[pkgsrc/trunk]: pkgsrc/security/sshguard Improve default options for SSHGuard...

[tron <tron%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/bcacbd7e7f8c
branches:  trunk
changeset: 637331:bcacbd7e7f8c
user:      tron <tron%pkgsrc.org@localhost>
date:      Sun Jul 27 08:32:06 2014 +0000

description:
Improve default options for SSHGuard. "-f 100:/var/run/sshd.pid" in
particular affects the detection rate badly.

Bump package revision.

diffstat:

 security/sshguard/Makefile          |  3 ++-
 security/sshguard/files/sshguard.sh |  8 +++++---
 2 files changed, 7 insertions(+), 4 deletions(-)

diffs (43 lines):

diff -r 1a72b050ac0f -r bcacbd7e7f8c security/sshguard/Makefile
--- a/security/sshguard/Makefile        Sun Jul 27 08:29:45 2014 +0000
+++ b/security/sshguard/Makefile        Sun Jul 27 08:32:06 2014 +0000
@@ -1,6 +1,7 @@
-# $NetBSD: Makefile,v 1.1 2014/07/26 19:57:44 tron Exp $
+# $NetBSD: Makefile,v 1.2 2014/07/27 08:32:06 tron Exp $
 
 DISTNAME=      sshguard-1.5
+PKGREVISION=   1
 CATEGORIES=    security
 MASTER_SITES=  ${MASTER_SITE_SOURCEFORGE:=sshguard/}
 EXTRACT_SUFX=  .tar.bz2
diff -r 1a72b050ac0f -r bcacbd7e7f8c security/sshguard/files/sshguard.sh
--- a/security/sshguard/files/sshguard.sh       Sun Jul 27 08:29:45 2014 +0000
+++ b/security/sshguard/files/sshguard.sh       Sun Jul 27 08:32:06 2014 +0000
@@ -1,6 +1,6 @@
 #!@RCD_SCRIPTS_SHELL@
 #
-# $NetBSD: sshguard.sh,v 1.1 2014/07/26 19:57:44 tron Exp $
+# $NetBSD: sshguard.sh,v 1.2 2014/07/27 08:32:06 tron Exp $
 #
 # PROVIDE: sshguard
 # REQUIRE: DAEMON
@@ -14,7 +14,7 @@
 rcvar=$name
 command="@PREFIX@/sbin/${name}"
 pidfile="@VARBASE@/run/${name}.pid"
-sshguard_flags="-f 100:@VARBASE@/run/sshd.pid -l /var/log/authlog"
+sshguard_flags="-b @VARBASE@/db/sshguard-blacklist.db -l /var/log/authlog -l /var/log/maillog"
 command_args="-i $pidfile"
 start_cmd=sshguard_start
 
@@ -31,7 +31,9 @@
 else
        case ${1:-start} in
        start)
-               sshguard_start
+               if [ -x ${command} ]; then
+                       sshguard_start
+               fi
                ;;
        stop)
                if [ -f ${pidfile} ]; then