Change the default syslog facility from local2 to authpriv (or auth

if the operating system doesn't support authpriv).
This commit is contained in:
Todd C. Miller
2010-07-22 17:50:21 -04:00
parent 481a389e6e
commit 8660b5ea35
7 changed files with 78 additions and 45 deletions

67
configure vendored
View File

@@ -1690,7 +1690,7 @@ Optional Packages:
--with-project enable Solaris project support
--without-lecture don't print lecture for first-time sudoer
--with-logging log via syslog, file, or both
--with-logfac syslog facility to log with (default is "local2")
--with-logfac syslog facility to log with (default is "auth")
--with-goodpri syslog priority for commands (def is "notice")
--with-badpri syslog priority for failures (def is "alert")
--with-logpath path to the sudo log file
@@ -2794,7 +2794,7 @@ sudo_umask=0022
passprompt="Password:"
long_otp_prompt=off
lecture=once
logfac=local2
logfac=auth
goodpri=notice
badpri=alert
loglen=80
@@ -4170,8 +4170,6 @@ $as_echo "syslog" >&6; }
fi
{ $as_echo "$as_me:${as_lineno-$LINENO}: checking which syslog facility sudo should log with" >&5
$as_echo_n "checking which syslog facility sudo should log with... " >&6; }
# Check whether --with-logfac was given.
if test "${with_logfac+set}" = set; then :
@@ -4188,13 +4186,6 @@ esac
fi
cat >>confdefs.h <<_ACEOF
#define LOGFAC "$logfac"
_ACEOF
{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $logfac" >&5
$as_echo "$logfac" >&6; }
{ $as_echo "$as_me:${as_lineno-$LINENO}: checking at which syslog priority to log commands" >&5
$as_echo_n "checking at which syslog priority to log commands... " >&6; }
@@ -6572,13 +6563,13 @@ if test "${lt_cv_nm_interface+set}" = set; then :
else
lt_cv_nm_interface="BSD nm"
echo "int some_variable = 0;" > conftest.$ac_ext
(eval echo "\"\$as_me:6575: $ac_compile\"" >&5)
(eval echo "\"\$as_me:6566: $ac_compile\"" >&5)
(eval "$ac_compile" 2>conftest.err)
cat conftest.err >&5
(eval echo "\"\$as_me:6578: $NM \\\"conftest.$ac_objext\\\"\"" >&5)
(eval echo "\"\$as_me:6569: $NM \\\"conftest.$ac_objext\\\"\"" >&5)
(eval "$NM \"conftest.$ac_objext\"" 2>conftest.err > conftest.out)
cat conftest.err >&5
(eval echo "\"\$as_me:6581: output\"" >&5)
(eval echo "\"\$as_me:6572: output\"" >&5)
cat conftest.out >&5
if $GREP 'External.*some_variable' conftest.out > /dev/null; then
lt_cv_nm_interface="MS dumpbin"
@@ -7783,7 +7774,7 @@ ia64-*-hpux*)
;;
*-*-irix6*)
# Find out which ABI we are using.
echo '#line 7786 "configure"' > conftest.$ac_ext
echo '#line 7777 "configure"' > conftest.$ac_ext
if { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$ac_compile\""; } >&5
(eval $ac_compile) 2>&5
ac_status=$?
@@ -9175,11 +9166,11 @@ else
-e 's:.*FLAGS}\{0,1\} :&$lt_compiler_flag :; t' \
-e 's: [^ ]*conftest\.: $lt_compiler_flag&:; t' \
-e 's:$: $lt_compiler_flag:'`
(eval echo "\"\$as_me:9178: $lt_compile\"" >&5)
(eval echo "\"\$as_me:9169: $lt_compile\"" >&5)
(eval "$lt_compile" 2>conftest.err)
ac_status=$?
cat conftest.err >&5
echo "$as_me:9182: \$? = $ac_status" >&5
echo "$as_me:9173: \$? = $ac_status" >&5
if (exit $ac_status) && test -s "$ac_outfile"; then
