freebsd-dev/etc/periodic/security/Makefile

# $FreeBSD$

FILES=	100.chksetuid \
	200.chkmounts \
	300.chkuid0 \
	400.passwdless \
	410.logincheck \
	500.ipfwdenied \
	510.ipfdenied \
	520.pfdenied \
	550.ipfwlimit \
	700.kernelmsg \
	800.loginfail \
	900.tcpwrap \
	security.functions

.include <bsd.prog.mk>
Long ago, there was just /etc/daily. Then /etc/security was split out of /etc/daily. Some time later, /etc/daily became a set of periodic(8) scripts. Now, this evolution continues, and /etc/security has been broken into periodic(8) scripts to make local customization easier and more maintainable. Reviewed by: ru Approved by: ru 2001-12-07 23:57:39 +00:00			`# $FreeBSD$`

Install scripts via FILES (purposedly not via SCRIPTS that would strip the suffixes). 2002-07-18 12:33:01 +00:00			`FILES= 100.chksetuid \`
Long ago, there was just /etc/daily. Then /etc/security was split out of /etc/daily. Some time later, /etc/daily became a set of periodic(8) scripts. Now, this evolution continues, and /etc/security has been broken into periodic(8) scripts to make local customization easier and more maintainable. Reviewed by: ru Approved by: ru 2001-12-07 23:57:39 +00:00			`200.chkmounts \`
			`300.chkuid0 \`
			`400.passwdless \`
Add login.conf checking to periodic security scripts. If the login.conf file is not UID/GID 0, limits will be ignored and a strange error sent to auth.log. Head nod: ru, rwatson 2006-08-25 07:34:36 +00:00			`410.logincheck \`
Long ago, there was just /etc/daily. Then /etc/security was split out of /etc/daily. Some time later, /etc/daily became a set of periodic(8) scripts. Now, this evolution continues, and /etc/security has been broken into periodic(8) scripts to make local customization easier and more maintainable. Reviewed by: ru Approved by: ru 2001-12-07 23:57:39 +00:00			`500.ipfwdenied \`
Add newly-added sripts to FILES. Reviewed by: roberto 2002-10-25 15:23:26 +00:00			`510.ipfdenied \`
Teach periodic(8) security output to display information about blocked packet counts by pf(4). This adds a ``daily_status_security_pfdenied_enable'' variable to periodic.conf, which defaults to ``YES'' as the matching IPF(W) versions. The output will look like this (line wrapped): pf denied packets: > block drop log on rl0 proto tcp all [ Evaluations: 504986 Packets: 0 Bytes: 0 States: 0 ] > block drop log on rl0 all [ Evaluations: 18559 Packets: 427 Bytes: 140578 States: 0 ] Submitted by: clive (thanks a lot!) MFC after: 2 weeks 2004-11-24 18:41:53 +00:00			`520.pfdenied \`
Long ago, there was just /etc/daily. Then /etc/security was split out of /etc/daily. Some time later, /etc/daily became a set of periodic(8) scripts. Now, this evolution continues, and /etc/security has been broken into periodic(8) scripts to make local customization easier and more maintainable. Reviewed by: ru Approved by: ru 2001-12-07 23:57:39 +00:00			`550.ipfwlimit \`
			`700.kernelmsg \`
			`800.loginfail \`
Add newly-added sripts to FILES. Reviewed by: roberto 2002-10-25 15:23:26 +00:00			`900.tcpwrap \`
			`security.functions`
Long ago, there was just /etc/daily. Then /etc/security was split out of /etc/daily. Some time later, /etc/daily became a set of periodic(8) scripts. Now, this evolution continues, and /etc/security has been broken into periodic(8) scripts to make local customization easier and more maintainable. Reviewed by: ru Approved by: ru 2001-12-07 23:57:39 +00:00
			`.include <bsd.prog.mk>`