Your message dated Tue, 30 Jan 2007 16:17:04 +0000
with message-id <[EMAIL PROTECTED]>
and subject line Bug#407734: fixed in logcheck 1.2.54
has caused the attached Bug report to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere. Please contact me immediately.)
Debian bug tracking system administrator
(administrator, Debian Bugs database)
--- Begin Message ---
Package: logcheck-database
Version: 1.2.52
Severity: normal
The first rule in violations.d/smartd tries to parse the SMART value
of attribute 194 (temperature) to see if it is below 55.
This behaviour isn't very sensible though - in a default installation
of smartmontools on Debian, smartd reports the normalized value for
all attributes in the logfile. The relation of normalized values to
the raw attribute is vendor-specific, so there is no sensible threshold
that logcheck could use (smartd can though, it knows the theshold
for failure set by the vendor).
In my case this misinterpretation means that I'll get a security violation
mail every time my hard drives change their temperature.
-- System Information:
Debian Release: 4.0
APT prefers testing
APT policy: (500, 'testing')
Architecture: i386 (i686)
Shell: /bin/sh linked to /bin/bash
Kernel: Linux 2.6.16.37
Locale: LANG=C, LC_CTYPE=de_DE (charmap=ISO-8859-1)
Versions of packages logcheck-database depends on:
ii debconf [debconf-2.0] 1.5.11 Debian configuration management sy
logcheck-database recommends no packages.
-- debconf information:
* logcheck-database/rules-directories-note:
logcheck-database/standard-rename-note:
logcheck-database/conffile-cleanup: false
--- End Message ---
--- Begin Message ---
Source: logcheck
Source-Version: 1.2.54
We believe that the bug you reported is fixed in the latest version of
logcheck, which is due to be installed in the Debian FTP archive:
logcheck-database_1.2.54_all.deb
to pool/main/l/logcheck/logcheck-database_1.2.54_all.deb
logcheck_1.2.54.dsc
to pool/main/l/logcheck/logcheck_1.2.54.dsc
logcheck_1.2.54.tar.gz
to pool/main/l/logcheck/logcheck_1.2.54.tar.gz
logcheck_1.2.54_all.deb
to pool/main/l/logcheck/logcheck_1.2.54_all.deb
logtail_1.2.54_all.deb
to pool/main/l/logcheck/logtail_1.2.54_all.deb
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [EMAIL PROTECTED],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
martin f. krafft <[EMAIL PROTECTED]> (supplier of updated logcheck package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [EMAIL PROTECTED])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.7
Date: Tue, 30 Jan 2007 15:26:22 +0000
Source: logcheck
Binary: logcheck logtail logcheck-database
Architecture: source all
Version: 1.2.54
Distribution: unstable
Urgency: low
Maintainer: Debian logcheck Team <[email protected]>
Changed-By: martin f. krafft <[EMAIL PROTECTED]>
Description:
logcheck - mails anomalies in the system logfiles to the administrator
logcheck-database - database of system log rules for the use of log checkers
logtail - Print log file lines that have not been read
Closes: 407009 407087 407642 407734 407777 407830 408123 408444 408557 408559
408700 408764 408890 408901
Changes:
logcheck (1.2.54) unstable; urgency=low
.
* ignore.d.server/dovecot: also ignore local logins, which are "secured",
not "TLS". Thanks to Marco Nenciarini for the patch (closes: #407642).
.
* ignore.d.workstation/kernel: ignore all kinds of input devices, not just
Logitech mice; thanks to Dave Vehrs for the patch (closes: #407087).
* ignore.d.server/kernel: patch by Elmar Hoffmann to filter messages by
3ware driver (closes: #408764).
.
* ignore.d.server/postfix: make anvil filter rules ipv6 compliant.
* violations.ignore.d/logcheck-postfix: ignore deferred messages after
rewriting the address (orig_to in use).
* violations.ignore.d/logcheck-postfix: ignore plain informational messages
even if they contain some of the violations.d/logcheck words.
* ignore.d.server/postfix: ignore messages about successful deliveries to
IMail servers (and possibly others; closes: #407777).
* ignore.d.server/postfix: patch by Armin Berres to filter information
messages from postfix+mysql (closes: #408444).
* ignore.d.server/postfix: patch by Armin Berres to filter policyd-weight
messages (closes: #408700).
* ignore.d.server/postfix: ignore messages about numeric MX results by smtpd
as well.
* violations.ignore.d/logcheck-postfix: ignore lmtp message when content
filter muted DSN.
* ignore.d.server/postfix: ignore message due to timeout receiving the
initial server greeting.
.
* ignore.d.server/openvpn: ignore messages related to client-side routes and
client-config-dir.
* ignore.d.server/openvpn, violations.ignore.d/logcheck-openvpn: fix up
a bunch of the rules for various stages of the connections.
.
* ignore.d.server/ssh: ignore messages about invalid users even with <!>'"
characters in the usernames.
* ignore.d.server/ssh: ignore messages related to Allow/DenyUsers
(closes: #407009).
* violations.ignore.d/logcheck-ssh: ignore more PAM authentication failure
messages.
.
* ignore.d.server/courier, violations.ignore.d/loghceck-courier: ignore
SSL/TLS connection errors for all components.
.
* ignore.d.workstation/logcheck, ignore.d.server/cracklib: moved cracklib
rules to server level (closes: #408557).
.
* ignore.d.server/epmd: ignore information output from erlang-base daemon
epmd; thanks Armin Berres for the patch (closes: #408559).
.
* ignore.d.server/spamd: improve rules for corner cases, thanks to Armin
Berres for his help.
.
* violations.d/smartd: no longer elevate temperature messages as smartd does
that already (closes: #407734).
* ignore.d.server/smartd: ignore raw values in attribute change messages;
thanks to Elmar Hoffmann (closes: #408890).
* ignore.d.server/smartd: honour exclamation mark for max value in attribute
change value; thanks to Elmar Hoffmann (closes: #408901).
.
* ignore.d.server/squid: ignore vary store marker object mismatches.
.
* Added Galician debconf translation by Jacobo Tarrio (closes: #408123).
.
* Updated Czech debconf translation; thanks Miroslav Kure (closes: #407830).
Files:
42aeb490d2330f9260fabafe43c73326 811 admin optional logcheck_1.2.54.dsc
bbb6fce8987503d7677441d7154fb598 141094 admin optional logcheck_1.2.54.tar.gz
06bcb4d200601b29ef713f6cbeaf3c8a 60346 admin optional logcheck_1.2.54_all.deb
d3d0766fde9558667119ac86e7475904 95932 admin optional
logcheck-database_1.2.54_all.deb
e5a8020db5097bbc3d52f82609f96bbe 42452 admin optional logtail_1.2.54_all.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
iD8DBQFFv2dpIgvIgzMMSnURAosqAJ9QPMtvw+OKsln0+j3elxepREVMJwCfZ3HH
V66njKgK/hFoSmPILCXpljw=
=9I9S
-----END PGP SIGNATURE-----
--- End Message ---
