diff options
author | Ned Ludd <solar@gentoo.org> | 2005-04-05 22:17:38 +0000 |
---|---|---|
committer | Ned Ludd <solar@gentoo.org> | 2005-04-05 22:17:38 +0000 |
commit | 24bb7aa094de38cd2b1d63ff4a2a74f732a2d6cd (patch) | |
tree | c726e34d0b106abb958777671a78b5288f7805b7 /app-admin | |
parent | - work around maintainer disagreements with default config files (diff) | |
download | historical-24bb7aa094de38cd2b1d63ff4a2a74f732a2d6cd.tar.gz historical-24bb7aa094de38cd2b1d63ff4a2a74f732a2d6cd.tar.bz2 historical-24bb7aa094de38cd2b1d63ff4a2a74f732a2d6cd.zip |
- added example hardened syslog-ng conf used by hardened profiles.
Package-Manager: portage-2.0.51.19
Diffstat (limited to 'app-admin')
-rw-r--r-- | app-admin/syslog-ng/ChangeLog | 5 | ||||
-rw-r--r-- | app-admin/syslog-ng/Manifest | 23 | ||||
-rw-r--r-- | app-admin/syslog-ng/files/syslog-ng.conf.gentoo.hardened | 102 |
3 files changed, 124 insertions, 6 deletions
diff --git a/app-admin/syslog-ng/ChangeLog b/app-admin/syslog-ng/ChangeLog index 5bdc37e0f1a9..556b149dd8ad 100644 --- a/app-admin/syslog-ng/ChangeLog +++ b/app-admin/syslog-ng/ChangeLog @@ -1,6 +1,9 @@ # ChangeLog for app-admin/syslog-ng # Copyright 2002-2005 Gentoo Foundation; Distributed under the GPL v2 -# $Header: /var/cvsroot/gentoo-x86/app-admin/syslog-ng/ChangeLog,v 1.79 2005/02/26 17:20:02 mr_bones_ Exp $ +# $Header: /var/cvsroot/gentoo-x86/app-admin/syslog-ng/ChangeLog,v 1.80 2005/04/05 22:17:38 solar Exp $ + + 05 Apr 2005; <solar@gentoo.org> +files/syslog-ng.conf.gentoo.hardened: + - added example hardened syslog-ng conf used by hardened profiles. *syslog-ng-1.6.6 (26 Feb 2005) diff --git a/app-admin/syslog-ng/Manifest b/app-admin/syslog-ng/Manifest index f1835e9337e8..2956ccaa14bb 100644 --- a/app-admin/syslog-ng/Manifest +++ b/app-admin/syslog-ng/Manifest @@ -1,10 +1,23 @@ -MD5 9c764a96e4d1124edb7b6c07ae276d73 ChangeLog 11805 -MD5 6c2dbb020749666ec5b29ce60d0bb242 syslog-ng-1.6.5-r2.ebuild 1662 +-----BEGIN PGP SIGNED MESSAGE----- +Hash: SHA1 + MD5 6f39c70b4f14a6591701d89c9250bc0e syslog-ng-1.6.6.ebuild 1675 +MD5 6c2dbb020749666ec5b29ce60d0bb242 syslog-ng-1.6.5-r2.ebuild 1662 +MD5 b2cca4a8099e8c1a93cc1ac225f4c54f ChangeLog 11944 MD5 06a2fa1e0308f065f818db6fae959fe9 metadata.xml 257 MD5 16631a83d959b680a453099a5dee73a8 files/digest-syslog-ng-1.6.6 67 -MD5 5b474be9a74bb0c72edecc60ed7f0309 files/syslog-ng.conf.debian 5444 MD5 ed7691a108eb1acf100c3a7c540de262 files/digest-syslog-ng-1.6.5-r2 67 -MD5 ec03b691f321f282bc875862b147922c files/syslog-ng.conf.gentoo 1068 -MD5 fe66a527c7f36a560197b4187ad6d9db files/syslog-ng.logrotate 342 +MD5 090807151c7c2a92f556a1964654848a files/syslog-ng.conf.gentoo.hardened 4345 MD5 eadbf6541edf087e075c8f70461b3963 files/syslog-ng.rc6 1527 +MD5 fe66a527c7f36a560197b4187ad6d9db files/syslog-ng.logrotate 342 +MD5 5b474be9a74bb0c72edecc60ed7f0309 files/syslog-ng.conf.debian 5444 +MD5 ec03b691f321f282bc875862b147922c files/syslog-ng.conf.gentoo 1068 +-----BEGIN PGP SIGNATURE----- +Version: GnuPG v1.4.0 (GNU/Linux) + +iQCVAwUBQlMOf54WFLgrx1GWAQKBdAQAupncfB0ot3CLfEiuON8RkFtmfSyhHl5z +6+fjIfhzglSj/GzQ8CN7uw96EO/6AYZZE2LxhQMOQbwO+46wWIHP6kyLByBCYbPG +0HEmv9qPBM1orP0TTv9kP/WyBtFx63TEoeK87t8aNkdqVRfLXI6dq5FbLK3N41XE +PJaogEkfeXc= +=HIIf +-----END PGP SIGNATURE----- diff --git a/app-admin/syslog-ng/files/syslog-ng.conf.gentoo.hardened b/app-admin/syslog-ng/files/syslog-ng.conf.gentoo.hardened new file mode 100644 index 000000000000..a2c85f186dee --- /dev/null +++ b/app-admin/syslog-ng/files/syslog-ng.conf.gentoo.hardened @@ -0,0 +1,102 @@ +# Copyright 2005 Gentoo Foundation +# Distributed under the terms of the GNU General Public License v2 +# $Header: /var/cvsroot/gentoo-x86/app-admin/syslog-ng/files/syslog-ng.conf.gentoo.hardened,v 1.1 2005/04/05 22:17:38 solar Exp $ + +# +# Syslog-ng configuration file, compatible with default hardened installations. +# + +options { long_hostnames(off); sync(0); }; + +source src { unix-stream("/dev/log"); internal(); }; +source kernsrc { pipe("/proc/kmsg"); }; +#source net { udp(); }; + +destination authlog { file("/var/log/auth.log"); }; +destination syslog { file("/var/log/syslog"); }; +destination cron { file("/var/log/cron.log"); }; +destination daemon { file("/var/log/daemon.log"); }; +destination kern { file("/var/log/kern.log"); file("/dev/tty12"); }; +destination lpr { file("/var/log/lpr.log"); }; +destination user { file("/var/log/user.log"); }; +destination uucp { file("/var/log/uucp.log"); }; +#destination ppp { file("/var/log/ppp.log"); }; +destination mail { file("/var/log/mail.log"); }; + +destination avc { file("/var/log/avc.log"); }; +destination audit { file("/var/log/audit.log"); }; +destination pax { file("/var/log/pax.log"); }; +destination grsec { file("/var/log/grsec.log"); }; + +destination mailinfo { file("/var/log/mail.info"); }; +destination mailwarn { file("/var/log/mail.warn"); }; +destination mailerr { file("/var/log/mail.err"); }; + +destination newscrit { file("/var/log/news/news.crit"); }; +destination newserr { file("/var/log/news/news.err"); }; +destination newsnotice { file("/var/log/news/news.notice"); }; + +destination debug { file("/var/log/debug"); }; +destination messages { file("/var/log/messages"); }; +destination console { usertty("root"); }; +destination console_all { file("/dev/tty12"); }; +#destination loghost { udp("loghost" port(999)); }; + +destination xconsole { pipe("/dev/xconsole"); }; + +filter f_auth { facility(auth); }; +filter f_authpriv { facility(auth, authpriv); }; +filter f_syslog { not facility(authpriv, mail); }; +filter f_cron { facility(cron); }; +filter f_daemon { facility(daemon); }; +filter f_kern { facility(kern); }; +filter f_lpr { facility(lpr); }; +filter f_mail { facility(mail); }; +filter f_user { facility(user); }; +filter f_uucp { facility(cron); }; +#filter f_ppp { facility(ppp); }; +filter f_news { facility(news); }; +filter f_debug { not facility(auth, authpriv, news, mail); }; +filter f_messages { level(info..warn) + and not facility(auth, authpriv, mail, news); }; +filter f_emergency { level(emerg); }; + +filter f_info { level(info); }; + +filter f_notice { level(notice); }; +filter f_warn { level(warn); }; +filter f_crit { level(crit); }; +filter f_err { level(err); }; + +filter f_avc { match(".*avc: .*"); }; +filter f_audit { match("^audit.*") and not match(".*avc: .*"); }; +filter f_pax { match("^PAX:.*"); }; +filter f_grsec { match("^grsec:.*"); }; + +log { source(src); filter(f_authpriv); destination(authlog); }; +log { source(src); filter(f_syslog); destination(syslog); }; +log { source(src); filter(f_cron); destination(cron); }; +log { source(src); filter(f_daemon); destination(daemon); }; +log { source(kernsrc); filter(f_kern); destination(kern); }; +log { source(src); filter(f_lpr); destination(lpr); }; +log { source(src); filter(f_mail); destination(mail); }; +log { source(src); filter(f_user); destination(user); }; +log { source(src); filter(f_uucp); destination(uucp); }; +log { source(kernsrc); filter(f_pax); destination(pax); }; +log { source(kernsrc); filter(f_grsec); destination(grsec); }; +log { source(kernsrc); filter(f_audit); destination(audit); }; +log { source(kernsrc); filter(f_avc); destination(avc); }; +log { source(src); filter(f_mail); filter(f_info); destination(mailinfo); }; +log { source(src); filter(f_mail); filter(f_warn); destination(mailwarn); }; +log { source(src); filter(f_mail); filter(f_err); destination(mailerr); }; +log { source(src); filter(f_news); filter(f_crit); destination(newscrit); }; +log { source(src); filter(f_news); filter(f_err); destination(newserr); }; +log { source(src); filter(f_news); filter(f_notice); destination(newsnotice); }; +log { source(src); filter(f_debug); destination(debug); }; +log { source(src); filter(f_messages); destination(messages); }; +log { source(src); filter(f_emergency); destination(console); }; +#log { source(src); filter(f_ppp); destination(ppp); }; +log { source(src); destination(console_all); }; + + + |