Created attachment 162850 [details] Patch to use eval for computed variable assignments The shell function security_daily_compat_var in /etc/defaults/periodic.conf attempts to set the var and periodvar using incorrect shell syntax in the yes case, resulting in errors like /etc/periodic/security/550.ipfwlimit: security_status_ipfwlimit_enable=YES: not found /etc/periodic/security/550.ipfwlimit: security_status_ipfwlimit_period=daily: not found It needs to use eval like in the other case. I found this in 10.1-RELEASE but it looks like same in HEAD.
A commit references this bug: Author: jilles Date: Sat Nov 7 22:06:49 UTC 2015 New revision: 290515 URL: https://svnweb.freebsd.org/changeset/base/290515 Log: periodic: Fix backwards compatibility for daily_status_security_* vars. Most daily_status_security_* variables in periodic.conf were changed to security_status_* in SVN r254974. The compatibility code for the old names did not work. PR: 204331 Submitted by: martin at lispworks.com MFC after: 1 week Changes: head/etc/defaults/periodic.conf
Committed to head, thanks. MFC to stable/10 is planned after 1 week. The broken code is not in older branches.
A commit references this bug: Author: jilles Date: Mon Dec 28 21:35:06 UTC 2015 New revision: 292841 URL: https://svnweb.freebsd.org/changeset/base/292841 Log: MFC r290515: periodic: Fix backwards compatibility for daily_status_security_* vars. Most daily_status_security_* variables in periodic.conf were changed to security_status_* in SVN r254974. The compatibility code for the old names did not work. PR: 204331 Submitted by: martin at lispworks.com Changes: _U stable/10/ stable/10/etc/defaults/periodic.conf