On Wed, 2005-06-01 at 05:10, Joshua Au wrote:
Hello.,
I've just deployed BB and it seems that I get spammed for some of my
nodes which happen to have empty
/var/adm/messages (because nothing has happened in the last 4 days for
these nodes). Is there a way to stop
the agent from checking for empty message file? Thanks for your kind
advice
regards, Josh
Yes, but consider. Emptying the messages file is a common (but
heavy handed) method for a cracker to cover their tracks. It's
much better to simply modify your log rotation scripts to
always leave some data in there.
If you really want to stop the check, just set CHKMSGLEN="FALSE"
in the etc/bbdef-client.sh file for the clients that have this
problem.
Cheers, Phil.
--
Grabel's Law: 2 is not equal to 3 -- not even for large values of 2.
--
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-=-=-=-=-=-=-=-=-=
To unsubscribe from this list, or to subscribe to the bb-digest list
send e-mail to mailto:majordomo@bb4.com with unsubscribe bb -and/or-
subscribe bb-digest in the BODY of the message.