Index: newsyslog.conf =================================================================== RCS file: /cvs/src/etc/newsyslog.conf,v diff -u -p -r1.38 newsyslog.conf --- newsyslog.conf 5 Jan 2022 18:34:23 -0000 1.38 +++ newsyslog.conf 5 May 2025 23:56:34 -0000 @@ -12,6 +12,6 @@ /var/log/secure 600 7 * 168 Z /var/log/wtmp 644 7 * $M1D4 B "" /var/log/xferlog 640 7 250 * Z -/var/log/pflog 600 3 250 * ZB "pkill -HUP -u root -U root -t - -x pflogd" +/var/log/pflog 660 3 250 * ZB "rcctl reload pflogd > /dev/null" /var/www/logs/access.log 644 4 * $W0 Z "pkill -USR1 -u root -U root -x httpd" /var/www/logs/error.log 644 7 250 * Z "pkill -USR1 -u root -U root -x httpd" Index: rc.d/pflogd =================================================================== RCS file: /cvs/src/etc/rc.d/pflogd,v diff -u -p -r1.3 pflogd --- rc.d/pflogd 11 Jan 2018 19:52:12 -0000 1.3 +++ rc.d/pflogd 5 May 2025 23:56:34 -0000 @@ -2,23 +2,31 @@ # # $OpenBSD: pflogd,v 1.3 2018/01/11 19:52:12 rpe Exp $ -daemon="/sbin/pflogd" +PFLOGIF=pflog0 +LOGFILE=/var/log/pflog -. /etc/rc.d/rc.subr +daemon="/usr/sbin/bpflogd" +daemon_flags="-f ${LOGFILE} -i ${PFLOGIF} -s 160" -pexp="pflogd: \[priv\]" +. /etc/rc.d/rc.subr rc_pre() { if pfctl -si | grep -q Enabled; then - ifconfig pflog0 create - if ifconfig pflog0; then - ifconfig pflog0 up + ifconfig ${PFLOGIF} create + if ifconfig ${PFLOGIF}; then + ifconfig ${PFLOGIF} up else return 1 fi else return 1 fi + + if [[ ! -f "${LOGFILE}" ]]; then + touch "${LOGFILE}" + fi + chown root:_pflogd "${LOGFILE}" + chmod 0660 "${LOGFILE}" } rc_cmd $1