Opened 12 years ago

Last modified 9 years ago

#36296 closed defect

OS X Mountain Lion has no /var/log/secure.log for sshguard to read — at Version 1

Reported by: essandess (Steve Smith) Owned by: nefar@…
Priority: Normal Milestone:
Component: ports Version: 2.1.2
Keywords: mountainlion Cc: robitaille@…, pixilla@…
Port: sshguard

Description (last modified by ryandesign (Ryan Carsten Schmidt))

For some reason, Apple has rolled up a lot of logging into syslog, including all the ssh stuff. Consequently, there is no /var/log/secure.log for sshguard to read. The current sshguard defaults results in logs that look like:

Sep 23 03:39:01 foo com.apple.launchd[1] (org.macports.sshguard): Throttling respawn: Will start in 10 seconds
Sep 23 03:39:11 foo.bar.com sshguard[64933]: File '/var/log/secure.log' vanished while adding!
Sep 23 03:39:11 foo com.apple.launchd[1] (org.macports.sshguard): Throttling respawn: Will start in 10 seconds
Sep 23 03:39:21 foo.bar.com sshguard[65369]: File '/var/log/secure.log' vanished while adding!

The fix is to remove the line '-l /var/log/secure.log' from /opt/local/etc/sshguard/options, but I'm not sure if looking only at /var/log/system.log will capture all the stuff sshguard needs for filtering.

Change History (1)

comment:1 Changed 12 years ago by ryandesign (Ryan Carsten Schmidt)

Cc: pixilla@… added
Description: modified (diff)
Keywords: mountainlion added
Owner: changed from macports-tickets@… to nefar@…
Note: See TracTickets for help on using tickets.