Bug#1054130: It probably was trivial

2024-01-29 Thread Dave Vehrs
> It looks as if the URI may have changed. Anyway adding
> OPT_CONTENT_DISPOSITION
> to the entry works and the remainder of the list now completes.
> So a minor bug I guess

I noticed from the first email that the version of Podget that you are
reporting the bug for is 0.9.1-1 and the system is using Trixie/Sid.

I also notice that the bug was submitted on October 17, 2023.  Since
then a new version of Podget has been released that addressed a few
issues like this one.

Now it is possible that I forgot to close this bug when I published the
latest release.  You might even say probable.

I tested the serverlist entry you gave in the first email with the
0.9.3-1 and didn't see any issues.

I will look into closing this report.

Thanks for the update.
Dave


-- 
Dave VehrsEmail: dve...@gmail.com



Bug#1027121: Got an error: Error in line 2978: file not found

2022-12-30 Thread Dave Vehrs
On Wed, Dec 28, 2022 at 12:43:16AM +0100, Joerg Schiermeier, Bielefeld/Germany 
wrote:
> Package: podget
> Version: 0.9.0-1
> Severity: normal
> 
> At the end of running a download of new podcasts I get this error message:
> Command line:
> $ podget
> 
> - ---[Message]---
> Cleanup old tracks.
> Deleting tracks from :
> /usr/bin/podget: Zeile 2978: : Datei oder Verzeichnis nicht gefunden
> 
> Error:
>   Script: podget
>   At line:2944
>   Exit Status:1
> 
> Context:
> 2941fi
> 2942fi
> 2943if (( VERBOSITY >= 2 )) ; then
> 2944 >>>echo "Deleting tracks from ${FILE}:"
> 2945fi
> 2946while read -r LINE ; do
> 2947if [[ -f "${DIR_LIBRARY}/${LINE}" ]]; then
> 
> Closing session and removing lock file.
> podget  55,45s user 136,96s system 12% cpu 25:33,64 total
> - ---[/Message]---

OK, it appears this error was actually triggered in the while read loop
2 lines below where it was reported but was actually caused by a
separate while read loop about 9 lines above it.  The bug appears to
have been when no M3U playlists were found and so it was attempting to
parse a file that didn't exist, which we learn from the "Deleting tracks
from  :" line in the output.  The fact that it is missing a filename
reveals that the problem occurs before the error is triggered.

I've added a fix that checks for when ${FILE} is unset or null that
allows its while loop to continue prior to the parts that failed.

The fix has been uploaded to the 'dev' branch on Podget's Github
repository and will be included in the next version.

I'm currently testing a rather large idea that may be able to use the
TITLE tag from RSS feeds to name the files rather than just what the
downloaded filename is.  So it may be a little while before the next
version is actually released.

Thanks for the report and I will updated this when I do publish a new
version.

Dave

-- 
Dave VehrsEmail: dve...@gmail.com



Bug#1002511: podget: maybe use ugrep as preferred alternative to grep

2021-12-23 Thread Dave Vehrs
On Thu, Dec 23, 2021 at 04:06:46PM +0100, Jonas Smedegaard wrote:
> Source: podget
> Version: 0.8.10-1
> Severity: wishlist
> 
> I notice that podget depends on grep.
> 
> An alternative to grep, ugrep, should be radically faster and should
> support command-line options of GNU grep, so I encourage testing if it
> works as a drop-in replacement - with a speed gain.
> 
> 
>  - Jonas

Interesting idea.  However Podget is also built for other operating
systems.  I can see ugrep packages for FreeBSD and OpenBSD but not for
NetBSD.  There also appear to be problems with the MacOS version and
making sure it's dependencies are installed.  Don't think this will be a
drop-in replacement given where we expect Podget to work.


-- 
Dave VehrsEmail: dve...@gmail.com



Bug#851904: pydf: Readonly drives do no respect "do not use colours" option

2017-01-19 Thread Dave Vehrs
Package: pydf
Version: 10
Severity: normal
Tags: patch

Dear Maintainer,

I use pydf for regular file system usage checks but I noticed a
small issue when I attempted to use the --bw "do not use colours"
option when I was saving the output to a file.  While most
alternative colours were eliminated, I found that the one for
Readonly drives was not.  After a quick look at /usr/bin/pydf, it
was apparent where the issue was.  Seems one option slipped through
testing.

I checked that this issue also affects version 12 on Sid.

One quick fix and it worked as expected.  I've included a patch for
your consideration.

Thanks for a very useful app!

Dave

-- System Information:
Debian Release: 8.6
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 4.7.0-0.bpo.1-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages pydf depends on:
ii  python  2.7.9-1

pydf recommends no packages.

pydf suggests no packages.

-- no debconf information
640c640
< normal_colour = header_colour = local_fs_colour = remote_fs_colour = 
special_fs_colour = filled_fs_colour = full_fs_colour = 'none'
---
> normal_colour = header_colour = local_fs_colour = remote_fs_colour = 
> special_fs_colour = readonly_fs_colour = filled_fs_colour = full_fs_colour = 
> 'none'


Bug#851210: segfault during update and directly after initramfs, system unusable - more info

2017-01-12 Thread Dave Vehrs
OK, got to a working system without downgrading systemd to 232-8.

I took a hint from Michael's post and ran:

systemctl disable tor.service

After that my system could boot in the normal systemd way.

However, if I tried to run:

systemctl status tor.service

Then systemd would crash.

So I believe this confirms that Michael is on the right track and for
now the work-around solution appears to be disabling tor.

-- 
Dave VehrsEmail: dve...@gmail.com



Bug#851210: segfault during update and directly after initramfs, system unusable - more info

2017-01-12 Thread Dave Vehrs
I ran into the same issue as Sven describes.

While the system will not reboot using the default option, if I select
the '(sysvinit)' option the system boots and is basically functional.

I do need to manually set a nameserver in /etc/resolv.conf for network
access.  

I have not been able to downgrade systemd to 232-8 but will try that
next.

