Your message dated Mon, 15 Jun 2009 07:02:18 +0000
with message-id <[email protected]>
and subject line Bug#499393: fixed in logcheck 1.3.2
has caused the Debian Bug report #499393,
regarding logcheck-database: paranoid cron rules let session close messages
through
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
499393: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=499393
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: logcheck-database
Version: 1.2.54
Severity: normal
Hi,
/etc/logcheck/ignore.d.paranoid/cron contains the last line:
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ CRON\[[0-9]+\]:
pam_[[:alnum:]]+\(cron:session\): session opened for user [[:alnum:]-]+( by
\(uid=[0-9]+\))?$
wouldn't it be better transformed into
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ CRON\[[0-9]+\]:
pam_[[:alnum:]]+\(cron:session\): session (opened|closed) for user
[[:alnum:]-]+( by \(uid=[0-9]+\))?$
to suppress close messages, too? I've got no experience with the
butlast line, but that also seems to miss a similar clause.
Thanks,
Feri.
-- System Information:
Debian Release: 4.0
APT prefers stable
APT policy: (600, 'stable'), (50, 'unstable')
Architecture: i386 (i686)
Shell: /bin/sh linked to /bin/bash
Kernel: Linux 2.6.26-1-686
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Versions of packages logcheck-database depends on:
ii debconf [debconf-2.0] 1.5.11etch2 Debian configuration management sy
logcheck-database recommends no packages.
-- debconf information excluded
--- End Message ---
--- Begin Message ---
Source: logcheck
Source-Version: 1.3.2
We believe that the bug you reported is fixed in the latest version of
logcheck, which is due to be installed in the Debian FTP archive:
logcheck-database_1.3.2_all.deb
to pool/main/l/logcheck/logcheck-database_1.3.2_all.deb
logcheck_1.3.2.dsc
to pool/main/l/logcheck/logcheck_1.3.2.dsc
logcheck_1.3.2.tar.gz
to pool/main/l/logcheck/logcheck_1.3.2.tar.gz
logcheck_1.3.2_all.deb
to pool/main/l/logcheck/logcheck_1.3.2_all.deb
logtail_1.3.2_all.deb
to pool/main/l/logcheck/logtail_1.3.2_all.deb
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Hanspeter Kunz <[email protected]> (supplier of updated logcheck package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: RIPEMD160
Format: 1.8
Date: Mon, 15 Jun 2009 06:33:34 CEST
Source: logcheck
Binary: logcheck logcheck-database logtail
Architecture: all source
Version: 1.3.2
Distribution: experimental
Urgency: low
Maintainer: Debian logcheck Team <[email protected]>
Changed-By: Hanspeter Kunz <[email protected]>
Description:
logcheck - mails anomalies in the system logfiles to the administrator
logcheck-database - database of system log rules for the use of log checkers
logtail - Print log file lines that have not been read (deprecated)
Closes: 498613 499393 499415 499561 514335
Changes:
logcheck (1.3.2) experimental; urgency=low
.
[ Gerfried Fuchs ]
* Remove amavisd-new conflict, the file name conflict is long gone.
* Remove unused-override entries (the complete logcheck-database file, in
fact)
* Fixed referenced detectrotate path in logtail2 manpage.
* Escape [ in kernel timestamp rules, noticed by Michael Tautschnig, thanks!
(closes: #498613)
* Apply patch from Jari Aalto for fixing package description paragraph
ordering by importence, thanks (closes: #499415)
* Supress cron session closed messages too, thanks to Ferenc Wagner for
noticing (closes: #499393)
* Match for sshd:session additional to ssh:session, noticed by Ferenc Wágner
(closes: #499561)
* ignore.d.server/nagios, violations.ignore.d/logcheck-nagios: also support
nagios3 as string in the log lines (closes: #514335).
.
[ martin f. krafft ]
* ignore.d.server/postfix:
- ignore milter rejection messages.
.
[ Hanspeter Kunz ]
* ignore.d.server/dovecot:
- deleted redudant rule for deliver
- enhanced deliver rule to allow pretty much anything as msgid
- allow missing ")" in deliver rule
- ignore managesieve logins and disconnects
* ignore.d.server/postfix:
- generalize rule for ETRN rejections (allow brackets)
- IPv6-ification of milter-discard rule
- added optional "orig_to" to one of "postfix/smtp status=sent" rules
where it was missing
- ignore another TLS library problem
(SSL3_READ_BYTES:reason(1000):s3_pkt.c:1057:SSL alert number 0)
- ignore "too many errors after DATA (0 bytes)"
Checksums-Sha256:
d9318356ae3b1a495b034b28e63405f4f154e603ff1738a6d3833d05dd972cf0 116784
logcheck-database_1.3.2_all.deb
ccbba1f4a8a246cee178e60469c5fb90590e08a6bfb557d8562bb46bf8021b35 153256
logcheck_1.3.2.tar.gz
dcffecdd0fc53fa31aa05fbc67e194b1c5d093e833c092f303d5519232fba8f0 1188
logcheck_1.3.2.dsc
2f580424c1f15f284302ee22926e79355d2a6d383b66325175cf3eb6143789c3 69192
logcheck_1.3.2_all.deb
c926dc0301050b7f2e2e769f2e91d5d252d5bba9d78b534579c0a213d5b2b575 54466
logtail_1.3.2_all.deb
Checksums-Sha1:
68ede8363376081c5477e9035fc6b952dd180cda 116784 logcheck-database_1.3.2_all.deb
f4bb5b7c8682edb9430bbb96c525e2deaa100bfc 153256 logcheck_1.3.2.tar.gz
b7b75c2ed99b2b181abfe30d110f2baf257bfd99 1188 logcheck_1.3.2.dsc
74c073cd10e99f73e96ba0ce563e4061fc046d17 69192 logcheck_1.3.2_all.deb
dbc7ee95c4dd48a2855c5a318c0dfa2f7a1a6391 54466 logtail_1.3.2_all.deb
Files:
1e986dcc2e9e1502c187238350711b42 116784 admin optional
logcheck-database_1.3.2_all.deb
b45ed40c69239c0380a3eabf53d87d20 153256 admin optional logcheck_1.3.2.tar.gz
1f9644e74295cf51fe741c075972fdf9 1188 admin optional logcheck_1.3.2.dsc
c2aab0d7964b3a6d8075b12832c354ce 69192 admin optional logcheck_1.3.2_all.deb
db4fdf613396f8dae65d00da40c01b4e 54466 admin optional logtail_1.3.2_all.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
iEYEAREDAAYFAko10OYACgkQIgvIgzMMSnU2qACbB3VNqGcBQmZEDxiZz7Ns+/wi
xfUAoItyKyQz3JN6646wfJy3ELuSeGG2
=wjfK
-----END PGP SIGNATURE-----
--- End Message ---
_______________________________________________
Logcheck-devel mailing list
[email protected]
http://lists.alioth.debian.org/mailman/listinfo/logcheck-devel
