bug-cfengine
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Syslog bugs in cfengine 2.0.3


From: David Douthitt
Subject: Syslog bugs in cfengine 2.0.3
Date: Wed, 18 Sep 2002 09:30:30 -0500
User-agent: Mutt/1.4i

First, running cfengine -nv puts entries into the syslog
exactly the same as if it wasn't.  There's no way to tell
that what cfengine says happened really didn't.

This could be serious trouble if the logs are called into
court on a hacking case.  What if you can't trust your
logs?

Secondly, the syslog entries look like this:

Sep 18 00:02:40 myhost cfengine:myhost[11730]: /var/cfengine/bin/installrpm had 
permission 700, changed it to 755
Sep 18 00:02:40 myhost cfengine:myhost[11730]: /var/cfengine/bin/removerpm had 
permission 700, changed it to 755
Sep 18 00:02:40 myhost cfengine:myhost[11730]: /var/cfengine/bin/startservice 
had permission 700, changed it to 755

In another case, it looked like this:

Sep 18 09:15:31 myhost myhost.mydomain[13742]: Rereading config files 
/var/cfengine/inputs/cfservd.conf.. 
Sep 18 09:15:31 myhost myhost.mydomain[13742]: cfservd Multithreaded version

These logs should look like:

Sep 18 00:02:40 myhost cfengine[11730]: /var/cfengine/bin/installrpm had 
permission 700, changed it to 755
Sep 18 00:02:40 myhost cfengine[11730]: /var/cfengine/bin/removerpm had 
permission 700, changed it to 755
Sep 18 00:02:40 myhost cfengine[11730]: /var/cfengine/bin/startservice had 
permission 700, changed it to 755

...and this should not be settable; I like the
cfengine:host output for standard output, but it's not
for the logs.





reply via email to

[Prev in Thread] Current Thread [Next in Thread]