From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from pigeon.gentoo.org ([208.92.234.80] helo=lists.gentoo.org) by finch.gentoo.org with esmtp (Exim 4.60) (envelope-from ) id 1RDLIx-0000Ht-36 for garchives@archives.gentoo.org; Mon, 10 Oct 2011 19:14:27 +0000 Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 6845621C12B; Mon, 10 Oct 2011 19:14:18 +0000 (UTC) Received: from mailout-de.gmx.net (mailout-de.gmx.net [213.165.64.22]) by pigeon.gentoo.org (Postfix) with SMTP id 7D2A621C10A for ; Mon, 10 Oct 2011 19:13:23 +0000 (UTC) Received: (qmail invoked by alias); 10 Oct 2011 19:13:22 -0000 Received: from p5485006D.dip0.t-ipconnect.de (EHLO gmx.net) [84.133.0.109] by mail.gmx.net (mp070) with SMTP; 10 Oct 2011 21:13:22 +0200 X-Authenticated: #20088476 X-Provags-ID: V01U2FsdGVkX197zK8cWVN7eHY4E6Mmjm//tIJlP6vjCKXbM78P6J e3M/AeXQZZocf+ Received: by gmx.net (nbSMTP-1.00) for uid 1001 Meino.Cramer@gmx.de; Mon, 10 Oct 2011 21:13:22 +0200 (CEST) Date: Mon, 10 Oct 2011 21:13:22 +0200 From: meino.cramer@gmx.de To: gentoo-user@lists.gentoo.org Subject: Re: [gentoo-user] Re: transferring contents of /etc/conf.d to the config files Message-ID: <20111010191322.GA4152@solfire> References: <20111010173352.GA2844@solfire> <20111010184517.GB2844@solfire> Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-user@lists.gentoo.org Reply-to: gentoo-user@lists.gentoo.org MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: mutt-ng/devel-r804 (Linux) X-Y-GMX-Trusted: 0 X-Archives-Salt: X-Archives-Hash: b3dd067ca4a24293684571db69507270 Nikos Chantziaras [11-10-10 20:56]: > On 10/10/2011 09:45 PM, meino.cramer@gmx.de wrote: > >Nikos Chantziaras [11-10-10 19:52]: > >>On 10/10/2011 08:33 PM, meino.cramer@gmx.de wrote: > >>>Hi, > >>> > >>>I have read several docs to figure out this...all docs do changes > >>>in /etc/conf.d but I found no hint how to transfer that settings > >>>to the "real" configuration files of the according programs. > >> > >>These *are* real configuration files and you don't need to transfer > >>anything. > >> > >> > > > >The reason I thought, that those settings in /etc/conf.d is due > >to a warning of the rkhunter tool: > > > >[03:23:21] Performing system configuration file checks > >[03:23:21] Info: Starting test name 'system_configs' > >[03:23:21] Checking for SSH configuration file [ Found ] > >[03:23:21] Info: Found SSH configuration file: /etc/ssh/sshd_config > >[03:23:21] Info: Rkhunter option ALLOW_SSH_ROOT_USER set to 'no'. > >[03:23:21] Info: Rkhunter option ALLOW_SSH_PROT_V1 set to '0'. > >[03:23:21] Checking if SSH root access is allowed [ Warning > >] > >[03:23:21] Warning: The SSH configuration option 'PermitRootLogin' has > >not been set. > > The default value may be 'yes', to allow root access. > >[03:23:21] Checking if SSH protocol v1 is allowed [ Warning > >] > >[03:23:21] Warning: The SSH configuration option 'Protocol' has not > >been set. > > The default value may be '2,1', to allow the use of > >protocol version 1. > >[03:23:22] Checking for running syslog daemon [ Not > >found ] > >[03:23:22] Info: The syslog daemon is not running, but a metalog > >daemon has been found. > >[03:23:22] Checking for syslog configuration file [ Not > >found ] > > > >Now I see, that it seems to check simply the wrong file. > > > >I think it would be an idea to patch rkhunter to be more compliant to > >the setup of the gentoo system ?! > > From own experience I know that a lot false warnings of such tools > >dull the sigth on to the real threads... > > It's checking the correct file. Simply edit /etc/ssh/sshd_config to > your liking. /etc/conf.d/ is not for those kind of settings; it's > read-in by Gentoo's init system and other infrastructure. > > Now I am a little more confused... What is the purpose of this file? : /etc/conf.d/sshd with this contents: # /etc/conf.d/sshd: config file for /etc/init.d/sshd # Where is your sshd_config file stored? SSHD_CONFDIR="/etc/ssh" # Any random options you want to pass to sshd. # See the sshd(8) manpage for more info. SSHD_OPTS="" # Pid file to use (needs to be absolute path). #SSHD_PIDFILE="/var/run/sshd.pid" # Path to the sshd binary (needs to be absolute path). #SSHD_BINARY="/usr/sbin/sshd" if /etc/ssh/sshd_config is for configuration of sshd's options...for what purpose is /etc/conf.d/sshd then ? And what files gets overwritten when installing a new version of sshd? Best regards, mcc