From 69b66feabca09d71cb1b4c36c025ce3e75393e70 Mon Sep 17 00:00:00 2001 From: Martin Skøtt Date: Tue, 27 Aug 2002 10:39:56 +0000 Subject: Now checks what MTA the machine is running and copies the matching logcheck files. Currently supports Postfix, but can very easily be extended to other MTAs. Also fixed a minor spelling mistake in a comment. --- cfengine/cf.services.harden | 12 ++++++++---- 1 file changed, 8 insertions(+), 4 deletions(-) diff --git a/cfengine/cf.services.harden b/cfengine/cf.services.harden index 68f9fea..f2b96c6 100644 --- a/cfengine/cf.services.harden +++ b/cfengine/cf.services.harden @@ -11,6 +11,9 @@ control: groups: install_logcheck = ( '/usr/bin/test ! -e /usr/sbin/logcheck' ) + #Define classes according to the installed MTA + runs_postfix = ( '/usr/bin/test -e /usr/sbin/postfix' ) + editfiles: # AIDE section { /etc/aide/aide.conf @@ -102,7 +105,7 @@ editfiles: } copy: - #The linktype is necesarry for links to be replaced with files. + #The linktype is necessary for links to be replaced with files. NameServer:: $(LocalCommon)/logcheck/ignore.d.$(type)/bind dest=$(logcheck)/ignore.d/local-bind linktype=copy $(LocalCommon)/logcheck/violations.ignore.d/bind dest=$(logcheck)/violations.ignore.d/local-bind linktype=copy @@ -128,12 +131,13 @@ copy: SpamAssServer:: $(LocalCommon)/logcheck/ignore.d.$(type)/spamassassin dest=$(logcheck)/ignore.d/local-spamassassin linktype=copy - any:: - $(LocalCommon)/logcheck/ignore.d.$(type)/ssh dest=$(logcheck)/ignore.d/local-ssh linktype=copy + runs_postfix:: $(LocalCommon)/logcheck/ignore.d.$(type)/postfix dest=$(logcheck)/ignore.d/local-postfix linktype=copy + $(LocalCommon)/logcheck/violations.ignore.d/postfix dest=$(logcheck)/violations.ignore.d/local-postfix linktype=copy + any:: + $(LocalCommon)/logcheck/ignore.d.$(type)/ssh dest=$(logcheck)/ignore.d/local-ssh linktype=copy $(LocalCommon)/logcheck/violations.ignore.d/ssh dest=$(logcheck)/violations.ignore.d/local-ssh linktype=copy - $(LocalCommon)/logcheck/violations.ignore.d/postfix dest=$(logcheck)/violations.ignore.d/local-postfix linktype=copy links: any:: -- cgit v1.2.3