-- 
Dave VehrsEmail: dve...@gmail.com



Bug#839824: podget: The -r flag in podget has no effect

2016-10-05 Thread Dave Vehrs
On Wed, Oct 05, 2016 at 08:24:52AM -0400, John Lewis wrote:
> Package: podget
> Version: 0.7.3-1
> Severity: important
> 
> Dear Maintainer,
> 
> The r flag in podget no longer limits the number of podcasts in the feed
> targeted by podget. It will simply target every podcast in the rss feed
> instead.
> 
> -- System Information:
> Debian Release: 8.6
>   APT prefers stable-updates
>   APT policy: (500, 'stable-updates'), (500, 'stable')
> Architecture: amd64 (x86_64)
> Foreign Architectures: i386
> 
> Kernel: Linux 3.16.0-4-amd64 (SMP w/4 CPU cores)
> Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
> Shell: /bin/sh linked to /bin/dash
> Init: systemd (via /run/systemd/system)
> 
> Versions of packages podget depends on:
> ii  bash 4.3-11+b1
> ii  coreutils8.23-4
> ii  debianutils  4.4+b1
> ii  findutils4.4.2-9+b1
> ii  gawk 1:4.1.1+dfsg-1
> ii  grep 2.20-4.1
> ii  mawk 1.3.3-17
> ii  sed  4.2.2-4+b1
> ii  wget 1.16-1+deb8u1
> 
> podget recommends no packages.
> 
> Versions of packages podget suggests:
> ii  libc-bin  2.19-18+deb8u6
> 
> -- no debconf information

According to the Changelog, this was fixed in version 0.7.4
in October, 2014.  Apparently that version did not make it into Jessie.

It would be interesting to see if this bug was reared it's head again.
Can you download & installed an updated version and test it?

Updated versions available at:
  https://sourceforge.net/projects/podget/
  OR
  https://github.com/dvehrs/podget/

The latest stable version (0.8.2) is available on both or you can select
the DEV branch on Github to get the latest development version.  I do
believe the -r or --recent flags are working properly in the development
version because I used them while I was testing a new feature to handle
feeds that have their items listed in either a descending or ascending
order.

Thanks for the report,

Dave

-- 
Dave VehrsEmail: dve...@gmail.com



Bug#810528: Github Version Updated

2016-01-15 Thread Dave Vehrs
Thanks for the report.  It appears that I did not complete an update for
the iconv checks a few versions ago.  Sorry about that.

I've got a 'fixed' version up for testing in the 'dev' thread for my
Github Podget account.  If you'd care to test it, there it is.
Otherwise, I'm testing a few new features and it should be ready to
upload into the Debian Repositories soon.

https://github.com/dvehrs/podget/tree/dev

-- 
Dave VehrsEmail: dve...@gmail.com



Bug#799045: podget: silent mode is not totally silent

2015-10-11 Thread Dave Vehrs
OK, this update and one small subsequent one have been accepted into the
Debian package repositories.  You should see them automatically
available for Sid or Stretch soon.  I don't believe there's any reason
that this update shouldn't also work for Jessie but you'll have to
manually download & apply it then.

Enjoy!

-- 
Dave VehrsEmail: dve...@gmail.com



Bug#799045: podget: silent mode is not totally silent

2015-10-04 Thread Dave Vehrs
OK, I found where the 'extra' line was being produced.  I had an echo
that was included for formating that needed to be wrapped in a simple if
statement to keep it quiet.  It's been fixed and a new version (Ver.
0.7.7-1) has been submitted for review.  Hopefully it will be available
for download soon. 

I will close this bug report when it is.

Thanks for the report!

-- 
Dave VehrsEmail: dve...@gmail.com



Bug#779310: TODO Update for new DEB-#### numbers

2015-04-03 Thread Dave Vehrs
After looking at the new changes in Lynis 2.0 for reporting and adding
URLs to suggestions  warnings, I've come to the conclusion that my
simple fix for the older implementation is no longer correct.
Additionally, it appears that there may be more involved in creating a
good implementation of this feature.

With Lynis 2.0, it now includes the ability to use a 'custom' url for
any test that begins CUST-, so it would not be hard to change the
if/then statement that is in place with a case statement that could also
test for tests that begin with DEB-.  So that part is fairly simple.
However to simply suppress the adding of URLs for those beginning with
DEB- would occur at a different place.   This could result in patches
that are more difficult to add to Lynis updates as they occur.

I'm trying to work out a new implementation but so far nothing easy to
maintain has come to mind.  It may be prudent to close this bug report
and I can open a new one if/when I come up with a better solution.

-- 
Dave VehrsEmail: dve...@gmail.com


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#779318: Update for SSH Tests

2015-04-03 Thread Dave Vehrs
OK, I've basically finished moving the SSH tests to the Debian Plugin.
I've attached a diff for adding them to plugin_debian_phase1 for your
consideration.

There are a few other updates to previous tests (for example for
dm-crypt  cryptmount) and I've added initial tests for Fail2ban.

What do you think, should we add these to the Debian plugin?

Thanks,

Dave

-- 
Dave VehrsEmail: dve...@gmail.com

60,70c60,71
 apt-listbugs)   APTLISTBUGSBINARY=${BINARY};logtext   Found known binary: apt-listbugs (System tool) - ${BINARY};;
 apt-listchanges)APTLISTCHANGESBINARY=${BINARY}; logtext   Found known binary: apt-listchanges (System tool) - ${BINARY} ;;
 checkrestart)   CHECKRESTARTBINARY=${BINARY}; logtext   Found known binary: checkrestart (System tool) - ${BINARY};;
 cryptmount) CRYPTMOUNTFOUND=1;  CRYPTMOUNTBINARY=${BINARY};   logtext   Found known binary: cryptmount (Encryption tool) - ${BINARY}  ;;
 cryptsetup) CRYPTSETUPFOUND=1;  CRYPTSETUPBINARY=${BINARY};   logtext   Found known binary: cryptsetup (Encryption tool) - ${BINARY}  ;;
 debsecan)   DEBSECANBINARY=${BINARY}; logtext   Found known binary: debsecan (System tool) - ${BINARY};;
 debsums)DEBSUMSBINARY=${BINARY};  logtext   Found known binary: debsums (System tool) - ${BINARY} ;;
 ecryptfsd)  ECRYPTFSDFOUND=1;   ECRYPTFSDBINARY=${BINARY};logtext   Found known binary: ecryptfsd (Layered Encryption) - ${BINARY};;
 ecryptfs-migrate-home)  ECRYPTFSMIGRATEFOUND=1; ECRYPTFSMIGRATEBINARY=${BINARY};logtext   Found known binary: ecryptfs-migrate-home (Layered Encryption) - ${BINARY};;
 lvdisplay)  LVDISPLAYBINARY=${BINARY};logtext   Found known binary: lvdisplay (LVM tool) - ${BINARY}  ;;
 mount)  MOUNTBINARY=${BINARY};logtext   Fount known binary: mount (File system tool) - ${BINARY}  ;;
---
 apt-listbugs)   APTLISTBUGSBINARY=${BINARY};  logtext   Found known binary: apt-listbugs (System tool) - ${BINARY} ;;
 apt-listchanges)APTLISTCHANGESBINARY=${BINARY};   logtext   Found known binary: apt-listchanges (System tool) - ${BINARY}  ;;
 checkrestart)   CHECKRESTARTBINARY=${BINARY};   logtext   Found known binary: checkrestart (System tool) - ${BINARY} ;;
 cryptmount) CRYPTMOUNTFOUND=1;  CRYPTMOUNTBINARY=${BINARY}; logtext   Found known binary: cryptmount (Encryption tool) - ${BINARY}   ;;
 cryptsetup) CRYPTSETUPFOUND=1;  CRYPTSETUPBINARY=${BINARY}; logtext   Found known binary: cryptsetup (Encryption tool) - ${BINARY}   ;;
 debsecan)   DEBSECANBINARY=${BINARY};   logtext   Found known binary: debsecan (System tool) - ${BINARY} ;;
 debsums)DEBSUMSBINARY=${BINARY};logtext   Found known binary: debsums (System tool) - ${BINARY}  ;;
 ecryptfsd)  ECRYPTFSDFOUND=1;   ECRYPTFSDBINARY=${BINARY};  logtext   Found known binary: ecryptfsd (Layered Encryption) - ${BINARY} ;;
 ecryptfs-migrate-home)  ECRYPTFSMIGRATEFOUND=1; ECRYPTFSMIGRATEBINARY=${BINARY};  logtext   Found known binary: ecryptfs-migrate-home (Layered Encryption) - ${BINARY} ;;
 fail2ban-server)FAIL2BANBINARY=${BINARY}; logtext   Found known binary: fail2ban

