From: Sebastien Marie <semarie@kapouay.eu.org>
Subject: Re: securtity(8): ignore date changes on devices
To: Stuart Henderson <stu@spacehopper.org>, tech@openbsd.org
Date: Mon, 17 Nov 2025 20:50:32 +0100

Stuart Henderson <stu@spacehopper.org> writes:

> On 2025/11/17 07:10, Sebastien Marie wrote:
>> After running /dev/MAKEDEV (automatically done while upgrading), all
>> nodes in /dev are updated, and it makes security(8) to report block
>> devices changes due to date changes.
>> 
>> With support for extra partitions in disklabel, the list is really huge
>> and it makes the security(8) reports unreadable (too many
>> false-positive changes in the list to be checked).
>
> Suppressing date changes doesn't reduce noise for the recent block
> device changes; the device minor changed too so they'll be listed
> anyway.

I agree, but it would be one time information, and as devices are
changing it is important to notify the change anyway.

The purpose of the diff is more to avoid mail with ~2912 lines at each
upgrade run ({,r}{vnd,sd,cd,...}[0-9] * 52 partitions * 2 lines). The
current output (~896 lines) is already too much for me to read all of
them, and so defeat the purpose of security(8) at all when upgrading.

Thanks.
-- 
Sebastien Marie