[ale] improved syslogd.c

[Bob's ALE Mail]

> Date: Thu, 30 Jan 1997 23:47:22 -0500 (EST)
> From: Michael David Ivey <ivey at gstv.gsu.edu>
> To: "Bob's ALE Mail" <transam at cavu.com>
> cc: ale at cc.gatech.edu
> Subject: Re: [ale] improved syslogd.c
> In-Reply-To: <199701310430.XAA17344 at cavu.com>

> Does it fix the stupid bug about not putting MAIL messages into a seperate
> file?  I wanted a /var/log/maillog so that I wouldn't have all the
> sendmail info in my syslog, and it got real confused...i could re-create
> the problem, if need be.

Send me your /etc/syslog.conf if you like.

I did fix the STUPID bug whereby if you did:

	mail.none;auth.crit;*.info			/var/adm/messages

instead of

	*.info;mail.none;auth.crit			/var/adm/messages

it happily processed the *.info by matching everything and writing
a priority of info into everything, even though they've been explicitly
set to something else less verbose.

Btw, my /etc/syslog.conf file (which I don't claim to be perfect) is:

	# /etc/syslog.conf
	# For info about the format of this file, see "man syslog.conf"
	# (the BSD man page), and /usr/doc/sysklogd/README.linux.
	#
	# NOTE: YOU HAVE TO USE TABS HERE - NOT SPACES.
	# I don't know why.
	#

	# The /var/adm/secure (auth) file has restricted access.
	*.warn;authpriv.notice;auth.notice		bob,root
	*.warn;authpriv.notice;auth.notice		/var/adm/secure
	authpriv.debug;auth.debug			/var/adm/secure.ok

	*.info;mail.none;auth.none;authpriv.none	/var/adm/messages
	#*.debug;auth.none;authpriv.none		/var/adm/debug
	*.warn						/var/adm/syslog
	*.emerg						*
	*.crit						*
	*.alert						*
	daemon,local2.debug				/etc/ppp/ppp-log
	#daemon.notice					/dev/console
	daemon.info					/var/adm/daemon
	mail.info					/var/adm/mail

	#
	# This might work to instead log on a remote host:
	# *						@hostname

I also edited tcpd's Makefile to log it as LOG_AUTHPRIV instead of LOG_MAIL
so security violations were not buried in sendmail babble.

Bob Toxen
bob at cavu.com
transam at cavu.com [ALE]
http://www.mindspring.com/~cavu
Fly-By-Day Consulting, Inc.
"Venimus, Vidimus, Dolavimus" (We came, we saw, we hacked)