Mails anomalies in the system logfiles to the administrator.
Logcheck helps spot problems, anomalies and security violations
in your logfiles automatically and will send the summaries to you
via e-mail. Logcheck is run as a cron job.
===> The following configuration options are available for logcheck-1.4.7:
CRON=on: Install cron script automatically
DOCS=on: Build and/or install documentation
EXAMPLES=on: Build and/or install examples
===> Use 'make config' to modify these settings
Reason:
Since 1.4.1 ${PREFIX}/etc/logcheck/logcheck.logfiles is empty and
files to be checked by logcheck are specified in
${PREFIX}/etc/logcheck/logcheck.logfiles.d/syslog.logfiles. So if
you previously edited the former, then you should edit the latter
now.
*/*: Return to pool
I'll be away from keyboard soon and am not sure if I will return. So
return all ports that I currently maintain to pool hoping new
volunteers take care of them.
security/logcheck: Update patterns for ssh
According to release notes of OpenSSH, following incompatible change
is made with 9.8/9.8p1.
* sshd(8): several log messages have changed. In particular, some
log messages will be tagged with as originating from a process
named "sshd-session" rather than "sshd".
So update patterns for ssh so they match with log message from latest
version of OpenSSH
Reference: https://www.openssh.com/releasenotes.html
security/logcheck: Fix misupdate of patch-debian_logcheck.cron.d
With commit d14b5cc7f0ce patch-debian_logcheck.cron.d is incorrectly
updated with 2 points.
1. It introduces syntex error of crontab and results in cron job
error.
2. Change coresponding to commit 4d161fff0334 is lost.
Fixes: d14b5cc7f0ce security/logcheck: Update to 1.4.4
security/logcheck: Add patch to change crontab entry
When the host is heavily loaded, the log files can grow incredibly and
one logcheck invocation may not complete before it is invoked next
time.
This commit add patch to change crontab entries so it uses lockf(1) to
avoid multiple invocation of logcheck under such situation as above.
PR: 276023
Remove WWW entries moved into port Makefiles
Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.
This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.
Approved by: portmgr (tcberner)
Add WWW entries to port Makefiles
It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.
Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.
There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.
(Only the first 15 lines of the commit message are shown above )
security: remove 'Created by' lines
A big Thank You to the original contributors of these ports:
* <ports@c0decafe.net>
* Aaron Dalton <aaron@FreeBSD.org>
* Adam Weinberger <adamw@FreeBSD.org>
* Ade Lovett <ade@FreeBSD.org>
* Aldis Berjoza <aldis@bsdroot.lv>
* Alex Dupre <ale@FreeBSD.org>
* Alex Kapranoff <kappa@rambler-co.ru>
* Alex Samorukov <samm@freebsd.org>
* Alexander Botero-Lowry <alex@foxybanana.com>
* Alexander Kriventsov <avk@vl.ru>
* Alexander Leidinger <netchild@FreeBSD.org>
(Only the first 15 lines of the commit message are shown above )
security/logcheck: Set group of directories under ETCDIR properly
This fixes bug of previous commit f026865e514a.
PR: 257980
Reported by: Yasuhiro Kimura <yasu@utahime.org> (maintainer)
security/logcheck: Miscellaneous changes and cleanups
* Replace deprecated @exec keyword with @postexec in plist.
* Make owner/group/permission of files/directories under ${DATADIR}
and ${ETCDIR} same as upstream as much as possible.
* Pet portclippy.
* Reformat Makefile with portfmt.
PR: 257718
MFH: 2021Q3
* Update to 1.3.18.
* Process to fix paths in script and configuration files are simplified.
* Now man page of logcheck is generated from DocBook SGML source file by using
textproc/docbook-to-man.
* Sort pkg-plist.
* Add forgotten files/patch-etc_logcheck.logfiles.
* Update files/patch-etc_logcheck.conf
* Move backup file cleaning up from post-patch to do-build so 'make makepatch'
works as expected.
PR: 220609
Submitted by: yasu@utahime.org (maintainer)
MASTER_SITES cleanup.
- Replace ${MASTER_SITE_FOO} with FOO.
- Merge MASTER_SITE_SUBDIR into MASTER_SITES when possible. (This means 99.9%
of the time.)
- Remove occurrences of MASTER_SITE_LOCAL when no subdirectory was present and
no hint of what it should be was present.
- Fix some logic.
- And generally, make things more simple and easy to understand.
While there, add magic values to the FESTIVAL, GENTOO, GIMP, GNUPG, QT and
SAMBA macros.
Also, replace some EXTRACT_SUFX occurences with USES=tar:*.
Checked by: make fetch-urlall-list
With hat: portmgr
Sponsored by: Absolight
Change INSTALL_DATA to install with mode 644
Remove patches and hacks that were used to work around the previous
situation
This allows to stage more ports as a regular user
Differential Revision: https://reviews.freebsd.org/D703
Reviewed by and discussed with: bapt
With hat: portmgr
- Update to 1.3.16
- Submitter is now maintainer
- Add LICENSE, USERS and GROUPS
- Support Staging
PR: ports/187411
Submitted by: Yasuhiro KIMURA <yasu@utahime.org>
Leverage USES=shebangfix to fix two Perl scripts (logtail, logtail2)
instead of doing one the manual way and not fixing the other.
PR: 185905
Submitted by: Yasuhiro KIMURA <yasu@utahime.org>
[Errno 11] Resource Temporarily Unavailable
Reassigning my ports back to the pool with the hope of freeing up
to do more FreeBSD work in the future.
