- patch logcheck.sh to actually use SYSCONFDIR/logsentry instead of
the old SYSCONFDIR/logcheck from MAINTAINER - spelling in DESCR - bump package version
This commit is contained in:
parent
1c05c3a5ae
commit
b3e5a1f70c
@ -1,8 +1,9 @@
|
||||
# $OpenBSD: Makefile,v 1.1.1.1 2003/01/24 23:29:17 sturm Exp $
|
||||
# $OpenBSD: Makefile,v 1.2 2003/02/02 08:20:46 sturm Exp $
|
||||
|
||||
COMMENT= "logfile auditing tool"
|
||||
|
||||
DISTNAME= logsentry-1.1.1
|
||||
PKGNAME= ${DISTNAME}p0
|
||||
CATEGORIES= security
|
||||
|
||||
HOMEPAGE= http://www.psionic.com/products/logsentry.html
|
||||
|
@ -32,7 +32,7 @@
|
||||
# "WIZ" besides ISS?), and obvious sendmail attacks/probes.
|
||||
|
||||
-HACKING_FILE=/usr/local/etc/logcheck.hacking
|
||||
+HACKING_FILE=%%SYSCONFDIR%%/logcheck/logcheck.hacking
|
||||
+HACKING_FILE=%%SYSCONFDIR%%/logsentry/logcheck.hacking
|
||||
|
||||
# File of security violation patterns to specifically look for.
|
||||
# This file should contain keywords of information administrators should
|
||||
@ -41,7 +41,7 @@
|
||||
# items into this file to have them reported regularly.
|
||||
|
||||
-VIOLATIONS_FILE=/usr/local/etc/logcheck.violations
|
||||
+VIOLATIONS_FILE=%%SYSCONFDIR%%/logcheck/logcheck.violations
|
||||
+VIOLATIONS_FILE=%%SYSCONFDIR%%/logsentry/logcheck.violations
|
||||
|
||||
# File that contains more complete sentences that have keywords from
|
||||
# the violations file. These keywords are normal and are not cause for
|
||||
@ -50,7 +50,7 @@
|
||||
# Again, be careful what you put in here and DO NOT LEAVE IT EMPTY!
|
||||
|
||||
-VIOLATIONS_IGNORE_FILE=/usr/local/etc/logcheck.violations.ignore
|
||||
+VIOLATIONS_IGNORE_FILE=%%SYSCONFDIR%%/logcheck/logcheck.violations.ignore
|
||||
+VIOLATIONS_IGNORE_FILE=%%SYSCONFDIR%%/logsentry/logcheck.violations.ignore
|
||||
|
||||
# This is the name of a file that contains patterns that we should
|
||||
# ignore if found in a log file. If you have repeated false alarms
|
||||
@ -58,7 +58,7 @@
|
||||
# Once again, be as specific as possible, and go easy on the wildcards
|
||||
|
||||
-IGNORE_FILE=/usr/local/etc/logcheck.ignore
|
||||
+IGNORE_FILE=%%SYSCONFDIR%%/logcheck/logcheck.ignore
|
||||
+IGNORE_FILE=%%SYSCONFDIR%%/logsentry/logcheck.ignore
|
||||
|
||||
# The files are reported in the order of hacking, security
|
||||
# violations, and unusual system events. Notice that this
|
||||
|
@ -2,7 +2,7 @@ Logsentry is a scheduled auditing tool that scans system log files
|
||||
for security violations and unusual activity. Reports of suspicious
|
||||
log entries are mailed to a specified user (usually root).
|
||||
|
||||
logsentry was formerly known as logcheck. Even thought the package
|
||||
Logsentry was formerly known as logcheck. Even though the package
|
||||
is now called logsentry-1.1.1, the actual files kept their names.
|
||||
|
||||
WWW: ${HOMEPAGE}
|
||||
|
Loading…
Reference in New Issue
Block a user