mirror of
https://git.hardenedbsd.org/hardenedbsd/HardenedBSD.git
synced 2024-11-28 12:07:10 +01:00
In the same manner that we log the ipfw entries, log the kernel log
messages using the output of dmesg.
This commit is contained in:
parent
67bda81def
commit
ab2b99c79b
18
etc/security
18
etc/security
@ -1,7 +1,7 @@
|
||||
#!/bin/sh -
|
||||
#
|
||||
# @(#)security 5.3 (Berkeley) 5/28/91
|
||||
# $Id: security,v 1.13 1996/06/30 19:35:20 alex Exp $
|
||||
# $Id: security,v 1.14 1996/07/31 06:47:05 pst Exp $
|
||||
#
|
||||
PATH=/sbin:/bin:/usr/bin
|
||||
LC_ALL=C; export LC_ALL
|
||||
@ -68,4 +68,20 @@ if ipfw -a l 2>/dev/null | egrep "deny|reject" > $TMP; then
|
||||
fi
|
||||
fi
|
||||
|
||||
# show denied packets
|
||||
if dmesg 2>/dev/null > $TMP; then
|
||||
if [ ! -f $LOG/dmesg.today ] ; then
|
||||
separator
|
||||
echo "no $LOG/dmesg.today"
|
||||
cp $TMP $LOG/dmesg.today
|
||||
fi
|
||||
if cmp $LOG/dmesg.today $TMP >/dev/null; then :; else
|
||||
separator
|
||||
echo "$host kernel log messages:"
|
||||
diff -b $LOG/dmesg.today $TMP | egrep "^>"
|
||||
mv $LOG/dmesg.today $LOG/dmesg.yesterday
|
||||
mv $TMP $LOG/dmesg.today
|
||||
fi
|
||||
fi
|
||||
|
||||
rm -f $TMP
|
||||
|
Loading…
Reference in New Issue
Block a user