d/freebsd-dev
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
991b5d2630
freebsd-dev/etc/periodic/security
History
Alan Somers cc4ee17f44 Fix periodic scripts when an NFS mount covers a local mount 
100.chksetuid and 110.neggrpperm try to search through all UFS and ZFS
filesystems. But their logic contains an error. They also search through
remote filesystems that are mounted on top of the root of a local
filesystem. For example, if a user installs a FreeBSD system with the
default ZFS layout, he'll get a zroot/usr/home filesystem. If he then mounts
/usr/home over NFS, these scripts would search through /usr/home.

MFC after:	4 weeks
Sponsored by:	Spectra Logic Corp
Differential Revision:	https://reviews.freebsd.org/D7482
2016-09-20 18:47:33 +00:00
..
100.chksetuid Fix periodic scripts when an NFS mount covers a local mount 2016-09-20 18:47:33 +00:00
110.neggrpperm Fix periodic scripts when an NFS mount covers a local mount 2016-09-20 18:47:33 +00:00
200.chkmounts Make the period of each periodic security script configurable. 2013-08-27 21:20:28 +00:00
300.chkuid0 Make the period of each periodic security script configurable. 2013-08-27 21:20:28 +00:00
400.passwdless Make the period of each periodic security script configurable. 2013-08-27 21:20:28 +00:00
410.logincheck Make the period of each periodic security script configurable. 2013-08-27 21:20:28 +00:00
500.ipfwdenied Make the period of each periodic security script configurable. 2013-08-27 21:20:28 +00:00
510.ipfdenied Make the period of each periodic security script configurable. 2013-08-27 21:20:28 +00:00
520.pfdenied Add basic blacklist build support 2016-06-02 19:06:04 +00:00
550.ipfwlimit Make the period of each periodic security script configurable. 2013-08-27 21:20:28 +00:00
610.ipf6denied Make the period of each periodic security script configurable. 2013-08-27 21:20:28 +00:00
700.kernelmsg Make the period of each periodic security script configurable. 2013-08-27 21:20:28 +00:00
800.loginfail Further refine the auth fail regex to catch more auth failures and 2014-02-20 23:43:49 +00:00
900.tcpwrap Make the period of each periodic security script configurable. 2013-08-27 21:20:28 +00:00
Makefile Avoid installing security.functions with executable bits, periodic(8) will 2014-11-05 06:42:07 +00:00
security.functions Use '^[>+][^+]' instead of '^[>+]' with grep(1) when filtering the 2016-01-29 01:54:32 +00:00