Your message dated Thu, 05 Aug 2010 16:48:42 +0000
with message-id <[email protected]>
and subject line Bug#540807: fixed in rsyslog 4.6.4-1
has caused the Debian Bug report #540807,
regarding rsyslog: program name filter ! in the configuration cannot be reset
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
540807: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=540807
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: rsyslog
Version: 4.2.0-1
Severity: normal
I tried to use the !-syntax in a configuration file under /etc/rsyslod.d/
for filtering a section for a program name. After the section I wanted to
reset it to unfiltered mode using a line with just "!*" as documented in
the manual. This turned out to fail and filter out any rule coming after
that line.
The lines I used in my configuration look like this:
!firewall
*.* -/var/log/firewall.log
*.crit /dev/tty11;NF_r
& ~
*.err /dev/tty11;NF_o
& ~
*.warning /dev/tty11;NF_y
& ~
*.* ~
!*
When I run rsyslogd with the -d option in debugging mode and sending test
data to log with logger, it outputs a lot of lines saying that the
programname filter '' does not match the current log message's programname,
which looks like "!*" does not reset the filter to match anything but
instead to match the empty string:
7819.014934904:main queue:Reg/w0: main queue: entry deleted, state 0, size
now 0 entries
7819.015089940:main queue:Reg/w0: programname filter 'firewall' does not
match 'logger'
7819.015205378:main queue:Reg/w0: programname filter 'firewall' does not
match 'logger'
7819.015334295:main queue:Reg/w0: programname filter 'firewall' does not
match 'logger'
7819.015448652:main queue:Reg/w0: programname filter 'firewall' does not
match 'logger'
7819.015560690:main queue:Reg/w0: programname filter 'firewall' does not
match 'logger'
7819.015675167:main queue:Reg/w0: programname filter '' does not
match 'logger'
7819.015790364:main queue:Reg/w0: programname filter '' does not
match 'logger'
7819.015903561:main queue:Reg/w0: programname filter '' does not
match 'logger'
and so forth. The first 5 failing matches are correct, since that are the
rules of my section which are only to log when the programname
is 'firewall'. The other ones are the standard rules from /etc/rsyslog.conf
effectively disabled by the "!*" line.
One could suggest that the workaround would be to put all ! filter rules at
the end of the configuration, but that would mean changing
the /etc/rsyslog.conf file and I'd rather put all my configuration
into /etc/rsyslod.d/. Also, another package wishing to plug in
configuration to rsyslog using ! must not change the supplied config file.
Regards,
Niels Böhm
-- System Information:
Debian Release: squeeze/sid
APT prefers testing-proposed-updates
APT policy: (930, 'testing-proposed-updates'), (930, 'testing'),
(830, 'proposed-updates'), (830, 'stable'), (430, 'unstable')
Architecture: amd64 (x86_64)
Kernel: Linux 2.6.29-cerberus-4 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Versions of packages rsyslog depends on:
ii libc6 2.9-23 GNU C Library: Shared libraries
ii lsb-base 3.2-23 Linux Standard Base 3.2 init
scrip
ii zlib1g 1:1.2.3.3.dfsg-15 compression library - runtime
Versions of packages rsyslog recommends:
ii logrotate 3.7.7-3 Log rotation utility
Versions of packages rsyslog suggests:
ii rsyslog-doc 4.2.0-1 documentation for rsyslog
pn rsyslog-gnutls <none> (no description available)
pn rsyslog-gssapi <none> (no description available)
pn rsyslog-mysql | rsyslog-pgsql <none> (no description available)
pn rsyslog-relp <none> (no description available)
-- no debconf information
--- End Message ---
--- Begin Message ---
Source: rsyslog
Source-Version: 4.6.4-1
We believe that the bug you reported is fixed in the latest version of
rsyslog, which is due to be installed in the Debian FTP archive:
rsyslog-doc_4.6.4-1_all.deb
to main/r/rsyslog/rsyslog-doc_4.6.4-1_all.deb
rsyslog-gnutls_4.6.4-1_i386.deb
to main/r/rsyslog/rsyslog-gnutls_4.6.4-1_i386.deb
rsyslog-gssapi_4.6.4-1_i386.deb
to main/r/rsyslog/rsyslog-gssapi_4.6.4-1_i386.deb
rsyslog-mysql_4.6.4-1_i386.deb
to main/r/rsyslog/rsyslog-mysql_4.6.4-1_i386.deb
rsyslog-pgsql_4.6.4-1_i386.deb
to main/r/rsyslog/rsyslog-pgsql_4.6.4-1_i386.deb
rsyslog-relp_4.6.4-1_i386.deb
to main/r/rsyslog/rsyslog-relp_4.6.4-1_i386.deb
rsyslog_4.6.4-1.debian.tar.gz
to main/r/rsyslog/rsyslog_4.6.4-1.debian.tar.gz
rsyslog_4.6.4-1.dsc
to main/r/rsyslog/rsyslog_4.6.4-1.dsc
rsyslog_4.6.4-1_i386.deb
to main/r/rsyslog/rsyslog_4.6.4-1_i386.deb
rsyslog_4.6.4.orig.tar.gz
to main/r/rsyslog/rsyslog_4.6.4.orig.tar.gz
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Michael Biebl <[email protected]> (supplier of updated rsyslog package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.8
Date: Thu, 05 Aug 2010 18:35:37 +0200
Source: rsyslog
Binary: rsyslog rsyslog-doc rsyslog-mysql rsyslog-pgsql rsyslog-gssapi
rsyslog-gnutls rsyslog-relp
Architecture: source i386 all
Version: 4.6.4-1
Distribution: unstable
Urgency: low
Maintainer: Michael Biebl <[email protected]>
Changed-By: Michael Biebl <[email protected]>
Description:
rsyslog - enhanced multi-threaded syslogd
rsyslog-doc - documentation for rsyslog
rsyslog-gnutls - TLS protocol support for rsyslog
rsyslog-gssapi - GSSAPI authentication and encryption support for rsyslog
rsyslog-mysql - MySQL output plugin for rsyslog
rsyslog-pgsql - PostgreSQL output plugin for rsyslog
rsyslog-relp - RELP protocol support for rsyslog
Closes: 540807
Changes:
rsyslog (4.6.4-1) unstable; urgency=low
.