Bug#779318: Update for SSH Tests

2015-03-25 Thread Dave Vehrs
I just installed the latest update to Lynis 2.0 on my Sid workstation.
When I installed the package, your note was present by apt-listchanges.
Thanks for highlighting my submission.

However, one point in your note jumped out to my attention and that was
the idea that updates to the tests should be included in the Debian
plugin whenever possible.  And that makes a lot of sense for these
tests, especially the DebianBanner test.  Therefore, if you will hold
off on testing these tests, I will work to move them into the Debian
plugin and hopefully submit the updates before another update to Lynis
is in the works.

With any luck, I will have these ready for resubmission in a day or two
but no promises.  Wish me luck!

-- 
Dave VehrsEmail: dve...@gmail.com


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#779310: TODO Update for new DEB-#### numbers

2015-03-25 Thread Dave Vehrs
With the new update to Lynis 2 and the inclusion of the Debian Plugin,
this patch needs to be reworked.  Rather than suppressing the URLs when
 is found for an issue number, it should look for an issue number
that starts with DEB- and then either suppress the display of the URL
or use an URL base somewhere within the Debian Wiki or other
documentation.

I will start on the first case (suppressing the URL) and resubmit this
patch.

-- 
Dave VehrsEmail: dve...@gmail.com


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#779310: lynis: Suppress URL during reporting of Suggestions or Warnings

2015-02-26 Thread Dave Vehrs
Package: lynis
Version: 1.6.4-1
Severity: wishlist

Dear Maintainer,

I've run into a small issue with patches I've previously submitted and
any I might submit in the future.  After Lynis finishes a run, it
presents the user with a series of suggestions or warnings to help them
improve the security of their system.  Included with these suggestions
in an URL that is formatted like so:

 http://cisofy.com/controls/section-number

This is great for tests that were created upstream and have a registered
number so that the appropriate webpage can be produced  delivered.

However for tests that I have submitted, I have been using the format of
section- as a placeholder for numbers that can be later assigned.

A small problem occurs when this placeholder is used to create an URL.
It creates an URL that does not point at an existing page.  Therefore, I
propose the following patch to the report functions so that it does not
display an URL for any test registered with '' instead of a number.

The issue will be more obvious when you consider the next patch I will
submit to tests_ssh.  It includes 6 new tests and would display bad URLs
for each.  The simple patch include here will suppress those URLs while
keeping with the overall flow of the Lynis output.

What do you think?  Is this worth including?

Thanks,

Dave


-- System Information:
Debian Release: 8.0
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.16.0-4-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

lynis depends on no packages.

Versions of packages lynis recommends:
ii  menu  2.1.47

Versions of packages lynis suggests:
ii  dnsutils  1:9.9.5.dfsg-9

-- no debconf information

-- 
Dave VehrsEmail: dve...@gmail.com

--- report.orig	2015-01-11 16:18:36.934448110 -0700
+++ report	2015-01-11 17:07:47.192508015 -0700
@@ -122,7 +122,10 @@
 SHOWWARNING=`echo ${WARNING} | sed 's/!space!/ /g' | sed 's/^\[\(.*\)\] Warning: //'`
 ADDLINK=`echo ${WARNING} | sed 's/!space!/ /g' | sed 's/^\[\(.*\)\] Warning: \(.*\)\[//' | sed 's/\]//'`
 echo   ${WHITE}- ${SHOWWARNING}${NORMAL}
-echo   http://cisofy.com/controls/${ADDLINK}/;
+LINKNUM=`echo ${ADDLINK} | sed 's/.*-//'`
+if [ ! ${LINKNUM} =  ]; then
+echo   http://cisofy.com/controls/${ADDLINK}/;
+fi
 echo 
 done
 fi
@@ -139,7 +142,10 @@
 SHOWSUGGESTION=`echo ${SUGGESTION} | sed 's/!space!/ /g' | sed 's/^\[\(.*\)\] Suggestion: //'`
 ADDLINK=`echo ${SUGGESTION} | sed 's/!space!/ /g' | sed 's/^\[\(.*\)\] Suggestion: \(.*\)\[//' | sed 's/\]//'`
 echo   - ${SHOWSUGGESTION}
-echo   http://cisofy.com/controls/${ADDLINK}/;
+LINKNUM=`echo ${ADDLINK} | sed 's/.*-//'`
+if [ ! ${LINKNUM} =  ]; then
+echo   http://cisofy.com/controls/${ADDLINK}/;
+fi
 done
 echo 
 fi


Bug#779318: lynis: 6 new tests for tests_ssh

2015-02-26 Thread Dave Vehrs
Package: lynis
Version: 1.6.4-1
Severity: wishlist

Dear Maintainer,

I've written up a few new tests to extend those available for SSH in
Lynis.

The tests perform the following checks:
1.  Verify LoginGraceTime is configured and recommends a shorter on
than the default.
2.  Verify that MaxAuthTries is configured in sshd_config and
recommends fewer than the default.
3.  Tests to see if DebianBanner is disabled in sshd_config.
4.  Tests KexAlgorithms to verify that only those that are
sufficiently secure are enabled.
5.  Tests MACs to verify that only those that are
sufficiently secure are enabled.
6.  Tests Ciphers to verify that only those that are
sufficiently secure are enabled.

