increase lifetime of wtmp, since it is annoyingly short
discussed with millert

wtmp doesn't need to reload syslogd.

From Anton Kasimov <kasimov <dot> an <at> gmail <dot> com>
OK bluhm@

Remove user uucp and group news from base.

increase permitted sizes for daemon and messages. i overflow them too
frequently for my taste, and disk is cheap.
ok deraadt millert

Allow group wheel to read the mail log. OK gilles@ sthen@

Add httpd default log files to the rotation.
ok reyk@ (who suggested these lines a while ago)

usr.sbin

Add nginx default log files to the rotation.

ok jung@ stephan@
tweaks and ok sthen@

ppp.log was just for ppp(8)

Don't compress wtmp by default; the tools dealing with this log are
cumbersome to use with compressed files. Idea from ian@ following
a discussion started with a diff to last(1) from by Peter Philipp.

ok martynas@ mk@ millert@

zap superfluous newline. ok sthen@

Get rid of pflogd.pid because the privsep child cannot delete the pidfile;
use pkill(1) in /etc/newsyslog.conf instead
together with otto and suggestions from tedu

- enable weekly login accounting if LOGINACCOUNTING is set to 1 in the
environment so that it matches the ROOTBACKUP and CHECKFILESYSTEMS way
of doing things
- make the sort command use "-k" instead of the deprecated "+" option
(idea from mk@)
- rotate /var/log/wtmp every week just after weekly ac(8) completes

ok mk@

indentation whitespace nits

sync the field names with what's in the man page;
from Kurt Seifried;

ok millert@

finally remove the sample lines for httpd, causes problems as soon as
3rd party, chroot-unaware modules are loaded, if not sooner
ok millert@

missed one in the comment

Use ':' to separate login name from group name to match updated docs.

Install /var/log/message 644 since the beginning and change back
newsyslog.conf to reflect that. More people seem to prefer that,
and it can be easily changed if you like it another way.
millert, fgs and others verbally agree

/var/log/messages is mode 640 not 644 by default; root@shopip.com

space nits

fix apache suggestion to leave files with root perms, rather than
changing to www.www - leaving them more easily modified by a problem
in a cgi or httpd. Also send SIGUSR1 for a graceful restart as apache
expects. noticed by mpech@, ok millert@

aculog should be writable by group dialer for tip/cu users

pflog is a binary file, ok jakob@

I forgot to list the pid file

my initial guess at pflog rollover config

Remove ipf. Darren Reed has interpreted his (old, new, whichever)
licence in a way that makes ipf not free according to the rules we
established over 5 years ago, at www.openbsd.org/goals.html (and those
same basic rules govern the other *BSD projects too). Specifically,
Darren says that modified versions are not permitted. But software
which OpenBSD uses and redistributes must be free to all (be they
people or companies), for any purpose they wish to use it, including
modification, use, peeing on, or even integration into baby mulching
machines or atomic bombs to be dropped on Australia. Furthermore, we
know of a number of companies using ipf with modification like us, who
are now in the same situation, and we hope that some of them will work
with us to fill this gap that now exists in OpenBSD (temporarily, we
hope).

Remove /var/run/ipmon.pid and add a comment saying when the user may
need to add it.

Change ipflog entry; joe@nall.com

Don't rotate kerberos logs. From: mattiasa@stacken.kth.se

add web ssl logs to example for http rotating

Add commented out entry to rotate www logs

rotate authlog and secure entries after 1 week

Add /var/log/ppp.log

add ipflog

Sync'd with new syslog.conf changes

sync & label

branches: 1.1.1;
Initial revision

wtmp doesn't need to reload syslogd.

From Anton Kasimov <kasimov <dot> an <at> gmail <dot> com>
OK bluhm@

Remove user uucp and group news from base.

increase permitted sizes for daemon and messages. i overflow them too
frequently for my taste, and disk is cheap.
ok deraadt millert

Allow group wheel to read the mail log. OK gilles@ sthen@

Add httpd default log files to the rotation.
ok reyk@ (who suggested these lines a while ago)

usr.sbin

Add nginx default log files to the rotation.

ok jung@ stephan@
tweaks and ok sthen@

ppp.log was just for ppp(8)

Don't compress wtmp by default; the tools dealing with this log are
cumbersome to use with compressed files. Idea from ian@ following
a discussion started with a diff to last(1) from by Peter Philipp.

ok martynas@ mk@ millert@

zap superfluous newline. ok sthen@

Get rid of pflogd.pid because the privsep child cannot delete the pidfile;
use pkill(1) in /etc/newsyslog.conf instead
together with otto and suggestions from tedu

- enable weekly login accounting if LOGINACCOUNTING is set to 1 in the
environment so that it matches the ROOTBACKUP and CHECKFILESYSTEMS way
of doing things
- make the sort command use "-k" instead of the deprecated "+" option
(idea from mk@)
- rotate /var/log/wtmp every week just after weekly ac(8) completes

ok mk@

indentation whitespace nits

sync the field names with what's in the man page;
from Kurt Seifried;

ok millert@

finally remove the sample lines for httpd, causes problems as soon as
3rd party, chroot-unaware modules are loaded, if not sooner
ok millert@

missed one in the comment

Use ':' to separate login name from group name to match updated docs.

