[MacPorts] #36296: OS X Mountain Lion has no /var/log/secure.log for sshguard to read

[MacPorts]

#36296: OS X Mountain Lion has no /var/log/secure.log for sshguard to read
--------------------------+--------------------------
  Reporter:  s.t.smith@…  |      Owner:  nefar@…
      Type:  defect       |     Status:  new
  Priority:  Normal       |  Milestone:
 Component:  ports        |    Version:  2.1.2
Resolution:               |   Keywords:  mountainlion
      Port:  sshguard     |
--------------------------+--------------------------
Changes (by ryandesign@…):

 * keywords:   => mountainlion
 * owner:  macports-tickets@… => nefar@…
 * cc: pixilla@… (added)


Old description:

> For some reason, Apple has rolled up a lot of logging into syslog,
> including all the ssh stuff. Consequently, there is no
> /var/log/secure.log for sshguard to read. The current sshguard defaults
> results in logs that look like:
>
> Sep 23 03:39:01 foo com.apple.launchd[1] (org.macports.sshguard):
> Throttling respawn: Will start in 10 seconds
> Sep 23 03:39:11 foo.bar.com sshguard[64933]: File '/var/log/secure.log'
> vanished while adding!
> Sep 23 03:39:11 foo com.apple.launchd[1] (org.macports.sshguard):
> Throttling respawn: Will start in 10 seconds
> Sep 23 03:39:21 foo.bar.com sshguard[65369]: File '/var/log/secure.log'
> vanished while adding!
>
> The fix is to remove the line '-l /var/log/secure.log' from
> /opt/local/etc/sshguard/options, but I'm not sure if looking only at
> /var/log/system.log will capture all the stuff sshguard needs for
> filtering.

New description:

 For some reason, Apple has rolled up a lot of logging into syslog,
 including all the ssh stuff. Consequently, there is no /var/log/secure.log
 for sshguard to read. The current sshguard defaults results in logs that
 look like:

 {{{
 Sep 23 03:39:01 foo com.apple.launchd[1] (org.macports.sshguard):
 Throttling respawn: Will start in 10 seconds
 Sep 23 03:39:11 foo.bar.com sshguard[64933]: File '/var/log/secure.log'
 vanished while adding!
 Sep 23 03:39:11 foo com.apple.launchd[1] (org.macports.sshguard):
 Throttling respawn: Will start in 10 seconds
 Sep 23 03:39:21 foo.bar.com sshguard[65369]: File '/var/log/secure.log'
 vanished while adding!
 }}}

 The fix is to remove the line '-l /var/log/secure.log' from
 /opt/local/etc/sshguard/options, but I'm not sure if looking only at
 /var/log/system.log will capture all the stuff sshguard needs for
 filtering.

--

-- 
Ticket URL: <https://trac.macports.org/ticket/36296#comment:1>
MacPorts <http://www.macports.org/>
Ports system for Mac OS