I had the idea for the last three tests after reading the
recommendations to harden SSH on:

https://stribika.github.io/2015/01/04/secure-secure-shell.html

Additionally, a Nessus scan offered two warnings:
1.  SSH Weak MAC Algorithms Enabled
2.  SSH Server CBC Mode Ciphers Enabled

This inspired me to see if a few changes would improve the security of
the SSH server and from the limited results I detail below, I think you
will agree that these changes were worth doing so I wanted a few tests
for Lynis to make them easier to verify are in place on any systems I
manage.

I tested the settings for KexAlgorithms, MACs and Ciphers on a system
exposed on the internet, where I found that by modifying KexAlgorithms
from the default to what was recommended that the number of attempts to
guess passwords on my system when down by approximately 1/80.  Rather
than be able to guess a username  password, the vast majority of
brute-force attempts were denied with a fatal: Unable to negotiate a
key exchange method log message.  A few made it passed that and were
caught by the MACs or Ciphers options but it drove down the number of
attempts that were seen to fail2ban needed to deal with.  So far down
that the attempts did not occur frequently enough to exceed fail2ban's
thresholds.

I also tested connecting to my system with default configurations with
SSH on a Debian host, putty on Windows and Juice SSH on Android.  All
were able to connect with the modified KexAlgorithms, MACs and Ciphers.
I was unable to test it with SSH from an Apple host but I don't believe
it should be an issue.

So what do you think, are these tests worth including in tests_ssh for
Lynis?

Thanks,

Dave

-- System Information:
Debian Release: 8.0
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'exp
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.16.0-4-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

lynis depends on no packages.

Versions of packages lynis recommends:
ii  menu  2.1.47

-- no debconf information

-- 
Dave VehrsEmail: dve...@gmail.com

--- tests_ssh.orig	2015-01-11 14:55:40.483212970 -0700
+++ tests_ssh	2015-02-25 14:03:40.045028207 -0700
@@ -266,6 +266,538 @@
 AddHP 0 1
 fi
 fi
+
+#
+#
+#
+# Test: SSH-
+# Description : LoginGraceTime
+# Goal: LoginGraceTime sets a time limit that the server will wait
+#   for a user to login.  Default is 120 seconds.  We test to
+#   determine if it is set to default or shorter.
+# Note: test-no is unassigned and we use a  to fill the value.
+
+if [ ${SSH_DAEMON_RUNNING} -eq 1 -a ! ${SSH_DAEMON_CONFIG} =  ]; then PREQS_MET=YES; else PREQS_MET=NO; fi
+Register --test-no SSH- --preqs-met ${PREQS_MET} --weight L --network NO --description Check SSH option: LoginGraceTime
+if [ ${SKIPTEST} -eq 0 ]; then
+FIND=`egrep ^\s*LoginGraceTime ${SSH_DAEMON_CONFIG} | awk '{ print $2 }'`
+if [ ! ${FIND} =  ]; then
+if [ ${FIND} -eq 0 ]; then
+ReportSuggestion ${TEST_NO} Consider enabling LoginGraceTime in ${SSH_DAEMON_CONFIG}
+logtext Result: LoginGraceTime is disabled
+Display --indent 4 --text - SSH option: LoginGraceTime --result Disabled --color RED
+AddHP 0 2
+elif [ ${FIND} -gt 119 ]; then
+ReportSuggestion ${TEST_NO} Consider enabling a shorter LoginGraceTime in ${SSH_DAEMON_CONFIG}
+logtext Result: LoginGraceTime is ${FIND} seconds.
+Display --indent 4 --text - SSH option: LoginGraceTime --result ${FIND} seconds --color YELLOW
+AddHP 1 2
+else
+logtext Result: LoginGraceTime is ${FIND} seconds.
+Display --indent 4 --text - SSH option: LoginGraceTime --result ${FIND} seconds --color GREEN
+AddHP 2 2
+fi
+else
+FIND=`${SSHDBINARY} -T | grep

Bug#766870: podget: MOST_RECENT=1 and -r 1 or --recent 1 not working in 0.7.3

2014-10-27 Thread Dave Vehrs
On Sun, 2014-10-26 at 13:22 +0100, Martintxo wrote:
 Package: podget
 Version: 0.7.3-1
 Severity: normal
 
 Dear Maintainer,
 
 I'm using podget 0.5.8-1 in a server with Debian stable for a small FM radio.
 It's working fine. Many thanks for it.
 
 In that server I have this setting in podgetrc (I repeat, is podget 0.5.8):
  most_recent=1
 It is working fine, it only downloads the last (mor new) episode of the 
 podcast,
 and this is what I need in this case :-D
 
 Now, I'm testing podget in Debian testing for know if it is working in the 
 same
 way. I need to stay ready for the new version when Debian testing will be
 stable.
 
 So, in my home computer, with Debian testing and podget 0.7.3-1, I create a 
 new
 config: delete the full ~/.podget dir, and run podget -vv. It says that it 
 will
 donwload one episode from one podcast to test it. In my case it download some
 episodes, not one.
 
 Well, I need to check my config like in the radio server. I change the 
 podgetrc
 in my home computer (for podget 0.7.3) and put:
  MOST_RECENT=1
 and serverlist for put one of my podcast:
  http://www.democracynow.org/podcast-es.xml DemocracyNow
 and test it. And the same, It downloads all the podcast in this URL (in this
 moment it have 11 enclosure, and I get 11 mp3 in the download dir...)
 
 So I test the -r 1 and the --recent 1 comand line options, and I get the
 same result.
 
 I don't know what happens, I check the source code of both scripts (0.5.8 and
 0.7.3) and look pretty the same in this case. In any way, the line at 1495
 (0.7.3):
  INDEXFILE=$(echo ${INDEXFILE} | cut -d \  -f -${MOST_RECENT})
 look wrong, it isn't the -d option of cut must be surrounded with quotes?
 (and there are 2 spaces later)...
 
 Well. That is my report. Sorry for my bad english, I'm and spanish speaker.
 Greetings. Martintxo.

Excellent timing.  I had an Arch user report the same issue and it took
me a little while to track the issue down.  Initially I tracked it down
to the exact line you found but changing that only fixed some of the
feeds that were having issues.  However I was able to follow it upstream
from there and found the issue was not being filtered by the sed
statements at the initial INDEXFILE generation.  I've released an
updated version on Sourceforge, and submitted it to Debian Mentors where
I hope it will be soon accepted.  This is a relatively small update and
so I don't anticipate any issues.

Thank you for the report and I must say your English is much better than
my Spanish.  

