Re: {bb} How to stop BB from checking for empty messages

[Philip Clark <bblist@cannae.uklinux.net>]

On Wed, 2005-06-01 at 05:10, Joshua Au wrote:
> Hello.,
> 
>     I've just deployed BB and it seems that I get spammed for some of my nodes which happen to have empty
> /var/adm/messages (because nothing has happened in the last 4 days for these nodes). Is there a way to stop
> the agent from checking for empty message file? Thanks for your kind advice
> 
> regards, Josh

Yes, but consider. Emptying the messages file is a common (but
heavy handed) method for a cracker to cover their tracks. It's
much better to simply modify your log rotation scripts to
always leave some data in there.

If you really want to stop the check, just set CHKMSGLEN="FALSE"
in the etc/bbdef-client.sh file for the clients that have this
problem.

Cheers, Phil.



-- 
Grabel's Law: 2 is not equal to 3 -- not even for large values of 2.

--
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-=-=-=-=-=-=-=-=-=
To unsubscribe from this list, or to subscribe to the bb-digest list
send e-mail to mailto:majordomo@bb4.com with unsubscribe bb -and/or-
subscribe bb-digest in the BODY of the message.