| Commit message (Expand) | Author | Age | Files | Lines |
* | Fix 100.chksetuid and 110.neggrpperm for mountpoints with spaces | Alan Somers | 2017-08-25 | 3 | -2/+15 |
* | Only install 900.tcpwrap if MK_INETD != "no" and MK_TCP_WRAPPERS != "no" | Enji Cooper | 2017-03-08 | 1 | -2/+5 |
* | Make 502.pfdenied find blacklistd/* filter names dynamically | Kurt Lidl | 2016-10-04 | 1 | -2/+1 |
* | Fix periodic scripts when an NFS mount covers a local mount | Alan Somers | 2016-09-20 | 2 | -2/+2 |
* | Add basic blacklist build support | Kurt Lidl | 2016-06-02 | 1 | -2/+8 |
* | Zero pf rule counters so daily reports make sense | Kurt Lidl | 2016-02-09 | 1 | -1/+1 |
* | Use '^[>+][^+]' instead of '^[>+]' with grep(1) when filtering the | Marius Strobl | 2016-01-29 | 1 | -1/+1 |
* | Restrict 520.pfdenied to only list rules that blocked traffic. | Kurt Lidl | 2015-11-05 | 1 | -1/+1 |
* | Avoid installing security.functions with executable bits, periodic(8) will | Baptiste Daroussin | 2014-11-05 | 1 | -2/+4 |
* | Use src.opts.mk in preference to bsd.own.mk except where we need stuff | Warner Losh | 2014-05-06 | 1 | -1/+1 |
* | Further refine the auth fail regex to catch more auth failures and | Christian Brueffer | 2014-02-20 | 1 | -1/+1 |
* | After around 20 years of duty it is time for pkg_install to retire | Baptiste Daroussin | 2013-10-31 | 2 | -70/+0 |
* | Make the period of each periodic security script configurable. | Jeremie Le Hen | 2013-08-27 | 16 | -84/+115 |
* | Hook the 220.backup-pkgdb script I added to the build unconditionally | Doug Barton | 2011-03-27 | 1 | -0/+1 |
* | Add svn:executable property on remaining period scripts without it | Doug Barton | 2011-03-27 | 5 | -0/+0 |
* | Add an (off by default) check for negative permissions (where the | Brooks Davis | 2010-11-13 | 2 | -0/+55 |
* | Hide 460.chkportsum in MK_PKGTOOLS != no case. | Xin LI | 2010-11-09 | 1 | -1/+4 |
* | - Fixes to the chkportsum script to handle better some special cases, | Gabor Kovesdan | 2010-08-10 | 1 | -9/+9 |
* | - Add a periodic script, which can be used to find installed ports' files with | Gabor Kovesdan | 2010-07-19 | 2 | -0/+69 |
* | Silence warning printed by getfsspec(3) when /etc/fstab does not exist | Colin Percival | 2009-09-28 | 1 | -0/+3 |
* | Sort `mount -p' output by name before checking for any differences. | Ed Schouten | 2008-10-25 | 1 | -1/+1 |
* | add new build knobs and jigger some existing controls to improve | Sam Leffler | 2008-09-21 | 1 | -4/+17 |
* | Improve periodic/security/550.ipfwlimit a bit: | Antoine Brodin | 2008-08-10 | 1 | -6/+3 |
* | Rev. 1.8 broke matching on lines where the failure mode is at the head | Mike Makonnen | 2008-06-30 | 1 | -1/+1 |
* | Add a missing ;. | Remko Lodder | 2008-03-25 | 1 | -1/+1 |
* | Eliminate xargs in favor of find -exec {} + | Dag-Erling Smørgrav | 2008-02-03 | 1 | -2/+1 |
* | Rewrite to consume significantly less memory, by using find -s instead of | Dag-Erling Smørgrav | 2008-02-02 | 1 | -16/+11 |
* | Also check setuid executables on ZFS. | Ruslan Ermilov | 2007-11-23 | 1 | -1/+1 |
* | Only match on log messages containing fail,invalid, | Remko Lodder | 2007-02-23 | 1 | -1/+1 |
* | Use egrep instead of grep so that reporting of login failures (broken | John Polstra | 2007-02-05 | 1 | -1/+1 |
* | Add login.conf checking to periodic security scripts. If the login.conf file | Tom Rhodes | 2006-08-25 | 2 | -0/+53 |
* | Move etc/rc.firewall6 to ipfw2+v6, update related rc.d and periodic scripts. | Max Laier | 2006-05-12 | 3 | -118/+0 |
* | Enhance loginfail: it will catch sshd, proftpd and su errors, as well as othe... | Matteo Riondato | 2006-03-05 | 1 | -1/+1 |
* | A new version of rev. 1.4: postpone a temporary file creation | Maxim Konovalov | 2005-09-11 | 1 | -1/+1 |
* | Fix braino in last commit. Print nothing if ipfw(4) is not present. | Gleb Smirnoff | 2005-08-31 | 1 | -2/+2 |
* | When looking for new lines in diff output, grep for '^[>+]' instead of | Colin Percival | 2005-08-22 | 1 | -1/+1 |
* | - Correctly parse output, when logging amount is limited in the | Gleb Smirnoff | 2005-08-20 | 1 | -7/+15 |
* | Replace "ipfw l", which is now deprecated, with "ipfw list". | Suleiman Souhlal | 2005-02-23 | 2 | -2/+2 |
* | Don't do setuid checks on file systems mounted with noexec option. | Gleb Smirnoff | 2005-01-13 | 1 | -1/+1 |
* | Teach periodic(8) security output to display information about blocked | Max Laier | 2004-11-24 | 2 | -0/+54 |
* | Add a knob 'daily_status_security_diff_flags' controlling the | Joseph Koshy | 2004-09-23 | 1 | -1/+2 |
* | Add script for checking ipv6 blocked packets from PR. | Darren Reed | 2004-04-20 | 1 | -0/+53 |
* | Have mktemp(1) construct the temporary file name for us instead | Mike Makonnen | 2003-06-30 | 6 | -6/+6 |
* | Add support for bzip2ed log files. | Stefan Eßer | 2003-01-05 | 2 | -2/+14 |
* | Avoid using perl in the periodic & security scripts. This brings the | Giorgos Keramidas | 2002-12-07 | 2 | -4/+8 |
* | Do not emit a message on stderr when one of the compared files | Thomas Quinot | 2002-11-16 | 1 | -1/+1 |
* | Remove incorrect output redirection. | Thomas Quinot | 2002-11-16 | 1 | -1/+1 |
* | Add newly-added sripts to FILES. | Thomas Quinot | 2002-10-25 | 1 | -1/+3 |
* | Add a new /etc/periodic/security script to check for packets | Thomas Quinot | 2002-10-25 | 1 | -0/+53 |
* | Factor out code across various /etc/periodic/security scripts into a | Thomas Quinot | 2002-10-25 | 6 | -99/+101 |