On 2020-12-13, Harald Dunkel <[email protected]> wrote: > On 12/13/20 7:10 PM, Theo de Raadt wrote: >> >> And I'm suggesting the arguments should look like this: >> >> pflogd: [priv] -s 160 -i pflog0 -f /var/log/pflog (pflogd) >> pflogd: [running] -s 160 -i pflog0 -f /var/log/pflog (pflogd) >> >> That might allow more accurate pkill targetting. >> > > Wouldn't you admit that this appears to be very fragile? If I add > some flags to the pflogd command line then I have to verify the > pkill commands in newsyslog.conf again.
Obviously if the daemon is changed, the rc.d script would be changed to cope with it. It would make sense if the newsyslog.conf command was changed to use that too, then it would track whatever is set in pflogd_flags.
