Re: reducing periodic report to error conditions

On 15.06.2025 20:01 Uhr John D Groenveld wrote:

In article <20250614113925.08a15c5a@zbook>,
Marco Moock  <mm+usenet-es@dorfdsl.de> wrote:

I have the following settings in /etc/defaults/periodic.conf 

 
That file and periodic.conf(5) recommends against:
<URL:https://cgit.freebsd.org/src/tree/usr.sbin/periodic/periodic.conf?h=releng/14.3>
#!/bin/sh
#
# This is defaults/periodic.conf - a file full of useful variables
that # you can set to change the default behaviour of periodic jobs
on your # system.  You should not edit this file!  Put any overrides
into one of the # $periodic_conf_files instead and you will be able
to update these defaults # later without spamming your local
configuration information.
 
<URL:https://man.freebsd.org/cgi/man.cgi?query=periodic.conf&sektion=5&apropos=0&manpath=FreeBSD+14.3-RELEASE+and+Ports>
       /etc/periodic.conf     The usual system
specific variable over- ride file.
 

daily_diff_flags="-b -U 0"            # flags for diff output
daily_output="root"                   # user or /file
daily_show_success="NO"               # scripts returning 0
daily_show_info="YES"                 # scripts returning 1
daily_show_badconfig="YES"            # scripts returning 2
[...]
daily_status_disks_enable="YES"       # Check disk status
daily_status_disks_df_flags="-l -h"   # df(1) flags for check
>
I still get the following message every day: 

 
# (cd /etc/periodic/daily/&&./400.status-disks>/dev/null);echo $?
1
 
periodic(8) suggests you add daily_show_info=NO in /etc/periodic.conf.
<URL:https://man.freebsd.org/cgi/man.cgi?query=periodic&manpath=FreeBSD+14.3-RELEASE+and+Ports>
       To  only see  important information from
daily periodic jobs, add the following lines to
/etc/periodic.conf:
 
     daily_show_success=NO
     daily_show_info=NO
     daily_show_badconfig=NO
 
John
groenveld@acm.org

I now tried that, but I still receive security mails where I can't find
an issue.


Checking negative group permissions:

Checking for passwordless accounts:

Checking login.conf permissions:

teufel.dorfdsl.de login failures:

teufel.dorfdsl.de refused connections:

Checking for security vulnerabilities in base (userland & kernel):
vulnxml file up-to-date
0 problem(s) in 0 package(s) found.
vulnxml file up-to-date
0 problem(s) in 0 package(s) found.

Checking for packages with security vulnerabilities:

Checking for packages with mismatched checksums:

-- End of security output --

[m@teufel ~]$ cat /etc/periodic.conf
daily_show_success=NO
daily_show_info=NO
daily_show_badconfig=YES


--
kind regards
Marco

Send spam to 1750010490muell@stinkedores.dorfdsl.de