Package: logcheck-database
Version: 1.2.54
Severity: normal

After reading a mail thread about an issue with spamassassin and selinux [1],
I propose to be a bit more strict in checking for spamd child states.

The common "good" states are I(dle) and B(usy), but the K(ill) state can
indicate a problem. I'm not completely sure about the S(tarting) state. It
does not seem to be listed much in practice, but is probably OK to filter out.

Proposed change in ignore.d.server/spamd:
-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ spamd\[[0-9]+\]: prefork: child states: 
[[:upper:]]+$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ spamd\[[0-9]+\]: prefork: child states: 
[IBS]+$

Cheers,
FJP

[1] 
http://mail-archives.apache.org/mod_mbox/spamassassin-users/200609.mbox/<1157638162.2473.21.camel%40ash.trees99.org.uk>

Attachment: pgp3eVFKcvq6E.pgp
Description: PGP signature

_______________________________________________
Logcheck-devel mailing list
[email protected]
http://lists.alioth.debian.org/mailman/listinfo/logcheck-devel

Reply via email to