tadgy/system-configs
1
0
Fork 0
Code Releases Wiki Activity

Update syslog to log sshd stuff seperately.

Browse source
This commit is contained in:
Darren 'Tadgy' Austin 2023-11-05 14:28:07 +00:00
commit 66eb2a2982
2 changed files with 9 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

2
etc/logrotate.d/syslog
View file

@ -1,4 +1,4 @@
/var/log/httpd /var/log/messages /var/log/php /var/log/smtp { /var/log/httpd /var/log/messages /var/log/php /var/log/smtp /var/log/sshd {
sharedscripts sharedscripts
postrotate postrotate
/bin/kill -HUP $(cat /run/syslogd.pid) >/dev/null 2>&1 || true /bin/kill -HUP $(cat /run/syslogd.pid) >/dev/null 2>&1 || true

11
etc/syslog.conf
View file

@ -4,8 +4,13 @@
# * Set the correct ownership+permissions on the file # * Set the correct ownership+permissions on the file
# * Update /etc/logrotate.d/syslog with the changes # * Update /etc/logrotate.d/syslog with the changes
auth.* /var/log/messages !sshd
authpriv.* /var/log/messages auth.* /var/log/sshd
authpriv.* /var/log/sshd
!*
auth.alert /var/log/messages
authpriv.warn /var/log/messages
cron.* /var/log/messages cron.* /var/log/messages
daemon.* /var/log/messages daemon.* /var/log/messages
ftp.* /var/log/messages ftp.* /var/log/messages
@ -18,7 +23,7 @@ user.* /var/log/messages
uucp.* /var/log/messages uucp.* /var/log/messages
# fail2ban (custom configuration) uses local0. # fail2ban (custom configuration) uses local0.
local0.* /var/log/messages local0.* /var/log/fail2ban
# named (custom configuration) uses local1. # named (custom configuration) uses local1.
local1.* /var/log/messages local1.* /var/log/messages
# spamd is started with '-s local2'. # spamd is started with '-s local2'.