freebsd-security Digest, Vol 184, Issue 2

[Alexander Leidinger]

Quoting Wes Peters <wes at opensail.org> (from Tue, 7 Nov 2006 20:19:40 -0800):

> --- /etc/rc.d/dmesg     Sat May  6 21:00:26 2006
> +++ dmesg       Tue Nov  7 20:17:47 2006
> @@ -19,8 +19,10 @@
> do_dmesg()
> {
> -       rm -f ${dmesg_file}
> +       mv -f ${dmesg_file} ${dmesg_file}.prev
>         ( umask 022 ; /sbin/dmesg $rc_flags > ${dmesg_file} )
> +       cmp -s ${dmesg_file} ${dmesg_file}.prev || \
> +               logger -p security.warn 'dmesg.boot changed from
> previous boot'
> }
> load_rc_config $name
>
>
> If you like that, I'm willing to discuss it further, and/or commit it
> and let the howling tell if it's a keeper or not. ;^)

Did you try this? I didn't, but I would expect to see this message  
_every time_ (because of minor timecounter rate changes).

Bye,
Alexander.

-- 
In those days he was wiser than he is now -- he used to frequently take
my advice.
		-- Winston Churchill

http://www.Leidinger.net    Alexander @ Leidinger.net: PGP ID = B0063FE7
http://www.FreeBSD.org       netchild @ FreeBSD.org  : PGP ID = 72077137