# The compiler can only warn and ignore the option if not recognized
# So say no if there are warnings other than the usual output.
@@ -9514,11 +9505,11 @@ else
-e 's:.*FLAGS}\{0,1\} :&$lt_compiler_flag :; t' \
-e 's: [^ ]*conftest\.: $lt_compiler_flag&:; t' \
-e 's:$: $lt_compiler_flag:'`
(eval echo "\"\$as_me:9517: $lt_compile\"" >&5)
(eval echo "\"\$as_me:9508: $lt_compile\"" >&5)
(eval "$lt_compile" 2>conftest.err)
ac_status=$?
cat conftest.err >&5
echo "$as_me:9521: \$? = $ac_status" >&5
echo "$as_me:9512: \$? = $ac_status" >&5
if (exit $ac_status) && test -s "$ac_outfile"; then
# The compiler can only warn and ignore the option if not recognized
# So say no if there are warnings other than the usual output.
@@ -9619,11 +9610,11 @@ else
-e 's:.*FLAGS}\{0,1\} :&$lt_compiler_flag :; t' \
-e 's: [^ ]*conftest\.: $lt_compiler_flag&:; t' \
-e 's:$: $lt_compiler_flag:'`
(eval echo "\"\$as_me:9622: $lt_compile\"" >&5)
(eval echo "\"\$as_me:9613: $lt_compile\"" >&5)
(eval "$lt_compile" 2>out/conftest.err)
ac_status=$?
cat out/conftest.err >&5
echo "$as_me:9626: \$? = $ac_status" >&5
echo "$as_me:9617: \$? = $ac_status" >&5
if (exit $ac_status) && test -s out/conftest2.$ac_objext
then
# The compiler can only warn and ignore the option if not recognized
@@ -9674,11 +9665,11 @@ else
-e 's:.*FLAGS}\{0,1\} :&$lt_compiler_flag :; t' \
-e 's: [^ ]*conftest\.: $lt_compiler_flag&:; t' \
-e 's:$: $lt_compiler_flag:'`
(eval echo "\"\$as_me:9677: $lt_compile\"" >&5)
(eval echo "\"\$as_me:9668: $lt_compile\"" >&5)
(eval "$lt_compile" 2>out/conftest.err)
ac_status=$?
cat out/conftest.err >&5
echo "$as_me:9681: \$? = $ac_status" >&5
echo "$as_me:9672: \$? = $ac_status" >&5
if (exit $ac_status) && test -s out/conftest2.$ac_objext
then
# The compiler can only warn and ignore the option if not recognized
@@ -12041,7 +12032,7 @@ else
lt_dlunknown=0; lt_dlno_uscore=1; lt_dlneed_uscore=2
lt_status=$lt_dlunknown
cat > conftest.$ac_ext <<_LT_EOF
#line 12044 "configure"
#line 12035 "configure"
#include "confdefs.h"
#if HAVE_DLFCN_H
@@ -12137,7 +12128,7 @@ else
lt_dlunknown=0; lt_dlno_uscore=1; lt_dlneed_uscore=2
lt_status=$lt_dlunknown
cat > conftest.$ac_ext <<_LT_EOF
#line 12140 "configure"
#line 12131 "configure"
#include "confdefs.h"
#if HAVE_DLFCN_H
@@ -13491,6 +13482,32 @@ $as_echo "not found" >&6; }
fi
fi
{ $as_echo "$as_me:${as_lineno-$LINENO}: checking which syslog facility sudo should log with" >&5
$as_echo_n "checking which syslog facility sudo should log with... " >&6; }
if test X"$with_logfac" = X""; then
cat confdefs.h - <<_ACEOF >conftest.$ac_ext
/* end confdefs.h. */
#include <syslog.h>
int
main ()
{
int i = LOG_AUTHPRIV; (void)i;
;
return 0;
}
_ACEOF
if ac_fn_c_try_compile "$LINENO"; then :
logfac=authpriv
fi
rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
fi
cat >>confdefs.h <<_ACEOF
#define LOGFAC "$logfac"
_ACEOF
{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $logfac" >&5
$as_echo "$logfac" >&6; }
{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for ANSI C header files" >&5
$as_echo_n "checking for ANSI C header files... " >&6; }
if test "${ac_cv_header_stdc+set}" = set; then :