This is the addition of a syslog(3) security.* top-level category. This

should be used from now on for anything security but not auth-related.
Included are updates for all relevant manpages and also to /etc files,
creating a new /var/log/security. Nothing in the system logs to
/var/log/security yet as of the time of this commit.

Reviewed by:	rgrimes, imp, chris

1 files changed, 4 insertions, 5 deletions

diff --git a/usr.sbin/syslogd/syslog.conf.5 b/usr.sbin/syslogd/syslog.conf.5
index a2ddf5fe85b2..54b3eb217cc3 100644
--- a/usr.sbin/syslogd/syslog.conf.5
+++ b/usr.sbin/syslogd/syslog.conf.5
@@ -30,7 +30,7 @@
 .\" SUCH DAMAGE.
 .\"
 .\"     @(#)syslog.conf.5	8.1 (Berkeley) 6/9/93
-.\"	$Id: syslog.conf.5,v 1.11 1998/07/22 06:15:16 phk Exp $
+.\"	$Id: syslog.conf.5,v 1.12 1998/12/04 06:49:20 jkh Exp $
 .\"
 .Dd June 9, 1993
 .Dt SYSLOG.CONF 5
@@ -98,7 +98,7 @@ The
 .Em facility
 describes the part of the system generating the message, and is one of
 the following keywords: auth, authpriv, cron, daemon, ftp, kern, lpr, mail,
-mark, news, ntp, syslog, user, uucp and local0 through local7.
+mark, news, ntp, syslog, user, uucp, security and local0 through local7.
 These keywords (with the exception of mark) correspond to the
 similar
 .Dq Dv LOG_
@@ -328,9 +328,8 @@ auth.*					|exec /usr/local/sbin/authfilter
 !ftpd
 *.*							/var/log/spoolerr
 
-# Log kernel firewall reports to a separate file
-!ipfw
-*.*							/var/log/ipfw
+# Log all security messages to a separate file.
+security.*						/var/log/security
 .Ed
 .Sh FILES
 .Bl -tag -width /etc/syslog.conf -compact