Skip to content

HTTPS clone URL

Subversion checkout URL

You can clone with HTTPS or Subversion.

Download ZIP
Browse files

set ENABLE_PSADWATCHD to 'N' by default

  • Loading branch information...
commit 6bd297f59932e07067f450abb0a0336ef566bf31 1 parent 7f06f20
@mrash authored
Showing with 10 additions and 6 deletions.
  1. +9 −5 ChangeLog
  2. +1 −1  psad.conf
View
14 ChangeLog
@@ -1,11 +1,15 @@
-psad-2.2.3 (//2014):
+psad-2.2.3 (03/01/2014):
- Added compatibility with 'upstart' init daemons with assistance from Tim
Kramer. This change adds a new config variable 'ENABLE_PSADWATCHD' that
can be used to disable psadwatchd when deployed with upstart since it
- has built-in process monitoring and restarting capabilities. In
- addition, a new init script located at init-scripts/upstart/psad has
- been added that is compatible with upstart - this script is meant to be
- copied to the /etc/init.d/ directory.
+ has built-in process monitoring and restarting capabilities. By default
+ psadwatchd is not enabled anymore since this variable is set to "N". The
+ reason for this change is that psad is extremely stable and so almost
+ never needs to be restarted in practice, and process monitoring is
+ better provided via other solutions (like upstart) anyway. In addition,
+ a new init script located at init-scripts/upstart/psad.conf has been
+ added that is compatible with upstart - this script is meant to be copied
+ to the /etc/init/ directory.
- (Wolfgang Breyha) Bug fix to allow VLAN interfaces and interface aliases
in IGNORE_INTERFACES. This fixes issue #8 on github.
- Bug fix to not modify /etc/hosts.deny permissions when removing
View
2  psad.conf
@@ -98,7 +98,7 @@ SNORT_SID_STR SID;
### monitoring, it is not necessary to run the psadwatchd daemon. For such
### systems, the following variable can be set to 'N' to disable psadwatched
### altogether.
-ENABLE_PSADWATCHD Y;
+ENABLE_PSADWATCHD N;
### Set the minimum range of ports that must be scanned before
### psad will send an alert. The default is 1 so that at
Please sign in to comment.
Something went wrong with that request. Please try again.