On 12/22/2013 6:00 AM, Frank Seltzer wrote:
Adrian Chadd said:

The point is that some people like an audit trail. The audit trail for
some people involves remote logging of syslog messages to a log host.
This would include when packages are installed.

There are two more:

1. When a port was deinstalled
2. History of a port (previous installs/deinstalls)

For example, my logs have:

Sep  9 16:05:28 chombo pkg-static: postfix-2.10.0,1 deinstalled
Sep  9 16:05:36 chombo pkg-static: postfix-2.10.0,1 installed
Nov 30 00:25:02 chombo pkg: postfix-2.10.0,1 deinstalled
Nov 30 00:25:09 chombo pkg-static: postfix-2.10.2,1 installed

Which tells me I recompiled postfix on Sept 9 (this would have been when I changed it over to openssl from ports) and updated it to 2.10.2 on Nov 30 using portmaster.

How do I know that?

Because of that deinstall log. When you use `pkg install` to upgrade a port, you get something like this:

Jul 10 23:06:40 chombo pkg-static: ca_root_nss-3.15.1 installed
Nov 29 15:04:52 chombo pkg: ca_root_nss reinstalled: 3.15.2_1

That information does not exist in the pkg database.

My thought:

Then why can't the messages about installed ports have it's own log file
rather than /var/log/messages?

I have never understood why anyone would enable the use of syslog without also providing a way of specifying the facility and level. I'd much rather do stuff like this:

local0.*        /var/log/dovecot.log
local1.*        /var/log/postgres.log
local2.*        /var/log/php-fpm.log

freebsd-current@freebsd.org mailing list
To unsubscribe, send any mail to "freebsd-current-unsubscr...@freebsd.org"

Reply via email to