maintainable.

Reviewed by:	ru
Approved by:	ru
@
text
@d3 1
a3 1
BIN=	100.chksetuid \
@


1.1.2.1
log
@MFC: Long ago, there was just /etc/daily. Then /etc/security was split
out of /etc/daily. Some time later, /etc/daily became a set of
periodic(8) scripts. Now, this evolution continues, and /etc/security
has been broken into periodic(8) scripts to make local customization
easier and more maintainable.

  src/etc/Makefile                                  1.264
  src/etc/defaults/periodic.conf                    1.18
  src/etc/mtree/BSD.root.dist                       1.57
  src/etc/periodic/Makefile                         1.3
  src/etc/periodic/daily/450.status-security        1.9
  src/etc/periodic/security/100.chksetuid           1.1
  src/etc/periodic/security/200.chkmounts           1.2
  src/etc/periodic/security/300.chkuid0             1.1
  src/etc/periodic/security/400.passwdless          1.1
  src/etc/periodic/security/500.ipfwdenied          1.1
  src/etc/periodic/security/550.ipfwlimit           1.2
  src/etc/periodic/security/600.ip6fwdenied         1.1
  src/etc/periodic/security/650.ip6fwlimit          1.2
  src/etc/periodic/security/700.kernelmsg           1.1
  src/etc/periodic/security/800.loginfail           1.1
  src/etc/periodic/security/900.tcpwrap             1.1
  src/etc/periodic/security/Makefile                1.1
  src/etc/security                                  1.60
  src/share/man/man5/periodic.conf.5                1.38
  src/usr.sbin/periodic/periodic.8                  1.26
@
text
@d1 1
a1 1
# $FreeBSD: src/etc/periodic/security/Makefile,v 1.1 2001/12/07 23:57:38 cjc Exp $
@


1.1.2.2
log
@MFC: Install via FILES.
@
text
@d1 1
a1 1
# $FreeBSD$
d3 1
a3 1
FILES=	100.chksetuid \
@


1.1.2.3
log
@MFC:
  * Factor out common code
  * Add 510.ipfdenied to produce summary of packets blocked by ipfilter
  * Use POSIX sort syntax (100.chksetyud rev. 1.6).

Reviewed by:	roberto
@
text
@a7 1
	510.ipfdenied \
d13 1
a13 2
	900.tcpwrap \
	security.functions
@


1.1.2.4
log
@Switch importer
@
text
@d1 1
a1 1
# $FreeBSD: stable/4/etc/periodic/security/Makefile 106569 2002-11-07 19:38:46Z thomas $
@


