mbox series

[bug#62802,0/4] Add reload action to syslog service.

Message ID 20230413011530.1960-1-maxim.cournoyer@gmail.com
Headers show
Series Add reload action to syslog service. | expand

Message

Maxim Cournoyer April 13, 2023, 1:15 a.m. UTC 
Hi,

This series was motivated by investigations as to why the fail2ban would not
trigger bans although my SSH port was under constant brute force attacks.  It
turns out that it was because by default fail2ban consults /var/log/secure to
for the authentication logs, at least that's how our fail2ban package in Guix
behaves.

So this patch series does two things:

1. It adds a reload action, useful to test without rebooting the graphical
session.

2. It adds the missing auth.info log to /var/log/secure so that a fail2ban
sshd jail works out of the box on Guix System.

Thanks!

Maxim Cournoyer (4):
  services: syslog: Move configuration to /etc/syslog.conf.
  services: syslog: Add a reload action.
  services/syslog: Strip leading white space indent in syslog.conf.
  services: syslog: Log auth.info to /var/log/secure in default
    configuration.

 doc/guix.texi         |  12 ++++
 gnu/services/base.scm | 128 ++++++++++++++++++++++++++----------------
 2 files changed, 92 insertions(+), 48 deletions(-)


base-commit: 0fe2c78cac19acfb46c3bc365075293e51e0e5aa