Your message dated Thu, 2 May 2024 13:57:42 +0200
with message-id <[email protected]>
and subject line
has caused the Debian Bug report #862348,
regarding fail2ban: Wrong journalmatch for sshd jail
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
862348: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=862348
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: fail2ban
Version: 1.0.2-2
Severity: serious
Tags: sid trixie bookworm
Hello,
The default journalmatch for ssh the following:
filter.d/sshd.conf: journalmatch = _SYSTEMD_UNIT=sshd.service + _COMM=sshd
But the .service file for ssh in debian is called ssh.service, not
sshd.service
If I run journalctl _SYSTEMD_UNIT=sshd.service _COMM=sshd, I get no
entries.
If I run journalctl _SYSTEMD_UNIT=ssh.service _COMM=sshd , I get the logs
I think there are still something broken with the switch to journald
The configuration should be changed to: "_SYSTEMD_UNIT=ssh.service
_COMM=sshd" IMVHO
Kind regards,
Laurent Bigonville
--- End Message ---
--- Begin Message ---
X-CrossAssassin-Score: 49100
--- End Message ---
