Your message dated Tue, 14 May 2024 14:22:38 +0200
with message-id <[email protected]>
and subject line Re: Bug#1015201: logcheck: Update patterns, here: rsyslogd
has caused the Debian Bug report #1015201,
regarding logcheck: Update patterns, here: rsyslogd
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)


-- 
1015201: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1015201
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: logcheck
Version: 1.3.24
Severity: wishlist
Tags: patch

From the changelog I gather that logcheck is now actively maintained
again. This is a test ballon bug report to see if this is the case.
If so, I would provide more input either as bug reports or directely.

The pattern for rsyslogd can be improved. Please add the following
line:

imuxsock: Acquired UNIX socket '/run/systemd/journal/syslog' \(fd 3\) from 
systemd.  \[v8.2206.0\]

You might want to generalize the fd (on my system it is always fd 3, 
but I don't know if this is general) and possibly the version number;
ideally this would remain in sync to whatever is in testing.


-- System Information:
Debian Release: bookworm/sid
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: amd64 (x86_64)

Kernel taint flags: TAINT_UNSIGNED_MODULE
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8) (ignored: LC_ALL 
set to de_DE.UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages logcheck depends on:
ii  adduser                                    3.121
ii  cron [cron-daemon]                         3.0pl1-147
ii  exim4-daemon-light [mail-transport-agent]  4.96-3
ii  lockfile-progs                             0.1.19
ii  logtail                                    1.3.24
ii  mime-construct                             1.11+nmu3
ii  rsyslog [system-log-daemon]                8.2206.0-1

Versions of packages logcheck recommends:
ii  logcheck-database  1.3.24

Versions of packages logcheck suggests:
pn  syslog-summary  <none>

-- Configuration Files:
/etc/logcheck/logcheck.conf [Errno 13] Keine Berechtigung: 
'/etc/logcheck/logcheck.conf'
/etc/logcheck/logcheck.logfiles [Errno 13] Keine Berechtigung: 
'/etc/logcheck/logcheck.logfiles'

-- no debconf information

-- 
      Dr. Helge Kreutzmann                     [email protected]
           Dipl.-Phys.                   http://www.helgefjell.de/debian.php
        64bit GNU powered                     gpg signed mail preferred
           Help keep free software "libre": http://www.ffii.de/

Attachment: signature.asc
Description: PGP signature


--- End Message ---
--- Begin Message ---
Am 02.05.24 um 18:00 schrieb Helge Kreutzmann:
Hello Michael,
Am Thu, May 02, 2024 at 12:28:30PM +0200 schrieb Michael Biebl:
Am 02.05.24 um 09:39 schrieb Richard Lewis:
lOn Mon, 29 Apr 2024, 14:19 Helge Kreutzmann, <[email protected]
<mailto:[email protected]>> wrote:
i think that practice and theory have diverged here! or possibly this
is/was produced when logs are rotated.

The latest autopkgtest test for logcheck passed successfully [1], so I'm
inclined to close this bug report.

I haven't yet switched over to testing, so maybe the report is
outdated.

If the log check rules do need an update, they should be accompanied with a
corresponding autopkgtest.

I can provide patterns, when necessary.

As I don't use logcheck, I will have to rely on someone to contribute those
changes. Ideally in the form of a MR on salsa at
https://salsa.debian.org/debian/rsyslog

I'm happy to send patterns in bug reports, when applicable, using
reportbug(1). I use logcheck a lot, and tweak the rulse regularly. But
I'm not fluent at all in autopkgtest or creating merge requests.


Let's close this issue for now.
If there are changes required for the version in sid, then those changes will need a corresponding update of the autopkgtest, otherwise I won't apply them. The only other alternative I see is to drop the logcheck rules from the rsyslog package and hand them over to the logcheck maintainers.

Regards,
Michael



Attachment: OpenPGP_signature.asc
Description: OpenPGP digital signature


--- End Message ---

Reply via email to