weekly periodic security status

Jeremie Le Hen jlh at FreeBSD.org
Thu Aug 22 20:50:06 UTC 2013


Hi,

I plan to commit the attached patch.  This allows the turn the daily
security checks into weekly checks.  You do this by adding the following
to periodic.conf(5):

    daily_status_security_enable=NO
    weekly_status_security_enable=YES

All other $daily_status_security_whatever variables will be renamed to
$security_status_whatever.  The old variable name is supported but
prints a warning.

The idea is that for many personal servers, whether it is used as a NAS
or for developement, you may not want to run I/O-expensive find(1) jobs
every day, but you don't want to disable entirely because there's a
little voice that tells you it's bad.

Well, whatever, if you have any concerns, objections or comments, please
speak now :).

Note that once I will have committed this, I will make another commit to
the manpage so as to move the security options into their own section,
out of the daily section.  But it is clearer for review that way I
think.

The patch is also available here:
http://people.freebsd.org/~jlh/weekly_status_security.diff

Cheers,
-- 
Jeremie Le Hen

Scientists say the world is made up of Protons, Neutrons and Electrons.
They forgot to mention Morons.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: weekly_status_security.diff
Type: text/x-diff
Size: 18696 bytes
Desc: not available
URL: <http://lists.freebsd.org/pipermail/freebsd-hackers/attachments/20130822/a84a38bb/attachment.diff>


More information about the freebsd-hackers mailing list