Subject: Re: RFC: securing output of /etc/security
To: Jason White <jdwhite@menelos.com>
From: Ben Collver <collver@peak.org>
List: netbsd-users
Date: 05/10/2006 08:18:57
On Wed, May 10, 2006 at 06:00:57AM +0000, Jason White wrote:
> On several occasions I've found that the output of /etc/security contains 
> information that I do not wish to have mailed cleartext.  I've modified 
> /etc/daily to implement a scheme for PGP encrypting the daily insecurity 
> output.  Two new options in /etc/daily.conf enable this functionality:
> 
>   encrypt_security=YES
>   SECURE_RECIPIENTS="jdwhite@menelos.com other@address.org"

I like this idea, I do something very similar on my home network, minus
the mpack.  What about having a shell variable for GPG command and
arguments?  (So a person could use PGP if that's what they have.)

Cheers,

Ben