In this addition was realized tracing two errors. At first, there are file permission errors in important directories. At second - search crash records in system messages.
[PATCH] --- securityadd Sun Jan 9 12:31:46 2005 +++ security Sun Jan 9 12:31:46 2005 @@ -33,6 +33,8 @@ rc=0 LOG=/var/log TMP=/var/run/_secure.$$ +stoday="/var/log/localsec.today" # path to today security log +syester="/var/log/localsec.yesterday" #path to yesterday security log separator () { echo '' @@ -232,5 +234,34 @@ rm -f ${TMP} + rm $syester + mv $stoday $syester + + echo "stoday Log for:" >> ${stoday} + date >> ${stoday} + cat /etc/passwd | grep "guest" >> ${stoday} + cat /etc/passwd | grep "anonymous" >> ${stoday} + echo "File permission errors in /bin" >> ${stoday} + ls -l /bin | grep "rwx " >> ${stoday} + ls -l /bin | grep "rw- " >> ${stoday} + echo "File permission errors in /sbin" >> ${stoday} + ls -l /sbin | grep "rwx " >> ${stoday} + ls -l /sbin | grep "rw- " >> ${stoday} + echo "File permission errors in /etc" >> ${stoday} + ls -l /etc | grep "rwx " >> ${stoday} + ls -l /etc | grep "rw- " >> ${stoday} + echo "File permission errors in /usr/bin" >> ${stoday} + ls -l /usr/bin | grep "rwx " >> ${stoday} + ls -l /usr/bin | grep "rw- " >> ${stoday} + echo "File permission errors in /usr/sbin" >> ${stoday} + ls -l /usr/sbin | grep "rwx " >> ${stoday} + ls -l /usr/sbin | grep "rw- " >> ${stoday} + echo "File permission errors in /root" >> ${stoday} + ls -l /root | grep "rwx " >> ${stoday} + ls -l /root | grep "rw- " >> ${stoday} +echo "" + echo "Crashes?" >> ${stoday} + last | grep "crash" >> ${stoday} +cat $stoday exit $rc
Thank you for your contribution. Unfortunatly, /etc/security has been defunct for nearly three years (it was removed in FreeBSD-4.6). It has been replaced by a set of scripts in /etc/periodic/security. A new script for that framework would be useful, but we can't do much with this patch as is. I'd also suggest using find(1)'s perm option instead of parsing ls output. -- Brooks
State Changed From-To: open->suspended Patch would need to be regenerated for current framework. Is the submitter still interested in doing this? If not, I'll leave the PR as suspended.
For bugs matching the following conditions: - Status == In Progress - Assignee == "bugs@FreeBSD.org" - Last Modified Year <= 2017 Do - Set Status to "Open"
^Triage: I'm sorry that this PR did not get addressed in a timely fashion. By now, the version that it was created against is long out of support. Also, the patch seems incomplete, and even if it were, it no longer applies.