Re: Confusing security report

From: lain. <lain_at_fair.moe>
Date: Sat, 08 Jun 2024 14:45:11 UTC
On 2024年06月08日 08:41, the silly D'Arcy Cain claimed to have said:
> On a number of my servers I have the following in the daily security report:
> 
> Checking login.conf permissions:
> Bad ownership of /etc/login.conf
> 
> The thing is that I don't have that file.  I create /etc/login.conf.db from
> a file in my own repository.  Would I be OK creating an empty
> /etc/login.conf just to keep it quiet?

Just curious, but why do you not have a /etc/login.conf file?
From my understanding, this is one of the mandatory files on any BSD
system, even if everything is commented out (or the file is blank).

So a simple `touch /etc/login.conf` would silence the report.

-- 
lain.
PGP public key: https://fair.moe/lain.asc