security/logcheck 1.4.7 FreeBSD

Auditing tool for system logs on Unix boxes

System: FreeBSD
Repository: FreeBSD ports
Maintainer: [email protected]
License: GPLv2+
Categories: security
Package size: 105.2 KiB, 422.7 KiB installed

Description

Mails anomalies in the system logfiles to the administrator.

Logcheck helps spot problems, anomalies and security violations in your logfiles automatically and will send the summaries to you via e-mail. Logcheck is run as a cron job.

In the other systems

System

Port

Version

FreeBSD

security/logcheck

1.4.7

NetBSD

security/logcheck

1.1.1nb1

DragonFly

security/logcheck

1.4.3_2

MidnightBSD

security/logcheck

1.4.7

Install

Binary package:

pkg install logcheck

From the ports tree:

cd /usr/ports/security/logcheck/ && make install clean

To depend on this port in another port's Makefile:

RUN_DEPENDS=	logcheck>0:security/logcheck

Packages

The version each package repository carries. “-” means the repository builds no package of it, “n/a” that there is no such repository.

Repository

aarch64

amd64

armv6

armv7

i386

FreeBSD:14:latest

1.4.7

1.4.0

1.4.6_1

1.4.7

FreeBSD:14:quarterly

1.4.7

n/a

1.4.4_1

1.4.7

FreeBSD:15:latest

1.4.7

n/a

1.4.6_1

FreeBSD:15:quarterly

1.4.7

n/a

FreeBSD:16:latest

1.4.7

n/a

FreeBSD:16:quarterly

n/a

Dependencies

As this port's Makefile names them.

Build 1

docbook-to-man>0 : textproc/docbook-to-man

Runtime 3

bash : shells/bash
lockfile-create : sysutils/lockfile-progs
mime-construct : mail/mime-construct

The full lists below include those, and their dependencies in turn.

Build dependencies 13

Run dependencies 10

No port depends on this one.

Configuration

Options name: security_logcheck

Option

Default

Description

CRON

Install cron script automatically

DOCS

off

Build and/or install documentation

EXAMPLES

off

Build and/or install examples

USES: perl5 shebangfix tar:xz
Service scripts: none

Message after installing

Please make sure that all files listed in

  /usr/local/etc/logcheck/logcheck.logfiles.d/syslog.logfiles

are readable to the 'logcheck' group (see also /etc/newsyslog.conf),
or remove them from the aforementioned logcheck configuration file.

For information on how to write local rulesets see

  /usr/local/share/doc/logcheck/README.logcheck-database

===>   NOTICE:

The logcheck port currently does not have a maintainer. As a result, it is
more likely to have unresolved issues, not be up-to-date, or even be removed in
the future. To volunteer to maintain this port, please create an issue at:

https://bugs.freebsd.org/bugzilla

More information about port maintainership is available at:

https://docs.freebsd.org/en/articles/contributing/#ports-contributing

Files

Manual pages 4

logcheck(8)
logcheck-test(1)
logtail(8)
logtail2(8)