Submitted by: glarkin
- Added an option to control installation of the crontab file. The
option defaults to yes during interactive installation, and the crontab
file is not installed during non-interactive installation.
Requested by: espen@tagestad.no (via email)
- Reset cwd in pkg-plist back to PREFIX before dynamically adding more
directives to TMPPLIST. Otherwise %D is "/", and the chown commands
fail during package installation.
- Bumped PORTREVISION
Feature safe: yes
- Updated the PAM ssh rule file to match messages emitted on FreeBSD vs.
the Linux messages contained in the distro rule file
- Bumped PORTREVISION
PR: ports/162330
Submitted by: Shuichi KITAGUCHI <ki@hh.iij4u.or.jp>
Feature safe: yes
- Updated to 1.3.13
Changes:
logcheck (1.3.13) unstable; urgency=low
* ignore.d.server/pure-ftpd:
- fixed user name pattern in logout message, thanks to Simon Breuss
(LP: #619119)
* violations.ignore.d/logcheck-sudo:
- match COMMAND=list and TTY=console, thanks to Michel Messerschmidt
for the patch (closes: #593482)
* ignore.d.server/amavisd-new:
- applied changes by Christian Drage (closes: #594605):
- IPv6 support for IP addresses
- allow PASSED SPAM in log
- optional minus sign after "Hits:"
- optional quarantine in log line
- optional Message-ID
PR: ports/151033
Submitted by: Anton Yuzhaninov <citrin at citrin dot ru>
- Fix permissions on DATADIR so code snippets can be compiled on the
fly by logtail2.
- Bumped PORTREVISION
PR: ports/143077, ports/143099
Submitted by: Berend de Boer <berend@pobox.com>, Yasuhiro KIMURA
<yasu@utahime.org>
- Updated to 1.2.69 [1]
- Added PORTSCOUT variable
- Added patches to clean up some paths that violate hier(7)
- Switched from using logtail to logtail2 (supports rotated log files)
PR: ports/142017
Submitted by: bsam [1]
- Parameterized all non-hier(7)-compliant paths in the logcheck script,
man page and config files, adding support for a custom PREFIX setting.
- Parameterized the shebang line in the logtail script
- Bumped PORTREVISION
PR: ports/140981
Submitted by: Dan Langille <dan@langille.org>
- Preprocess the single SGML doc file into a man page instead of
requiring docbook2man as a dependency. Some docbook ports conflict
with others, and since there's only one file to convert, preprocessing
is fine.
Reported by: dan@langille.org and others
- Switched BUILD_DEPENDS from textproc/docbook-to-man to
textproc/docbook2X and saved building about 100 extra ports just
to convert an SGML file to a man page
- Bumped PORTREVISION
Reported by: n j <nino80 at gmail dot com>
- Fixed left-over directory problem
- Added entries for logcheck user in UIDs and GIDs
- Fixed package building problems (perms and empty dir creation)
Reported by: QA Tindy
Approved by: portmgr (erwin)
- Updated to 1.2.54
- Replaced hard-coded paths in pkg-plist with variables
- Cleaned up installation commands
- Moved crontab file to EXAMPLESDIR and updated pkg-install.in
to handle port knob NOPORTEXAMPLES
- Regenerated patch files with "make makepatch"
PR: ports/122842
Submitted by: Cezary Morga <cm at therek dot net>
Approved by: beech (mentor, implicit)
- Change MASTER_SITES: the project finally found a new home
(thanks Paulius Bulotas for reporting)
- Avoid ever touching existing configs by installing example files
with .sample suffix into ${PREFIX}/etc; do not install duplicates
in ${EXAMPLESDIR}
- Removed unneeded @cwd in pkg-plist
- Bump PORTREVISION due to changed package
PR: 55971
Submitted by: Sergei Kolobov <sergei@kolobov.com>
- Do not overwrite the existing config files when installing as a port or
as a package
- Bump PORTREVISION
Reported by: Forrest Aldrich <forrie@forrie.com>
PR: 50915
Submitted by: Sergei Kolobov <sergei@kolobov.com>
- Remove BROKEN: change temp dir from /tmp to /var/run/logcheck
(it has to be mode 700) - now complies with hier(7)
- Psionic has been acquired by Cisco in late 2002 and now
www.psionic.com is an alias to www.cisco.com. Unfortunately,
the latter does not have any mention of LogSentry or other Abacus tools,
so remove www.psionic.com from the MASTER_SITES and WWW: tag
- Reword pkg-descr to better reflect reality
- Dont use logcheck's Makefile - build/install completely from port's Makefile
- Make PREFIX-clean
- Install useful documentation
- Assign maintainership to submitter
Removed files:
- files/patch-aa
- pkg-message
PR: 50730
Submitted by: Sergei Kolobov <sergei@kolobov.com>
- chase distfile naming
- whitespace nit
- remove a directory from pkg-plist which is not actually created
- make prefix safe
PR: ports/39111
Submitted by: Erwin Lansing <erwin@lansing.dk>
Eww. Cull etc/tmp in favor of var/tmp (even though this is not what hier(7)
specifically states, it's still better than screwing around with stuff outside
of ${PREFIX}).
Change PKGDIR from pkg/ to . Also fix places where ${PKGDIR} is spelled out
(many of which are ${PKGDIR}/MESSAGE -> ${PKGMESSAGE} type fixes that
shouldn't have been necessary) and the string "/pkg/" appear.
