From owner-freebsd-questions@FreeBSD.ORG Sun Aug 17 23:01:58 2003 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 5CBF437B401 for ; Sun, 17 Aug 2003 23:01:58 -0700 (PDT) Received: from obsecurity.dyndns.org (adsl-64-169-107-97.dsl.lsan03.pacbell.net [64.169.107.97]) by mx1.FreeBSD.org (Postfix) with ESMTP id D8AD543F85 for ; Sun, 17 Aug 2003 23:01:56 -0700 (PDT) (envelope-from kris@obsecurity.org) Received: from rot13.obsecurity.org (rot13.obsecurity.org [10.0.0.5]) by obsecurity.dyndns.org (Postfix) with ESMTP id 1C9CB66D7A; Sun, 17 Aug 2003 23:01:55 -0700 (PDT) Received: by rot13.obsecurity.org (Postfix, from userid 1000) id CFCC3A2B; Sun, 17 Aug 2003 23:01:54 -0700 (PDT) Date: Sun, 17 Aug 2003 23:01:54 -0700 From: Kris Kennaway To: Dan Nelson Message-ID: <20030818060154.GA70687@rot13.obsecurity.org> References: <20030818052132.GA70374@rot13.obsecurity.org> <20030818055019.GF2653@dan.emsphone.com> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="opJtzjQTFsWo+cga" Content-Disposition: inline In-Reply-To: <20030818055019.GF2653@dan.emsphone.com> User-Agent: Mutt/1.4.1i cc: Ralph Dratman cc: freebsd-questions@freebsd.org cc: Kris Kennaway Subject: Re: Fragments of kernel log text in "security run" message X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 18 Aug 2003 06:01:58 -0000 --opJtzjQTFsWo+cga Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Mon, Aug 18, 2003 at 12:50:19AM -0500, Dan Nelson wrote: > > I get this as well on RELENG_4...I wish I knew why. Often it causes > > syslogd to log it at LOG_EMERG priority (=3Dspams every logged in user > > with the truncated message). >=20 > I think this happens after the kernel's message buffer starts rolling > over. The very first line in the dmesg output sometimes gets cut in > half, so diff prints it as a change block, and the security script > prints the "add" portion. Maybe the check_diff function should remove > the first line of the dmesg output before doing the diff? I guess I'm talking about a different problem, actually (syslogd), although I see the truncated security script mail as well. Kris --opJtzjQTFsWo+cga Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.2 (FreeBSD) iD8DBQE/QGvSWry0BWjoQKURAnIQAJ4mmR0PX5uUuOqw/xMkDYexuH8aQACg4usQ EQyeYqZE67tdylj//6Sk5i4= =KiC/ -----END PGP SIGNATURE----- --opJtzjQTFsWo+cga--