* New upstream release.
- bugfix: programname filter in ! configuration can not be reset.
Thanks to Kiss Gabor for the patch. Closes: #540807
* Bump Standards-Version to 3.9.1. No further changes.
Checksums-Sha1:
35b0cce279356b4001b73f4574319402cf548e1c 1360 rsyslog_4.6.4-1.dsc
03333713b933dcf8e1ae898c62c56270483b5087 2080038 rsyslog_4.6.4.orig.tar.gz
507ec3b65889d4c4039dba03ebd5ba8e93561a6f 23358 rsyslog_4.6.4-1.debian.tar.gz
c1f374e321db49245033de1bd9f98a8e2b3fe13b 308104 rsyslog_4.6.4-1_i386.deb
fc192dcbbe8819ea794dea9f82e0b7584f9b9441 1031554 rsyslog-doc_4.6.4-1_all.deb
3d89904bc46e21071730387c9085822e9a7a00b8 98992 rsyslog-mysql_4.6.4-1_i386.deb
1bc3c66c56fca45a5e1abb3634095707be511bd9 98848 rsyslog-pgsql_4.6.4-1_i386.deb
7193a934db2e4088350aff653b9de800018bb85a 106140 rsyslog-gssapi_4.6.4-1_i386.deb
e675659df20bfc76c8c5ffb8bff03f6edb511f22 105326 rsyslog-gnutls_4.6.4-1_i386.deb
0664861d3ae1ed8f4726c87485abb7624f8148f8 99226 rsyslog-relp_4.6.4-1_i386.deb
Checksums-Sha256:
6282fb7acbfb32a1d7202a2130c7bfc0d4dacc88ce22ef6c471f1f64297365aa 1360
rsyslog_4.6.4-1.dsc
9d712d2ca1eeb5692b947bc3379773a8b1ed19e75d8307e5870b846a83b069cf 2080038
rsyslog_4.6.4.orig.tar.gz
46e029381212ea08cb150a17689f1a9478e7c2fc1d1217016faf488d91f86ca5 23358
rsyslog_4.6.4-1.debian.tar.gz
19ddba59137d310ef8963e19f771c44f6766b8ea6d0a4cfa7e84b243fa093248 308104
rsyslog_4.6.4-1_i386.deb
e66fc223fe447fd8fb98d7feb491355edb1ea625a248fea640feb88540ae0abd 1031554
rsyslog-doc_4.6.4-1_all.deb
b572c0ab1528b2ef782e998152b3b04304a82cb37d85c45ab4a0c80ea7b99c33 98992
rsyslog-mysql_4.6.4-1_i386.deb
c99b1dadfe0a1dd5a460cd0040ac03d2e292160211092f293bc9a5213e115ce2 98848
rsyslog-pgsql_4.6.4-1_i386.deb
6d98c53e4e4a826d851bbd21d334b22a5f6767df328a48c29c975f3cb70a4dce 106140
rsyslog-gssapi_4.6.4-1_i386.deb
917826d35842cd50813b02d645f78a4a7608ce5c7a084b04e49bffcc3898722f 105326
rsyslog-gnutls_4.6.4-1_i386.deb
c1c9525684d148844e958c1820a57585a9e48235ac4b45e621471f17f3751c4b 99226
rsyslog-relp_4.6.4-1_i386.deb
Files:
4273af87d541cc348e13533609f5ae3d 1360 admin important rsyslog_4.6.4-1.dsc
9cd32eec1984a656ab879e89b57d8076 2080038 admin important
rsyslog_4.6.4.orig.tar.gz
c34ce1c97b681cdba97f039657873ef3 23358 admin important
rsyslog_4.6.4-1.debian.tar.gz
88c6276cb5986c31ae630eb11c8a8aac 308104 admin important
rsyslog_4.6.4-1_i386.deb
048466b56f9ce3690341d5e2efa31941 1031554 doc extra rsyslog-doc_4.6.4-1_all.deb
b2863fa690f927fea72f08885be0c29f 98992 admin extra
rsyslog-mysql_4.6.4-1_i386.deb
293f70af5dcc6608e6c242e5ff685670 98848 admin extra
rsyslog-pgsql_4.6.4-1_i386.deb
f43b6afa3ff100166e464553f3eee622 106140 admin extra
rsyslog-gssapi_4.6.4-1_i386.deb
4e9dbd25a2f67ec59bd2080a7e40697e 105326 admin extra
rsyslog-gnutls_4.6.4-1_i386.deb
8489363921a05958f604f339060dd1c9 99226 admin extra
rsyslog-relp_4.6.4-1_i386.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
iEYEARECAAYFAkxa6XQACgkQh7PER70FhVS14QCcDk3G48cEw7HfoliOJNW7ADyB
r5YAoI6JNRdZ5dlAVQmNcqwZcnGjojHp
=1d0i
-----END PGP SIGNATURE-----
--- End Message ---
