Subject: Re: RFC: securing output of /etc/security
To: Jason White <jdwhite@menelos.com>
From: Ben Collver <collver@peak.org>
List: netbsd-users
Date: 05/10/2006 08:18:57
On Wed, May 10, 2006 at 06:00:57AM +0000, Jason White wrote:
> On several occasions I've found that the output of /etc/security contains
> information that I do not wish to have mailed cleartext. I've modified
> /etc/daily to implement a scheme for PGP encrypting the daily insecurity
> output. Two new options in /etc/daily.conf enable this functionality:
>
> encrypt_security=YES
> SECURE_RECIPIENTS="jdwhite@menelos.com other@address.org"
I like this idea, I do something very similar on my home network, minus
the mpack. What about having a shell variable for GPG command and
arguments? (So a person could use PGP if that's what they have.)
Cheers,
Ben