pkg-plist 218

share/logcheck/detectrotate/10-savelog.dtr
share/logcheck/detectrotate/20-logrotate.dtr
share/logcheck/detectrotate/30-logrotate-dateext.dtr
@group
etc/logcheck/cracking.d/kernel
etc/logcheck/cracking.d/rlogind
etc/logcheck/cracking.d/rsh
etc/logcheck/cracking.d/smartd
etc/logcheck/cracking.d/tftpd
etc/logcheck/cracking.d/uucico
etc/logcheck/ignore.d.paranoid/bind
etc/logcheck/ignore.d.paranoid/cron
etc/logcheck/ignore.d.paranoid/incron
etc/logcheck/ignore.d.paranoid/logcheck
etc/logcheck/ignore.d.paranoid/postfix
etc/logcheck/ignore.d.paranoid/ppp
etc/logcheck/ignore.d.paranoid/qpopper
etc/logcheck/ignore.d.paranoid/squid
etc/logcheck/ignore.d.paranoid/ssh
etc/logcheck/ignore.d.paranoid/stunnel
etc/logcheck/ignore.d.paranoid/sysklogd
etc/logcheck/ignore.d.paranoid/telnetd
etc/logcheck/ignore.d.paranoid/tripwire
etc/logcheck/ignore.d.paranoid/usb
etc/logcheck/ignore.d.server/acpid
etc/logcheck/ignore.d.server/amandad
etc/logcheck/ignore.d.server/amavisd-new
etc/logcheck/ignore.d.server/anacron
etc/logcheck/ignore.d.server/anon-proxy
etc/logcheck/ignore.d.server/apache
etc/logcheck/ignore.d.server/apcupsd
etc/logcheck/ignore.d.server/arpwatch
etc/logcheck/ignore.d.server/asterisk
etc/logcheck/ignore.d.server/automount
etc/logcheck/ignore.d.server/bind
etc/logcheck/ignore.d.server/bluez-utils
etc/logcheck/ignore.d.server/courier
etc/logcheck/ignore.d.server/cpqarrayd
etc/logcheck/ignore.d.server/cpufreqd
etc/logcheck/ignore.d.server/cron
etc/logcheck/ignore.d.server/cron-apt
etc/logcheck/ignore.d.server/cups-lpd
etc/logcheck/ignore.d.server/cvs-pserver
etc/logcheck/ignore.d.server/cvsd
etc/logcheck/ignore.d.server/cyrus
etc/logcheck/ignore.d.server/dbus-daemon
etc/logcheck/ignore.d.server/dcc
etc/logcheck/ignore.d.server/ddclient
etc/logcheck/ignore.d.server/dhclient
etc/logcheck/ignore.d.server/dhcp
etc/logcheck/ignore.d.server/dictd
etc/logcheck/ignore.d.server/dkfilter
etc/logcheck/ignore.d.server/dnsmasq
etc/logcheck/ignore.d.server/dovecot
etc/logcheck/ignore.d.server/dropbear
etc/logcheck/ignore.d.server/dspam
etc/logcheck/ignore.d.server/epmd
etc/logcheck/ignore.d.server/exim4
etc/logcheck/ignore.d.server/fcron
etc/logcheck/ignore.d.server/ftpd
etc/logcheck/ignore.d.server/git-daemon
etc/logcheck/ignore.d.server/gnu-imap4d
etc/logcheck/ignore.d.server/gps
etc/logcheck/ignore.d.server/grinch
etc/logcheck/ignore.d.server/horde3
etc/logcheck/ignore.d.server/hplip
etc/logcheck/ignore.d.server/hylafax
etc/logcheck/ignore.d.server/ikiwiki
etc/logcheck/ignore.d.server/imap
etc/logcheck/ignore.d.server/imapproxy
etc/logcheck/ignore.d.server/imp
etc/logcheck/ignore.d.server/imp4
etc/logcheck/ignore.d.server/innd
etc/logcheck/ignore.d.server/ipppd
etc/logcheck/ignore.d.server/isdnlog
etc/logcheck/ignore.d.server/isdnutils
etc/logcheck/ignore.d.server/jabberd
etc/logcheck/ignore.d.server/kernel
etc/logcheck/ignore.d.server/klogind
etc/logcheck/ignore.d.server/krb5-kdc
etc/logcheck/ignore.d.server/libpam-krb5
etc/logcheck/ignore.d.server/libpam-mount
etc/logcheck/ignore.d.server/libpam-systemd
etc/logcheck/ignore.d.server/logcheck
etc/logcheck/ignore.d.server/login
etc/logcheck/ignore.d.server/maradns
etc/logcheck/ignore.d.server/mldonkey-server
etc/logcheck/ignore.d.server/mon
etc/logcheck/ignore.d.server/mountd
etc/logcheck/ignore.d.server/nagios
etc/logcheck/ignore.d.server/netconsole
etc/logcheck/ignore.d.server/nfs
etc/logcheck/ignore.d.server/nntpcache
etc/logcheck/ignore.d.server/nscd
etc/logcheck/ignore.d.server/nslcd
etc/logcheck/ignore.d.server/opendkim
etc/logcheck/ignore.d.server/opendmarc
etc/logcheck/ignore.d.server/openvpn
etc/logcheck/ignore.d.server/otrs
etc/logcheck/ignore.d.server/passwd

The first 100 are listed.

distinfo 1

File

Size

SHA256

logcheck_1.4.7.tar.xz

143776

cc160cbcac28f39388e8b96e462c4e62d005453b6957f1f0eaa8c093ff9cf3df

Master sites 1

DEBIAN_POOL

Commit history 0

No commits in the history this site was built from.