-- 
Dave Vehrsdve...@gmail.com


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#760424: Subject: netfilter-persistent: Running firewall before partitions mounted

2014-09-03 Thread Dave Vehrs
Package: netfilter-persistent
Version: 1.0.2
Severity: wishlist

Dear Maintainer,

I've found a small edge case that may affect a few users.  I run a
couple laptops with read-only root and /etc partitions.  For them, I
place files that I occasionally modify into /var/local/etc because it is
mounted read/write.  This created a small problem with
netfilter-persistent because it would run the firewall loading before
/var was mounted.  So the files that were linked were not available yet.

I was able to fix the issue by making one small change to the file:
/lib/systemd/system/netfilter-persistent.service

I modified the line:
After=systemd-modules-load.service
To read:
After=systemd-modules-load.service local-fs.target

And it appears to wait for the filesystems to be mounted before running
its scripts.  It does not appear to slow down the boot cycle in any
noticeable way and I was curious if this might not be an acceptable
change to the service file?  Or is it something I should just track for
my own use?

Thanks,

Dave

-- System Information:
Debian Release: sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.14-2-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages netfilter-persistent depends on:
ii  init-system-helpers  1.21
ii  lsb-base 4.1+Debian13

netfilter-persistent recommends no packages.

netfilter-persistent suggests no packages.

-- no debconf information

-- debsums errors found:
debsums: changed file /lib/systemd/system/netfilter-persistent.service
(from netfilter-persistent package)

-- 
Dave Vehrs  dve...@gmail.com


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#759263: cryptmount: Failed to initialize device for LUKS keyfile

2014-08-25 Thread Dave Vehrs
Package: cryptmount
Version: 5.0-1
Severity: normal

Dear Maintainer,

I've run into a small issue with cryptmount when I attempt to run it as
my normal user.  It reports that it Failed to initialize device for
LUKS keyfile.  However if I run sudo cryptmount to give it root
privileges then it works fine.

Output of sudo cryptmount usb32-CRYPT:
Enter password for target usb32-CRYPT:
e2fsck 1.42.11 (09-Jul-2014)
/dev/mapper/usb32-CRYPT: clean, 548/1632000 files, 1541405/6521408 blocks

Output of cryptmount usb32-CRYPT:
Enter password for target usb32-CRYPT:
Failed to initialize device for LUKS keyfile
Enter password for target usb32-CRYPT:
Failed to initialize device for LUKS keyfile
Enter password for target usb32-CRYPT:
Failed to initialize device for LUKS keyfile
Failed to extract cipher key

Additionally I can use cryptsetup luksOpen to mount the encrypt
partition just fine.  So it does not appear that there is anything wrong
with the media or partition format.  Rather the problem only occurs when
I run cryptmount as my normal user.

I also tried changing the dev= line in cmtab to /dev/sdb2, and it
produces the same bugs when run as my normal user while working fine
when run via sudo.

Is there something I'm doing wrong or something I should change?

Thanks,

Dave V.


-- System Information:
Debian Release: sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.14-2-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages cryptmount depends on:
ii  libc6   2.19-9
ii  libcryptsetup4  2:1.6.6-1
ii  libdevmapper1.02.1  2:1.02.88-1
ii  libgcrypt11 1.5.4-2

Versions of packages cryptmount recommends:
ii  udev  208-8

Versions of packages cryptmount suggests:
ii  dmsetup  2:1.02.88-1
ii  openssl  1.0.1i-2

-- Configuration Files:
/etc/cryptmount/cmtab changed:
_DEFAULTS_ {
passwdretries=3
}
usb32-CRYPT {
dev=/dev/disk/by-uuid/f2cccfbb-4e18-4e72-98cf-db804fd53255
dir=/media/usb32-CRYPT
keyformat=luks
fstype=ext4
mountoptions=noatime,relatime
}


-- no debconf information

-- 
Dave Vehrs  dve...@gmail.com


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#741876: Possible Plugin for Lynis

2014-05-28 Thread Dave Vehrs
Good Afternoon,

Just wanted to submit a new plugin file for consideration.  I've been
playing with it and added a few checks that might be handy.

This version includes a couple of small fixes to the DM-Crypt and
Ecryptfs tests, but I also included checks for:
- libpam-tmpdir
- libpam-usb
- apt-listbugs
- apt-listchanges
- checkrestart (part of debian-goodies)
- debsecan
- debsums

Overall this feels like a more complete Debian plugin for Lynis, simply
because it does more than just a couple filesystem tests.

What do you think?  Are these tests worthwhile or am I going off the
deep end?

-- 
Dave Vehrs  dve...@gmail.com
#!/bin/sh

#
#
# Add custom section to screen output
InsertSection Debian Tests
#
#
# Constants

# Declare reduced BINPATHS for Debian Tests
DEBIAN_BINPATHS=/bin /sbin /usr/bin /usr/sbin /usr/local/bin /usr/local/sbin

#
# Start by scanning for any tools that will be required for later custom tests.
#
# This is basically a copy of the test from the file
# /usr/share/lynis/include/binaries with a shorter list of files to look for.
#
# Some of the files we search for here may be repeated checks from the default
# tests, but we look for them again due to local function dependencies.  It's a
# tiny redundancy that doesn't slow the tests up significantly.

