Periodic security find pruning

Eric Anderson anderson at centtech.com
Mon Mar 28 07:41:17 PST 2005


Ulrich Spoerlein wrote:
> On Mon, 28.03.2005 at 09:06:08 -0600, Eric Anderson wrote:
> 
>>+	MP=`mount -t ufs | egrep -v " no(suid|exec)" | awk '{ print $3 }' | egrep -v "($excludes)" | sort`
> 
> 
> You need to consider boundaries. Having /vol, /vol1 and /vol2, setting
> excludes to "vol" will result in ".*vol.*" being excluded. I would
> suggest using full paths ("/vol") and this regexp: "^$(excludes)\$",
> that way one can also exclude / by putting "/" into $excludes.

Right you are!  Good idea..

Eric



-- 
------------------------------------------------------------------------
Eric Anderson        Sr. Systems Administrator        Centaur Technology
I have seen the future and it is just like the present, only longer.
------------------------------------------------------------------------


More information about the freebsd-current mailing list