Commit Graph

25 Commits

Author SHA1 Message Date
haad
a4e585254c Add support for lvm to security script. Backup lvm configuration to /var/backup/lvm with other system backups. Disable lvm check until MKLVM is enabled by default. no objections on tech-userlevel@. 2009-01-27 10:32:18 +00:00
lukem
6c2d977e6f A few more changes, from more discussions with Andrew Brown.
- Resurrect /etc/changelist, even if it's an "empty" file by default,
  because it's easier to use than /etc/mtree/special.local for adding
  a couple of simple files. Back by popular demand (hi @@@! :-)
- Add /etc/rc.d/* to the list of "dynamic" files; this notices changes
  in user-added scripts
- Only calculate the mtree -I nomail list once, and re-use
- Use "cat foo | while read file" instead of "for file in `cat foo`" ;
  handles whitespace better...
2001-10-13 14:22:11 +00:00
lukem
96a1608ee4 Major overhaul, with help from Andrew Brown <atatat@netbsd.org>.
Features:
- Add a bunch of stuff to /etc/mtree/special to enable removal of
  /etc/changelist:
	- files which we want to monitor for changes but don't want to
	  see the diffs of (master.passwd, ssh_host_key, ...) are
	  tagged with "nomail"
	- files which we don't want to monitor are tagged with "exclude"
	  (such as netgroup.db, kvm.db, ...)
	- monitor /etc/mtree/special.local, /root/.ssh/*
	- remove /etc/changelist, and a bunch of XXX comments
	- use mtree(8)'s -D, -I, and -E to generate lists of files to
	  actually do the changelist stuff on.
	- support /etc/mtree/special.local as an optional user-provided
	  version of /etc/mtree/special (effectively, an enhanced
	  /etc/changelist)
- Add code to monitor: /etc/ifconfig.* /etc/raid*.conf /etc/rc.conf.d/*
  including support for these files being added and removed at will.
- If /sbin/fdisk exists, backup the output of "fdisk $disk" for all
  the active disk drives as part of $check_disklabels
- Check permissions on: ~/.ssh/* ~/.shosts

Details:
- Reorder initialisation of defaults
- Remove special case for /etc/master.passwd "monitor but don't email diffs"
  with general case for other similar files.
- Keep all `autogenerated' files (such as disklabel.*, setuid.current, ...)
  in "$backup_dir/work", to minimise name clashes.
- Add migrate_file(old, new) to do the hard work of migrating files
  from the old `top level' /var/backups mechanism to the `full path'
  mechanism recently added. Use this appropriately.
- Add backup_and_diff(file, printdiffs), to the hard work of backing-up
  and diff-ing files.
- Cleanup use of shell redirects
- /bin/sh supports ~root globbing, so use it.
- Improve umask checking; use awk regex rather than awk math
2001-10-12 05:18:23 +00:00
itojun
ca02da9f00 pim6dd.conf is gone. primes -> moduli (openssh) 2001-06-23 22:07:06 +00:00
itojun
2160ac71db install /etc/primes for ssh 2001-05-26 23:27:13 +00:00
atatat
a6a25381d8 The script called dhclient-script no longer lives in /etc. 2001-04-24 22:41:13 +00:00
veego
411ed8da1b Remove /etc/mail/sendmail-IPv4only.cf which is no longer needed. 2001-01-15 18:04:53 +00:00
lukem
4e283949d1 remove rc.wscons 2000-08-21 23:07:11 +00:00
ad
05ca1d3393 Add /etc/{hesiod,passwd}.conf. 2000-07-06 11:11:16 +00:00
itojun
0bfeec5234 sync sendmail default configuration file with GENERIC kernel setting.
was: sendmail-IPv6.cf(v4/v6) + sendmail.cf(v4)
now: sendmail-IPv4only.cf(v4) + sendmail.cf(v4/v6)

do we need etc/obsolete.mi?
2000-07-04 12:21:02 +00:00
ad
bd9588d282 Add /etc/netconfig and /etc/security.local. 2000-06-20 15:01:19 +00:00
itojun
00ded2c64e add rc.d/ipsec for ipsec configuration. when enabled, it will inject
/etc/ipsec.conf into "setkey -f".  PR 9609.
2000-06-13 16:29:53 +00:00
itojun
60270df72a remove /etc/sendmail and other old items.
PR 10171 from Andrew Brown.
2000-05-22 04:14:30 +00:00
lukem
78abee064b remove netstart 2000-05-13 08:07:01 +00:00
itojun
10e25f6012 make default sendmail.cf IPv4-only again.
roll sendmail-IPv6.cf, which does IPv4/v6.
2000-05-08 00:37:53 +00:00
itojun
366bbade5a sync with sendmail upgrade.
- sendmail configuration files are in /etc/mail, not /etc.
- src/etc/aliases will be installed into /etc/mail/aliases (confusing)
- rc.d/sendmail warns if /etc/sendmail.cf exists.
2000-05-03 10:55:19 +00:00
enami
f3d36a14e8 Add login.conf, sysctl.conf and usermgmt.conf. 2000-04-20 02:01:52 +00:00
enami
3a640d007a Add ftpd.conf. 2000-03-24 22:37:48 +00:00
enami
99a7ca92be Sync with the reality. 2000-01-24 02:00:50 +00:00
msaitoh
d84c950796 Add some files to security check and backup. 1998-11-25 08:30:42 +00:00
mikel
afc1906e1c add some files from /etc to the list: csh.logout, inetd.conf,
ld.so.conf, newsyslog.conf, profile, rc.subr, resolv.conf, and rpc.
1997-09-10 06:05:44 +00:00
hpeyerl
09920ad438 add /var/cron/tabs/root. 1997-01-07 03:56:47 +00:00
mrg
7f44e3e76e add new files. 1997-01-04 14:04:09 +00:00
thorpej
ecfa4355a6 RCS id police. 1996-05-08 17:19:17 +00:00
cgd
91778fe0ca update to new security script 1994-06-15 04:28:06 +00:00