# Test: DEB-0001
# Description : Check for system binaries
# Notes   : Always perform this test, other tests depend on it.
Register --test-no DEB-0001 --weight L --network NO --description Check for 
system binaries required by Debian Tests
SCANNEDPATHS=; N=0
Display --indent 2 --text - Checking for system binaries that are required by 
Debian Tests...
logtext Status: Starting binary scan...
for SCANDIR in ${DEBIAN_BINPATHS}; do
logtext Test: Checking binaries in directory ${SCANDIR}
if [ -d ${SCANDIR} ]; then
Display --indent 4 --text - Checking ${SCANDIR}...  --result FOUND 
--color GREEN
SCANNEDPATHS=${SCANNEDPATHS}, ${SCANDIR}
logtext Directory ${SCANDIR} exists. Starting directory scanning...
FIND=`ls ${SCANDIR}`
for I in ${FIND}; do
N=`expr ${N} + 1`
BINARY=${SCANDIR}/${I}
logtext Binary: ${BINARY}
# Optimized, much quicker (limited file access needed)
case ${I} in
apt-listbugs)   APTLISTBUGSBINARY=${BINARY};
logtext   
Found known binary: apt-listbugs (System tool) - ${BINARY} 
   ;;
apt-listchanges)APTLISTCHANGESBINARY=${BINARY}; 
logtext   
Found known binary: apt-listchanges (System tool) - ${BINARY}  
   ;;
checkrestart)   CHECKRESTARTBINARY=${BINARY}; 
logtext   
Found known binary: checkrestart (System tool) - ${BINARY} 
   ;;
cryptmount) CRYPTMOUNTFOUND=1;  
CRYPTMOUNTBINARY=${BINARY};   
logtext   Found known binary: cryptmount (Encryption tool) - ${BINARY}
  ;;
cryptsetup) CRYPTSETUPFOUND=1;  
CRYPTSETUPBINARY=${BINARY};   
logtext   Found known binary: cryptsetup (Encryption tool) - ${BINARY}
  ;;
debsecan)   DEBSECANBINARY=${BINARY}; 
logtext   
Found known binary: debsecan (System tool) - ${BINARY} 
   ;;
debsums)DEBSUMSBINARY=${BINARY};  
logtext   
Found known binary: debsums (System tool) - ${BINARY}  
   ;;
ecryptfsd)  ECRYPTFSDFOUND=1;   
ECRYPTFSDBINARY=${BINARY};
logtext   Found known binary: ecryptfsd (Layered Encryption) - ${BINARY}  
  ;;
ecryptfs-migrate-home)  ECRYPTFSMIGRATEFOUND=1; 
ECRYPTFSMIGRATEBINARY=${BINARY};
logtext   Found known binary: ecryptfs-migrate-home (Layered Encryption) - 
${BINARY};;
lvdisplay)  LVDISPLAYBINARY=${BINARY

Bug#742905: No default for no_playlist

2014-03-28 Thread Dave Vehrs
On Fri 28 Mar 2014 02:24:23 PM MDT, Yuri D'Elia wrote:
 Package: podget
 Version: 0.6.16-1
 Severity: normal

 When upgrading podget with an existing config, no_playlist seem to have no
 default and thus the following errors are shown:

 /usr/bin/podget: line 1004: [: -eq: unary operator expected
 
 /usr/bin/podget: line 1066: [: -eq: unary operator expected
 
 /usr/bin/podget: line 1080: [: -eq: unary operator expected

Sorry about that.  Unfortunately I forgot to test that update with an 
older configuration file.  I mistakenly assumed that everyone would 
have my updated version.

Good news is that I have added a default value for no_playlist so it is 
always configured and if you don't have it specified on the command 
line or in your configuration file then it assumes that it should 
create playlists.

I've uploaded an updated version to Debian Mentors and as soon as it 
gets accepted, I will close this bug.

Thank you for the report!

--
Dave Vehrs  dve...@gmail.com


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#742725: RFS: podget/0.6.16-1

2014-03-26 Thread Dave Vehrs
Package: sponsorship-requests
Severity: normal

Dear mentors,

  I am looking for a sponsor for my package podget to help me get a
new version into the repositories so it's easy for users to stay up-to-date.

  Also I'd like to get this uploaded so I can close the bug reported by
Francois Marier which reported that the version of podget in the
repositories is lagging behind the one on Sourceforge.

Bug Report:  https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=742168


 * Package name: podget
   Version : 0.6.16-1
   Upstream Author : Dave Vehrs dve...@gmail.com
 * URL : http://podget.sourceforge.net
 * License : GPL Version 3
   Section : misc

It builds those binary packages:

podget - Podcast aggregrator/downloader optimized for cron

To access further information about this package, please visit the
following URL:

  http://mentors.debian.net/package/podget


Alternatively, one can download the package with dget using this command:

dget -x
http://mentors.debian.net/debian/pool/main/p/podget/podget_0.6.16-1.dsc

More information about hello can be obtained from http://www.example.com.

Changes since the last upload:
podget (0.6.16-1)
  * Added option for to disable playlist creation.
  * Added filename_formatfix10 to extract the podcast episode name from
the enclosure URLs within Apple ITunes feeds.  Thanks to Francois
Marier for reporting the issue.
  * Thanks to Chris Elvidge for helping to find and fix a few bugs with
date_format, and configuration file parsing.
podget (0.6.15-3)
  * Fixed dates in Changelog
podget (0.6.15-2)
  * Updated Standards Version to 3.9.4
  * Fixed error reported by Lintain in the man page.
podget (0.6.15-1)
  * Moved session files to be created and stored in /tmp by default
rather than the old location ${HOME}/.podget.  Also created
dir_session configuration file variable so the user can reassign as
they desire.
  * Added test for ownership of session files so multiple users can use
the same session directory and their sessions won't conflict with
each other.
  * Fixed so that podget can properly handle spaces in filenames.
  * Include patch by Simon Rutishauser to enable export of the server
list as an OPML file.
podget (0.6.14-1)
  * Updated filename format fix checks so that they do not produce an
error if that fix is not defined in your podgetrc.
  * Created filename_formatfix9 to address issues with the Audioboo
feed URL format.  Removes ?keyed=trueamp;source=rss from the
enclosure URL.  Tried to make the string matches as generic as
possible so that it might work for other feeds.  Issue submitted
on Sourceforge as bug #3609600 by Markus. Many thanks!
podget (0.6.13-1)
  * Update to default podgetrc contents to further explain the Smodcast
fixes.
podget (0.6.12-1)
  * Smodcast issue reported by Stephen (stallmer) on Sourceforge in Bug
ID 3605008.  Created filename format fix that works in conjunction
with filename_formatfix4 to resolve the issue.
  * Moved all of the filename format fixes but 1 to a new function.
This clean up the main loop making it easier to understand and
maintain.
podget (0.6.11-1)
  * Update to filename_formatfix to correct for feeds that place the
name of the file to be downloaded in the parameter media_url=.
Issue reported with the Radio France feeds by tom-angoumoisin on
March 6, 2013
  * Experimenting with order of filename format fixes.  Those with more
specific exclusionary conditions go first.  More generic last.
podget (0.6.10-1)
  * Update to filename_formatfix to correct for trailing characters on
enclosures for the zdf.de podcasts.  Issue submitted by Joerg
Schiermeier on Jan 20, 2013.  Thanks.
  * Fixed to display of filenames while marking older podcasts as
downloaded with the --recent option.  Rather than display the
current filename for each item, it would display the last modified
filename repeatedly. Fixed to display the filename of the item
being marked as downloaded.
  * Refined the filename_formatfix to correct filenames downloaded from
Vimcasts.org.  Filename modification is now simpler and easier to
understand.

