- patch logcheck.sh to actually use SYSCONFDIR/logsentry instead of

the old SYSCONFDIR/logcheck from MAINTAINER
- spelling in DESCR
- bump package version
This commit is contained in:
sturm 2003-02-02 08:20:46 +00:00
parent 1c05c3a5ae
commit b3e5a1f70c
3 changed files with 7 additions and 6 deletions

View File

@ -1,8 +1,9 @@
# $OpenBSD: Makefile,v 1.1.1.1 2003/01/24 23:29:17 sturm Exp $
# $OpenBSD: Makefile,v 1.2 2003/02/02 08:20:46 sturm Exp $
COMMENT= "logfile auditing tool"
DISTNAME= logsentry-1.1.1
PKGNAME= ${DISTNAME}p0
CATEGORIES= security
HOMEPAGE= http://www.psionic.com/products/logsentry.html

View File

@ -32,7 +32,7 @@
# "WIZ" besides ISS?), and obvious sendmail attacks/probes.
-HACKING_FILE=/usr/local/etc/logcheck.hacking
+HACKING_FILE=%%SYSCONFDIR%%/logcheck/logcheck.hacking
+HACKING_FILE=%%SYSCONFDIR%%/logsentry/logcheck.hacking
# File of security violation patterns to specifically look for.
# This file should contain keywords of information administrators should
@ -41,7 +41,7 @@
# items into this file to have them reported regularly.
-VIOLATIONS_FILE=/usr/local/etc/logcheck.violations
+VIOLATIONS_FILE=%%SYSCONFDIR%%/logcheck/logcheck.violations
+VIOLATIONS_FILE=%%SYSCONFDIR%%/logsentry/logcheck.violations
# File that contains more complete sentences that have keywords from
# the violations file. These keywords are normal and are not cause for
@ -50,7 +50,7 @@
# Again, be careful what you put in here and DO NOT LEAVE IT EMPTY!
-VIOLATIONS_IGNORE_FILE=/usr/local/etc/logcheck.violations.ignore
+VIOLATIONS_IGNORE_FILE=%%SYSCONFDIR%%/logcheck/logcheck.violations.ignore
+VIOLATIONS_IGNORE_FILE=%%SYSCONFDIR%%/logsentry/logcheck.violations.ignore
# This is the name of a file that contains patterns that we should
# ignore if found in a log file. If you have repeated false alarms
@ -58,7 +58,7 @@
# Once again, be as specific as possible, and go easy on the wildcards
-IGNORE_FILE=/usr/local/etc/logcheck.ignore
+IGNORE_FILE=%%SYSCONFDIR%%/logcheck/logcheck.ignore
+IGNORE_FILE=%%SYSCONFDIR%%/logsentry/logcheck.ignore
# The files are reported in the order of hacking, security
# violations, and unusual system events. Notice that this

View File

@ -2,7 +2,7 @@ Logsentry is a scheduled auditing tool that scans system log files
for security violations and unusual activity. Reports of suspicious
log entries are mailed to a specified user (usually root).
logsentry was formerly known as logcheck. Even thought the package
Logsentry was formerly known as logcheck. Even though the package
is now called logsentry-1.1.1, the actual files kept their names.
WWW: ${HOMEPAGE}