Fragments of kernel log text in "security run" message

Kris Kennaway kris at obsecurity.org
Sun Aug 17 23:01:58 PDT 2003


On Mon, Aug 18, 2003 at 12:50:19AM -0500, Dan Nelson wrote:

> > I get this as well on RELENG_4...I wish I knew why.  Often it causes
> > syslogd to log it at LOG_EMERG priority (=spams every logged in user
> > with the truncated message).
> 
> I think this happens after the kernel's message buffer starts rolling
> over.  The very first line in the dmesg output sometimes gets cut in
> half, so diff prints it as a change block, and the security script
> prints the "add" portion.  Maybe the check_diff function should remove
> the first line of the dmesg output before doing the diff?

I guess I'm talking about a different problem, actually (syslogd),
although I see the truncated security script mail as well.

Kris
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-questions/attachments/20030817/d7233b45/attachment.bin


More information about the freebsd-questions mailing list