Many Thanks!
   Dave Vehrs




-- 
Dave Vehrs  dve...@gmail.com


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#742168: podget: New upstream release available

2014-03-26 Thread Dave Vehrs
On Thu 20 Mar 2014 12:17:46 AM MDT, Francois Marier wrote:
 Package: podget
 Version: 0.6.9-1
 Severity: normal

 Version 0.6.15 is available on Sourceforge:

   https://sourceforge.net/projects/podget/files/latest/download

 Francois

OK, I've uploaded a new version to Debian Mentors and submitted a 
request for sponsorship.  Hopefully it will be accepted into the 
repositories soon!

Thanks for reminding me!

--
Dave Vehrs  dve...@gmail.com


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#741876: Lynis: Testing for Encrypted Partitions (via dm-crypt, cryptsetup)

2014-03-16 Thread Dave Vehrs
Package: lynis
Version: 1.4.4-1
Severity: wishlist

Dear Maintainer,

I've created a small function that tests for encrypted partitions via
dm-crypt, cryptsetup and rudimentary support for partitions mounted via
cryptmount.

Unlike my earlier suggestion for the detection Ecryptfs usage, I did not
include these functions in the tests_filesystems and binaries files.  As
the Ecryptfs tests have not been accepted upstream, I wondered if it
wouldn't be more prudent to put the functions into tests_custom.  The
existence of automated support for this file (if it exists) makes it
easier for us to include custom features with Lynis on Debian that can
be submitted for consideration as one file.  Rather than as a few
patches.  This may make it easier for the maintainers to keep track of
what is done locally for Debian.  At least that is what I was thinking

If this is a good idea, should I update this file to include the tests
done for Ecryptfs and remove it from the other files?

Or if it isn't a good idea, should I rewrite these functions to be
patches for the binaries and tests_filesystems files?

I've tested this version of tests_custom on:
- Sid with Lynis version 1.4.4
- Jessie with Lynis version 1.4.0

Appears to work just fine with my limited testing.

Thanks for considering this submission,

Dave V.


-- System Information:
Debian Release: sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.13-1-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

lynis depends on no packages.

Versions of packages lynis recommends:
pn  menu  none

Versions of packages lynis suggests:
ii  dnsutils  1:9.9.5.dfsg-2

-- no debconf information

-- 
Dave Vehrs  dve...@gmail.com
#!/bin/sh

#
#
#   Lynis
# --
#
# Lynis comes with ABSOLUTELY NO WARRANTY. This is free software, and you are
# welcome to redistribute it under the terms of the GNU General Public License.
# See LICENSE file for usage of this software.
#
#
#
#This has already been inserted, but you might reuse it to split your tests
#InsertSection Custom Checks
#
#
# Start by scanning for any tools that will be needed for later custom tests.
# This is predominately a copy of the function from the binaries file with a
# shorter list of files to look for.
#
# Some of the files we search for here are repeated checks from the default
# tests, but we look for them again due to local function dependencies.  It's a
# tiny redundancy that doesn't slow the tests up significantly.

# Test: CUS-0001
# Description : Check for system binaries
# Notes   : Always perform test, other tests depend on it.
Register --test-no CUS-0001 --weight L --network NO --description Check 
for system binaries
SCANNEDPATHS=; N=0
Display --indent 2 --text - Checking for system binaries that are needed 
by custom tests...
logtext Status: Starting binary scan...
for SCANDIR in ${BINPATHS}; do
logtext Test: Checking binaries in directory ${SCANDIR}
if [ -d ${SCANDIR} ]; then
Display --indent 4 --text - Checking ${SCANDIR}...  --result 
FOUND --color GREEN
SCANNEDPATHS=${SCANNEDPATHS}, ${SCANDIR}
logtext Directory ${SCANDIR} exists. Starting directory 
scanning...
FIND=`ls ${SCANDIR}`
for I in ${FIND}; do
N=`expr ${N} + 1`
BINARY=${SCANDIR}/${I}
logtext Binary: ${BINARY}
# Optimized, much quicker (limited file access needed)
case ${I} in
cryptmount) CRYPTMOUNTFOUND=1; 
CRYPTMOUNTBINARY=${BINARY};  
logtext   Found known binary: cryptmount (Encryption tool) - ${BINARY}
  ;;
cryptsetup) CRYPTSETUPFOUND=1; 
CRYPTSETUPBINARY=${BINARY};  
logtext   Found known binary: cryptsetup (Encryption tool) - ${BINARY}
  ;;
lvdisplay)  LVDISPLAYBINARY=${BINARY};
  logtext   
Found known binary: lvdisplay (LVM tool) - ${BINARY}   
   ;;
mount)  MOUNTBINARY=${BINARY};
  logtext   
Fount known binary: mount (File system tool) - ${BINARY

Bug#737173: lynis: Added test to tests_filesystems for Ecryptfs

2014-01-30 Thread Dave Vehrs

Package: lynis
Version: 1.3.9-1
Severity: normal

Dear Maintainer,

I've put together a pair of short patches for your consideration. 
Patches add tests that check if Ecryptfs is installed and if it is, then 
checks if ecryptfs-migirate-home (or other method) has been used to 
configure each user's home directory (UID = 500  != 65534) to use it.


I believe the use of Ecryptfs could be valuable for anyone using a 
laptop or any system with multiple users.  This could add to the 
hardened status of the system that Lynis is testing for many users.


The patch I've worked up is missing a test number (FILE-) that the 
other tests have and may need to be submitted upstream to get one.


What do you think, would this be a worthwhile addition to Lynis?

Thanks,

Dave Vehrs

-- System Information:
Debian Release: jessie/sid
  APT prefers testing-updates
  APT policy: (500, 'testing-updates'), (500, 'testing'), (1, 
'experimental')

Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.12-1-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

lynis depends on no packages.

