#36296: OS X Mountain Lion has no /var/log/secure.log for sshguard to read --------------------------+-------------------------- Reporter: s.t.smith@… | Owner: nefar@… Type: defect | Status: new Priority: Normal | Milestone: Component: ports | Version: 2.1.2 Resolution: | Keywords: mountainlion Port: sshguard | --------------------------+-------------------------- Changes (by ryandesign@…): * keywords: => mountainlion * owner: macports-tickets@… => nefar@… * cc: pixilla@… (added) Old description:

For some reason, Apple has rolled up a lot of logging into syslog, including all the ssh stuff. Consequently, there is no /var/log/secure.log for sshguard to read. The current sshguard defaults results in logs that look like:

Sep 23 03:39:01 foo com.apple.launchd[1] (org.macports.sshguard): Throttling respawn: Will start in 10 seconds Sep 23 03:39:11 foo.bar.com sshguard[64933]: File '/var/log/secure.log' vanished while adding! Sep 23 03:39:11 foo com.apple.launchd[1] (org.macports.sshguard): Throttling respawn: Will start in 10 seconds Sep 23 03:39:21 foo.bar.com sshguard[65369]: File '/var/log/secure.log' vanished while adding!

The fix is to remove the line '-l /var/log/secure.log' from /opt/local/etc/sshguard/options, but I'm not sure if looking only at /var/log/system.log will capture all the stuff sshguard needs for filtering.

New description: For some reason, Apple has rolled up a lot of logging into syslog, including all the ssh stuff. Consequently, there is no /var/log/secure.log for sshguard to read. The current sshguard defaults results in logs that look like: {{{ Sep 23 03:39:01 foo com.apple.launchd[1] (org.macports.sshguard): Throttling respawn: Will start in 10 seconds Sep 23 03:39:11 foo.bar.com sshguard[64933]: File '/var/log/secure.log' vanished while adding! Sep 23 03:39:11 foo com.apple.launchd[1] (org.macports.sshguard): Throttling respawn: Will start in 10 seconds Sep 23 03:39:21 foo.bar.com sshguard[65369]: File '/var/log/secure.log' vanished while adding! }}} The fix is to remove the line '-l /var/log/secure.log' from /opt/local/etc/sshguard/options, but I'm not sure if looking only at /var/log/system.log will capture all the stuff sshguard needs for filtering. -- -- Ticket URL: <https://trac.macports.org/ticket/36296#comment:1> MacPorts <http://www.macports.org/> Ports system for Mac OS

#36296: OS X Mountain Lion has no /var/log/secure.log for sshguard to read --------------------------+-------------------------- Reporter: s.t.smith@… | Owner: nefar@… Type: defect | Status: new Priority: Normal | Milestone: Component: ports | Version: 2.1.2 Resolution: | Keywords: mountainlion Port: sshguard | --------------------------+-------------------------- Comment (by catkfr@…): Cc me -- Ticket URL: <https://trac.macports.org/ticket/36296#comment:6> MacPorts <http://www.macports.org/> Ports system for Mac OS