![[PukiWiki]](image/pukiwiki.png "[PukiWiki]")
CONTENTS
Lastmodified 2018-05-12 (土) 05:33:19
Warning: Variable $daily_status_security_neggrpperm_enable is deprecated, use $security_status_neggrpperm_enable instead.
/etc/periodic.conf
# 110.neggrpperm #daily_status_security_neggrpperm_enable="YES" #daily_status_security_neggrpperm_enable="NO" ← コメントアウト security_status_neggrpperm_enable="YES" ← 追加
FreeBSD 9.3 を 10.2 へupgrade したあと、サーバから週末にくる報告メールの『FQDN weekly security run output』に盛大にエラーがでる。
どうやら、/etc/defaults か /etc/periodic の設定ファイルの手動マージをミスったらしい・・・(^^ゞ
FQDN weekly security run output
Warning: Variable $daily_status_security_logdir is deprecated, use $security_status_logdir instead. Warning: Variable $daily_status_security_diff_flags is deprecated, use $security_status_diff_flags instead. Warning: Variable $daily_status_security_chksetuid_enable is deprecated, use $security_status_chksetuid_enable instead. /etc/periodic/security/100.chksetuid: security_status_chksetuid_enable=YES: not found /etc/periodic/security/100.chksetuid: security_status_chksetuid_period=daily: not found Warning: Variable $daily_status_security_neggrpperm_enable is deprecated, use $security_status_neggrpperm_enable instead. Warning: Variable $daily_status_security_logdir is deprecated, use $security_status_logdir instead. Warning: Variable $daily_status_security_diff_flags is deprecated, use $security_status_diff_flags instead. Warning: Variable $daily_status_security_chkmounts_enable is deprecated, use $security_status_chkmounts_enable instead. /etc/periodic/security/200.chkmounts: security_status_chkmounts_enable=YES: not found /etc/periodic/security/200.chkmounts: security_status_chkmounts_period=daily: not found Warning: Variable $daily_status_security_noamd is deprecated, use $security_status_noamd instead. Warning: Variable $daily_status_security_chkuid0_enable is deprecated, use $security_status_chkuid0_enable instead. /etc/periodic/security/300.chkuid0: security_status_chkuid0_enable=YES: not found /etc/periodic/security/300.chkuid0: security_status_chkuid0_period=daily: not found Warning: Variable $daily_status_security_passwdless_enable is deprecated, use $security_status_passwdless_enable instead. /etc/periodic/security/400.passwdless: security_status_passwdless_enable=YES: not found /etc/periodic/security/400.passwdless: security_status_passwdless_period=daily: not found Warning: Variable $daily_status_security_logincheck_enable is deprecated, use $security_status_logincheck_enable instead. /etc/periodic/security/410.logincheck: security_status_logincheck_enable=YES: not found /etc/periodic/security/410.logincheck: security_status_logincheck_period=daily: not found Warning: Variable $daily_status_security_logdir is deprecated, use $security_status_logdir instead. Warning: Variable $daily_status_security_diff_flags is deprecated, use $security_status_diff_flags instead. Warning: Variable $daily_status_security_ipfwdenied_enable is deprecated, use $security_status_ipfwdenied_enable instead. /etc/periodic/security/500.ipfwdenied: security_status_ipfwdenied_enable=YES: not found /etc/periodic/security/500.ipfwdenied: security_status_ipfwdenied_period=daily: not found Warning: Variable $daily_status_security_logdir is deprecated, use $security_status_logdir instead. Warning: Variable $daily_status_security_diff_flags is deprecated, use $security_status_diff_flags instead. Warning: Variable $daily_status_security_ipfdenied_enable is deprecated, use $security_status_ipfdenied_enable instead. /etc/periodic/security/510.ipfdenied: security_status_ipfdenied_enable=YES: not found /etc/periodic/security/510.ipfdenied: security_status_ipfdenied_period=daily: not found Warning: Variable $daily_status_security_logdir is deprecated, use $security_status_logdir instead. Warning: Variable $daily_status_security_diff_flags is deprecated, use $security_status_diff_flags instead. Warning: Variable $daily_status_security_pfdenied_enable is deprecated, use $security_status_pfdenied_enable instead. /etc/periodic/security/520.pfdenied: security_status_pfdenied_enable=YES: not found /etc/periodic/security/520.pfdenied: security_status_pfdenied_period=daily: not found Warning: Variable $daily_status_security_ipfwlimit_enable is deprecated, use $security_status_ipfwlimit_enable instead. /etc/periodic/security/550.ipfwlimit: security_status_ipfwlimit_enable=YES: not found /etc/periodic/security/550.ipfwlimit: security_status_ipfwlimit_period=daily: not found Warning: Variable $daily_status_security_logdir is deprecated, use $security_status_logdir instead. Warning: Variable $daily_status_security_diff_flags is deprecated, use $security_status_diff_flags instead. Warning: Variable $daily_status_security_ipf6denied_enable is deprecated, use $security_status_ipf6denied_enable instead. /etc/periodic/security/610.ipf6denied: security_status_ipf6denied_enable=YES: not found /etc/periodic/security/610.ipf6denied: security_status_ipf6denied_period=daily: not found Warning: Variable $daily_status_security_logdir is deprecated, use $security_status_logdir instead. Warning: Variable $daily_status_security_diff_flags is deprecated, use $security_status_diff_flags instead. Warning: Variable $daily_status_security_kernelmsg_enable is deprecated, use $security_status_kernelmsg_enable instead. /etc/periodic/security/700.kernelmsg: security_status_kernelmsg_enable=YES: not found /etc/periodic/security/700.kernelmsg: security_status_kernelmsg_period=daily: not found Warning: Variable $daily_status_security_logdir is deprecated, use $security_status_logdir instead. Warning: Variable $daily_status_security_loginfail_enable is deprecated, use $security_status_loginfail_enable instead. /etc/periodic/security/800.loginfail: security_status_loginfail_enable=YES: not found /etc/periodic/security/800.loginfail: security_status_loginfail_period=daily: not found Warning: Variable $daily_status_security_logdir is deprecated, use $security_status_logdir instead. Warning: Variable $daily_status_security_tcpwrap_enable is deprecated, use $security_status_tcpwrap_enable instead. /etc/periodic/security/900.tcpwrap: security_status_tcpwrap_enable=YES: not found /etc/periodic/security/900.tcpwrap: security_status_tcpwrap_period=daily: not found Checking for packages with security vulnerabilities: Database fetched: Sun Sep 13 08:13:13 JST 2015 file-5.17 jasper-1.900.1_12 lzo2-2.06 Warning: Variable $daily_status_security_logdir is deprecated, use $security_status_logdir instead. Warning: Variable $daily_status_security_diff_flags is deprecated, use $security_status_diff_flags instead.
periodic weekly のスクリプトが古いようだ。解決策は、/etc/defaults と /etc/periodic を正常に動いている10.*のものに入れ替える。
/etc # ll total 840 drwxr-xr-x 2 root wheel 512 Sep 13 09:16 defaults/ ←これ drwxr-xr-x 2 root wheel 512 Sep 6 09:04 defaults_old/ drwxr-xr-x 6 root wheel 512 Sep 13 09:18 periodic/ ←これ # chmod -R +x /etc/periodic -rw-r--r-- 1 root wheel 137 May 25 2013 periodic.conf drwxr-xr-x 6 root wheel 512 Dec 4 2012 periodic_old/
scp -rp k149.kuji-clinic.info:/etc/defaults /etc/ scp -rp k149.kuji-clinic.info:/etc/periodic /etc/
治ったかどうかtestしてみる
# periodic weekly
OK!
http://d.hatena.ne.jp/parasporospa/20070506/p2
Total access 2086：本日 1：昨日 0
