From owner-freebsd-questions Tue Jul 16 10:11:13 1996 Return-Path: owner-questions Received: (from root@localhost) by freefall.freebsd.org (8.7.5/8.7.3) id KAA13194 for questions-outgoing; Tue, 16 Jul 1996 10:11:13 -0700 (PDT) Received: from jack.Colorado.EDU (jack.Colorado.EDU [128.138.149.29]) by freefall.freebsd.org (8.7.5/8.7.3) with ESMTP id KAA13187 for ; Tue, 16 Jul 1996 10:11:11 -0700 (PDT) Received: from jack (localhost [127.0.0.1]) by jack.Colorado.EDU (8.7.5/8.7.3/CNS-4.0p) with SMTP id LAA13548; Tue, 16 Jul 1996 11:06:55 -0600 (MDT) Message-ID: <31EBCC2F.5FB7@Colorado.EDU> Date: Tue, 16 Jul 1996 11:06:55 -0600 From: "Mark O'Lear" Organization: University of Colorado X-Mailer: Mozilla 3.0b5 (X11; I; SunOS 5.4 sun4m) MIME-Version: 1.0 To: Dave Babler CC: questions@freebsd.org Subject: Re: syslog and ntpdate References: Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-questions@freebsd.org X-Loop: FreeBSD.org Precedence: bulk Dave Babler wrote: > > I'm cleaning up my act, security-wise, here. Once upon a time, I logged > in to the console as root and left the session logged in as a 'console > log'. This is a secure office, so that was reasonably safe... but bad > form, of course. I then then cleaned up my act and changed syslog.conf so > that the items of interest get logged directly to the console and all is > well. Or almost. Oddly, I can no longer get info reports from ntpdate > (run with cron every 2 hours), though I used to. My syslog.conf is now: > > ---- /etc/syslog.conf > *.err;kern.debug;auth.notice;mail.crit /dev/console > *.notice;kern.debug;lpr,auth.info;mail.crit /var/log/messages > mail.info /var/log/maillog > lpr.info /var/log/lpd-errs > cron.* /var/cron/log > *.err root > *.notice;auth.debug root > *.alert root > *.emerg * > *.notice;*.alert;auth.debug;*.alert /dev/console > ---- xntpd logs most of it's stuff to daemon.info plus some warnings with daemon.warning (none of which get logged according to your above syslog.conf). > so I -assumed- that the console should get all the log messages that root > used to (except for .err messages)... but the time adjustments don't show. > I also tried adding: > > !ntpdate.* /dev/console > If you want to use the above, I believe that you have to break it into two lines: !ntpdate *.* /dev/console > Which seemed to correspond to the program usage in syslog.conf, but it > made no difference. What did I do wrong? > > Puzzled... > > -Dave -- Mark O'Lear \ e-mail: Mark.Olear@Colorado.EDU University of Colorado \ phone: (303) 492-3798 Telecomm. Svcs. (CB 313) \ fax: (303) 492-5105 Boulder, CO 80309 \