phobos.autonlab.org daily insecurity output

[Charlie Root]

Running security(8):

Checking configuration files:
/etc/hostname.em0 is world readable.

======
/etc/dhcpd.conf diffs (-OLD  +NEW)
======
--- /dev/null	Thu Oct  3 01:36:13 2019
+++ /etc/dhcpd.conf	Wed Oct  2 15:09:42 2019
@@ -0,0 +1,41 @@
+#       $OpenBSD: dhcpd.conf,v 1.6 2016/03/24 22:36:39 root Exp $
+#
+# DHCP server options.
+# See dhcpd.conf(5) and dhcpd(8) for more information.
+#
+
+# Network:              192.168.3.0/255.255.255.0
+# Domain name:          bagdala2.net
+# Name servers:         192.168.3.1
+# Default router:       192.168.3.1
+# Addresses:            192.168.3.2 - 192.168.3.16
+#
+option  domain-name "barnabas.autonlab.org";
+option  domain-name-servers 8.8.8.8, 208.67.222.222;
+
+subnet 192.168.3.0 netmask 255.255.255.0 {
+        option routers 192.168.3.1;
+
+        range 192.168.3.3 192.168.3.9;
+
+        host compute-0-0 {
+                hardware ethernet 00:25:90:0C:08:84;
+                fixed-address 192.168.3.10;
+        }
+        host compute-0-1 {
+                hardware ethernet 00:25:90:0D:91:24;
+                fixed-address 192.168.3.11;
+        }
+        host compute-0-2 {
+                hardware ethernet 00:25:90:0C:87:22;
+                fixed-address 192.168.3.12;
+        }
+        host compute-0-3 {
+                hardware ethernet 00:25:90:0C:86:D4;
+                fixed-address 192.168.3.13;
+        }
+        host guarddog {
+                hardware ethernet 00:25:90:0C:87:20;
+                fixed-address 192.168.3.15;
+        }
+}


======
/etc/hostname.em0 new SHA-256 checksum
======
NEW: fd087b338a3f86b1dd53dce92cb9566fb829e708b87dd314bc0f2a891d60466c

======
/etc/pf.conf diffs (-OLD  +NEW)
======
--- /var/backups/etc_pf.conf.current	Thu May 30 01:35:40 2019
+++ /etc/pf.conf	Wed Oct  2 18:49:09 2019
@@ -64,3 +64,8 @@
 
 # Needed for IPMI 
 pass on em1
+
+# Only temporary needed for Barnabas.
+pass in on egress inet proto tcp to (egress) port {ssh} rdr-to 192.168.3.15
+pass on em0 inet proto tcp from any to any port $tcp_services
+pass on em0 inet proto udp from any to any port $udp_services


======
/etc/rc.conf.local diffs (-OLD  +NEW)
======
--- /var/backups/etc_rc.conf.local.current	Wed May 15 01:35:43 2019
+++ /etc/rc.conf.local	Wed Oct  2 14:03:54 2019
@@ -4,3 +4,6 @@
 snmpd_flags=
 syslogd_flags="-h"
 unbound_flags=
+
+# Temporary needed for Barnabas
+dhcpd_flags="em0"