Install /var/log/message 644 since the beginning and change back
newsyslog.conf to reflect that. More people seem to prefer that,
and it can be easily changed if you like it another way.
millert, fgs and others verbally agree

/var/log/messages is mode 640 not 644 by default; root@shopip.com

space nits

fix apache suggestion to leave files with root perms, rather than
changing to www.www - leaving them more easily modified by a problem
in a cgi or httpd. Also send SIGUSR1 for a graceful restart as apache
expects. noticed by mpech@, ok millert@

aculog should be writable by group dialer for tip/cu users

pflog is a binary file, ok jakob@

I forgot to list the pid file

my initial guess at pflog rollover config

Remove ipf. Darren Reed has interpreted his (old, new, whichever)
licence in a way that makes ipf not free according to the rules we
established over 5 years ago, at www.openbsd.org/goals.html (and those
same basic rules govern the other *BSD projects too). Specifically,
Darren says that modified versions are not permitted. But software
which OpenBSD uses and redistributes must be free to all (be they
people or companies), for any purpose they wish to use it, including
modification, use, peeing on, or even integration into baby mulching
machines or atomic bombs to be dropped on Australia. Furthermore, we
know of a number of companies using ipf with modification like us, who
are now in the same situation, and we hope that some of them will work
with us to fill this gap that now exists in OpenBSD (temporarily, we
hope).

Remove /var/run/ipmon.pid and add a comment saying when the user may
need to add it.

Change ipflog entry; joe@nall.com

Don't rotate kerberos logs. From: mattiasa@stacken.kth.se

add web ssl logs to example for http rotating

Add commented out entry to rotate www logs

rotate authlog and secure entries after 1 week

Add /var/log/ppp.log

add ipflog

Sync'd with new syslog.conf changes

sync & label

branches: 1.1.1;
Initial revision

Remove user uucp and group news from base.

increase permitted sizes for daemon and messages. i overflow them too
frequently for my taste, and disk is cheap.
ok deraadt millert

Allow group wheel to read the mail log. OK gilles@ sthen@

Add httpd default log files to the rotation.
ok reyk@ (who suggested these lines a while ago)

usr.sbin

Add nginx default log files to the rotation.

ok jung@ stephan@
tweaks and ok sthen@

ppp.log was just for ppp(8)

Don't compress wtmp by default; the tools dealing with this log are
cumbersome to use with compressed files. Idea from ian@ following
a discussion started with a diff to last(1) from by Peter Philipp.

ok martynas@ mk@ millert@

zap superfluous newline. ok sthen@

Get rid of pflogd.pid because the privsep child cannot delete the pidfile;
use pkill(1) in /etc/newsyslog.conf instead
together with otto and suggestions from tedu

- enable weekly login accounting if LOGINACCOUNTING is set to 1 in the
environment so that it matches the ROOTBACKUP and CHECKFILESYSTEMS way
of doing things
- make the sort command use "-k" instead of the deprecated "+" option
(idea from mk@)
- rotate /var/log/wtmp every week just after weekly ac(8) completes

ok mk@

indentation whitespace nits

sync the field names with what's in the man page;
from Kurt Seifried;

ok millert@

finally remove the sample lines for httpd, causes problems as soon as
3rd party, chroot-unaware modules are loaded, if not sooner
ok millert@

missed one in the comment

Use ':' to separate login name from group name to match updated docs.

Install /var/log/message 644 since the beginning and change back
newsyslog.conf to reflect that. More people seem to prefer that,
and it can be easily changed if you like it another way.
millert, fgs and others verbally agree

/var/log/messages is mode 640 not 644 by default; root@shopip.com

space nits

fix apache suggestion to leave files with root perms, rather than
changing to www.www - leaving them more easily modified by a problem
in a cgi or httpd. Also send SIGUSR1 for a graceful restart as apache
expects. noticed by mpech@, ok millert@

aculog should be writable by group dialer for tip/cu users

pflog is a binary file, ok jakob@

I forgot to list the pid file

my initial guess at pflog rollover config

Remove ipf. Darren Reed has interpreted his (old, new, whichever)
licence in a way that makes ipf not free according to the rules we
established over 5 years ago, at www.openbsd.org/goals.html (and those
same basic rules govern the other *BSD projects too). Specifically,
Darren says that modified versions are not permitted. But software
which OpenBSD uses and redistributes must be free to all (be they
people or companies), for any purpose they wish to use it, including
modification, use, peeing on, or even integration into baby mulching
machines or atomic bombs to be dropped on Australia. Furthermore, we
know of a number of companies using ipf with modification like us, who
are now in the same situation, and we hope that some of them will work
with us to fill this gap that now exists in OpenBSD (temporarily, we
hope).

Remove /var/run/ipmon.pid and add a comment saying when the user may
need to add it.

Change ipflog entry; joe@nall.com

Don't rotate kerberos logs. From: mattiasa@stacken.kth.se

add web ssl logs to example for http rotating

Add commented out entry to rotate www logs

rotate authlog and secure entries after 1 week

Add /var/log/ppp.log

add ipflog

Sync'd with new syslog.conf changes

sync & label

branches: 1.1.1;
Initial revision