Periodic security find pruning

[Eric Anderson]

I have a backup server running rsnapshot which has about 10TB of used disk space attached.  When the setuid security check runs, it crawls all the partitions mounted, which takes an insane amount of time, and thrashes the disks while I'm trying to send backups to them.  I didn't see any way to exclude them, so I hacked the script myself.  I've attached a patch to allow exclusion of mount points - please review, replace, hack, etc as needed.

All you need to do is add:
daily_status_security_chksetuid_prunemounts=""
to /etc/defaults/periodic.conf

with a list of mount points to be excluded like this:
daily_status_security_chksetuid_prunemounts="vol backup tmp"

Patch attached.

Eric



-- 
------------------------------------------------------------------------
Eric Anderson        Sr. Systems Administrator        Centaur Technology
I have seen the future and it is just like the present, only longer.
------------------------------------------------------------------------
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 100.chksetuid.patch
Type: text/x-patch
Size: 663 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-current/attachments/20050328/eb26687f/100.chksetuid.bin