Opened 12 years ago
Last modified 9 years ago
#36296 closed defect
OS X Mountain Lion has no /var/log/secure.log for sshguard to read — at Version 1
Reported by: | essandess (Steve Smith) | Owned by: | nefar@… |
---|---|---|---|
Priority: | Normal | Milestone: | |
Component: | ports | Version: | 2.1.2 |
Keywords: | mountainlion | Cc: | robitaille@…, pixilla@… |
Port: | sshguard |
Description (last modified by ryandesign (Ryan Carsten Schmidt))
For some reason, Apple has rolled up a lot of logging into syslog, including all the ssh stuff. Consequently, there is no /var/log/secure.log for sshguard to read. The current sshguard defaults results in logs that look like:
Sep 23 03:39:01 foo com.apple.launchd[1] (org.macports.sshguard): Throttling respawn: Will start in 10 seconds Sep 23 03:39:11 foo.bar.com sshguard[64933]: File '/var/log/secure.log' vanished while adding! Sep 23 03:39:11 foo com.apple.launchd[1] (org.macports.sshguard): Throttling respawn: Will start in 10 seconds Sep 23 03:39:21 foo.bar.com sshguard[65369]: File '/var/log/secure.log' vanished while adding!
The fix is to remove the line '-l /var/log/secure.log' from /opt/local/etc/sshguard/options, but I'm not sure if looking only at /var/log/system.log will capture all the stuff sshguard needs for filtering.
Change History (1)
comment:1 Changed 12 years ago by ryandesign (Ryan Carsten Schmidt)
Cc: | pixilla@… added |
---|---|
Description: | modified (diff) |
Keywords: | mountainlion added |
Owner: | changed from macports-tickets@… to nefar@… |
Note: See
TracTickets for help on using
tickets.