*** ./etc/security	Wed Feb 27 01:19:02 2002
--- ./etc/security	Mon May 20 19:22:21 2002
***************
*** 69,73 ****
  # the args to ls, is still here...
  #
! MP=`mount -t ufs | grep -v " nosuid" | awk '{ print $3 }' | sort`
  set ${MP}
  while [ $# -ge 1 ]; do
--- 69,75 ----
  # the args to ls, is still here...
  #
! # Nate: In a jail this is all one FS
! MP=/
! # MP=`mount -t ufs | grep -v " nosuid" | awk '{ print $3 }' | sort`
  set ${MP}
  while [ $# -ge 1 ]; do
***************
*** 95,117 ****
  fi
  
  # Show changes in the way filesystems are mounted
- #
- [ -n "$ignore" ] && cmd="egrep -v ${ignore#|}" || cmd=cat
- if mount -p | $cmd > $TMP; then
- 	if [ ! -f $LOG/mount.today ]; then
- 		[ $rc -lt 1 ] && rc=1
- 		separator
- 		echo "No $LOG/mount.today"
- 		cp $TMP $LOG/mount.today || rc=3
- 	fi
- 	if ! cmp $LOG/mount.today $TMP >/dev/null 2>&1; then
- 		[ $rc -lt 1 ] && rc=1
- 		separator
- 		echo "$host changes in mounted filesystems:"
- 		diff -b $LOG/mount.today $TMP
- 		mv $LOG/mount.today $LOG/mount.yesterday || rc=3
- 		mv $TMP $LOG/mount.today || rc=3
- 	fi
- fi
  
  separator
--- 97,102 ----
  fi
  
+ # Nate: Removed, Not relevant for a jail
  # Show changes in the way filesystems are mounted
  
  separator
***************
*** 129,199 ****
  [ $n -gt 0 -a $rc -lt 1 ] && rc=1
  
- # Show denied packets
- #
- if ipfw -a l 2>/dev/null | egrep "deny|reset|unreach" > ${TMP}; then
- 	if [ ! -f ${LOG}/ipfw.today ]; then
- 		[ $rc -lt 1 ] && rc=1
- 		separator
- 		echo "No ${LOG}/ipfw.today"
- 		cp ${TMP} ${LOG}/ipfw.today || rc=3
- 	fi
- 
- 	if ! cmp ${LOG}/ipfw.today ${TMP} >/dev/null; then
- 		[ $rc -lt 1 ] && rc=1
- 		separator
- 		echo "${host} denied packets:"
- 		diff -b ${LOG}/ipfw.today ${TMP} | egrep "^>"
- 		mv ${LOG}/ipfw.today ${LOG}/ipfw.yesterday || rc=3
- 		mv ${TMP} ${LOG}/ipfw.today || rc=3
- 	fi
- fi
- 
- # Show ipfw rules which have reached the log limit
- #
- IPFW_LOG_LIMIT=`sysctl -n net.inet.ip.fw.verbose_limit 2> /dev/null`
- if [ $? -eq 0 ] && [ "${IPFW_LOG_LIMIT}" -ne 0 ]; then
- 	ipfw -a l | grep " log " | perl -n -e \
- 		'/^\d+\s+(\d+)/; print if ($1 >= '$IPFW_LOG_LIMIT')' > ${TMP}
- 	if [ -s "${TMP}" ]; then
- 		[ $rc -lt 1 ] && rc=1
- 		separator
- 		echo 'ipfw log limit reached:'
- 		cat ${TMP}
- 	fi
- fi
- 
- # Show IPv6 denied packets
- #
- if ip6fw -a l 2>/dev/null | egrep "deny|reset|unreach" > ${TMP}; then
- 	if [ ! -f ${LOG}/ip6fw.today ]; then
- 		[ $rc -lt 1 ] && rc=1
- 		separator
- 		echo "No ${LOG}/ip6fw.today"
- 		cp ${TMP} ${LOG}/ip6fw.today || rc=3
- 	fi
- 
- 	if ! cmp ${LOG}/ip6fw.today ${TMP} >/dev/null; then
- 		[ $rc -lt 1 ] && rc=1
- 		separator
- 		echo "${host} IPv6 denied packets:"
- 		diff -b ${LOG}/ip6fw.today ${TMP} | egrep "^>"
- 		mv ${LOG}/ip6fw.today ${LOG}/ip6fw.yesterday || rc=3
- 		mv ${TMP} ${LOG}/ip6fw.today || rc=3
- 	fi
- fi
- 
- # Show ip6fw rules which have reached the log limit
- #
- IP6FW_LOG_LIMIT=`sysctl -n net.inet6.ip6.fw.verbose_limit 2> /dev/null`
- if [ $? -eq 0 ] && [ "${IP6FW_LOG_LIMIT}" -ne 0 ]; then
- 	ip6fw -a l | grep " log " | perl -n -e \
- 		'/^\d+\s+(\d+)/; print if ($1 >= '$IP6FW_LOG_LIMIT')' > ${TMP}
- 	if [ -s "${TMP}" ]; then
- 		[ $rc -lt 1 ] && rc=1
- 		separator
- 		echo 'ip6fw log limit reached:'
- 		cat ${TMP}
- 	fi
- fi
  
  # Show kernel log messages
--- 114,117 ----