On Fri, 1 Aug 2025 at 19:57, Michael Biebl <[email protected]> wrote:
> Am 01.08.25 um 19:01 schrieb Richard Lewis:

> > if [   "/proc/kmesg" is readable (?) ]  ; then echo "rules matching
> > the error" > /etc/logcheck/ignore.d.server/foo fi # rest of test as
> > before

> That said, I don't know, how access to /proc/kmsg is restricted inside
> debusine and how we can devise a robust check for that.
>
> The error message indicates, that the file exists but is not even
> accessible to root.

I dont know how debusine works either, but looking at proc_kmesg(5)
and dmesg(1), i would try

dmesg --since '1s ago' 2>/dev/null

this exits with 0 'normally' (even if there is no output to show), and
1 inside an 'unshare -r' (even if run by root)

Reply via email to