Versions of packages lynis recommends:
ii  menu  2.1.46

Versions of packages lynis suggests:
ii  dnsutils  1:9.8.4.dfsg.P1-6+nmu3

-- no debconf information

--
Dave Vehrs   dve...@gmail.com

--- binaries.orig	2014-01-27 17:31:06.193667725 -0700
+++ binaries	2014-01-28 20:24:33.913326347 -0700
@@ -69,6 +69,8 @@
 dig)if [ -f ${BINARY} ]; then DIGFOUND=1;  DIGBINARY=${BINARY};   logtext   Found known binary: dig (network/dns tool) - ${BINARY};fi ;;
 dnsdomainname)  DNSDOMAINNAMEFOUND=1;  DNSDOMAINNAMEBINARY=${BINARY};   logtext   Found known binary: dnsdomainname (DNS domain) - ${BINARY};;
 domainname) DOMAINNAMEFOUND=1; DOMAINNAMEBINARY=${BINARY};  logtext   Found known binary: domainname (NIS domain) - ${BINARY}   ;;
+ecryptfsd)  ECRYPTFSDFOUND=1;  ECRYPTFSDBINARY=${BINARY};   logtext   Found known binary: ecryptfsd (Layered Encryption) - ${BINARY} ;;
+ecryptfs-migrate-home)  ECRYPTFSMIGRATEFOUND=1; ECRYPTFSMIGRATEBINARY=${BINARY};  logtext   Found known binary: ecryptfs-migrate-home (Layered Encryption) - ${BINARY} ;;
 exim)   EXIMFOUND=1;   EXIMBINARY=${BINARY}; EXIMVERSION=`${BINARY} -bV | grep 'Exim version' | awk '{ print $3 }' | xargs`; logtext Found ${BINARY} (version ${EXIMVERSION})   ;;
 find)   FINDFOUND=1;   FINDBINARY=${BINARY};logtext   Found known binary: find (search tool) - ${BINARY};;
 g++)GPLUSPLUSFOUND=1;  GPLUSPLUSBINARY=${BINARY};COMPILER_INSTALLED=1;  logtext   Found known binary: g++ (compiler) - ${BINARY};;
--- tests_filesystems.orig	2014-01-27 17:20:14.749679392 -0700
+++ tests_filesystems	2014-01-29 16:20:52.128727221 -0700
@@ -558,6 +558,72 @@
 #
 #
 
+# Test: FILE-
+# Description : (LINUX) Check if user home directories are encrypted with ecryptfs
+# Notes   : Ecryptfs is useful on multi-user systems.  Can be configured
+#   so that files in the users home directories are only
+#   decrypted while the user is logged in.
+#
+#   This function adds hardening points according to the
+#   following criteria:
+#  +1 Ecryptfs Installed
+#  +1 for each user account that can be configured to use it.
+if [ ${OS} = Linux ]; then
+if [ ! ${ECRYPTFSDBINARY} =  ]; then PREQS_MET=YES; else PREQS_MET=NO; fi
+Register --test-no FILE- --os Linux --preqs-met ${PREQS_MET} --weight L --network NO --description Checking for Ecryptfs
+if [ ${SKIPTEST} -eq 0 -a ! ${ECRYPTFSDBINARY} =  ]; then
+Display --indent 2 --text - Ecryptfs --result INSTALLED --color GREEN
+logtext Ecryptfs installed.
+logtext Test: If user home directories are configured to use Ecryptfs
+AddHP 1 1
+USERLIST=`awk -F: '($3  500)  ($3 != 65534) { print $1,$6 }' /etc

Bug#737173: lynis: Added test to tests_filesystems for Ecryptfs (Additional Info)

2014-01-30 Thread Dave Vehrs

Hi,

Forgot to mention that I've tested these patches with version 1.3.9 on 
Debian Jessie and Sid.


I've also downloaded version 1.4.0 from the upstream site and verified 
that these patches should work with it as well.


--
Dave Vehrs   dve...@gmail.com


--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#736197: lynis: tests_scheduling does not check for anacrontab jobs

2014-01-20 Thread Dave Vehrs

Package: lynis
Version: 1.3.9-1
Severity: normal

Dear Maintainer,

While reviewing the test_scheduling script for Lynis, I realized that 
while it had fairly comprehensive tests for cron jobs it did not include 
tests for jobs called from /etc/anacrontab.  I worked up a quick patch 
that adds equivalent tests for anacrontab as existed for crontabs.


I've attached the patch I worked up for consideration.

Thanks again,

Dave Vehrs

-- System Information:
Debian Release: jessie/sid
  APT prefers testing-updates
  APT policy: (500, 'testing-updates'), (500, 'testing'), (1, 
'experimental')

Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.12-1-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

lynis depends on no packages.

Versions of packages lynis recommends:
ii  menu  2.1.46

Versions of packages lynis suggests:
ii  dnsutils  1:9.8.4.dfsg.P1-6+nmu3

-- no debconf information

--
Dave Vehrs   dve...@gmail.com
--- tests_scheduling.orig	2014-01-20 14:19:05.039833428 -0700
+++ tests_scheduling	2014-01-20 14:47:46.557432597 -0700
@@ -113,6 +113,18 @@
 fi
 fi
 Display --indent 2 --text - Checking crontab/cronjob --result DONE --color GREEN
+
+## Anacron on Linux
+if [ ${OS} = Linux ]; then
+if [ -f /etc/anacrontab ]; then
+sANACRONJOBS=`egrep '^([0-9@])' /etc/anacrontab | tr '\t' ' ' | tr -s ' ' | tr ' ' ','`
+for J in ${sANACRONJOBS}; do
+logtext Found anacron job (/etc/anacrontab): ${J}
+done
+Display --indent 2 --text - Checking anacrontab --result DONE --color GREEN
+fi
+fi
+
 fi
 #
 #


Bug#736115: lynis: Minor egrep misconfiguration checking for crontab jobs

2014-01-19 Thread Dave Vehrs

Package: lynis
Version: 1.3.9-1
Severity: normal

Dear Maintainer,

I've encountered a small misconfiguration in an egrep search in a lynis 
script.  When checking for crontab jobs, the script tests_scheduling 
checks for lines that start with [0-9], and while this is appropriate 
for most cases, it misses two that may still be an issue.  Both cases 
involve when the crontab line starts with an '*'.


If the job in question should run every minute (so is just '*'), then 
the line will be missed by the egrep test.


The second issue is if the job in question should run at a specified 
interval, such as every 15 minutes.  That will be specified a */15 and 
will also be missed.


I've been able to fix this issue by simply adding an '*' to the 
characters to be searched by egrep.  (patch attached)  With that simple 
change, it catches both of the missed crontab lines.


Thank you for your attention to this minor issue,

Dave Vehrs


-- System Information:
Debian Release: jessie/sid
  APT prefers testing-updates
  APT policy: (500, 'testing-updates'), (500, 'testing'), (1, 
'experimental')

Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.12-1-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

lynis depends on no packages.

Versions of packages lynis recommends:
ii  menu  2.1.46

Versions of packages lynis suggests:
ii  dnsutils  1:9.8.4.dfsg.P1-6+nmu3

-- no debconf information

--
Dave Vehrs   dve...@gmail.com
--- tests_scheduling.orig	2014-01-19 13:29:05.389660917 -0700
+++ tests_scheduling	2014-01-19 13:30:03.382641879 -0700
@@ -32,7 +32,7 @@
 if [ ${SKIPTEST} -eq 0 ]; then
 FindCronJob()
   {
-sCRONJOBS=`egrep '^([0-9])' $1 | tr '\t' ' ' | tr -s ' ' | tr ' ' ','`
+sCRONJOBS=`egrep '^([0-9*])' $1 | tr '\t' ' ' | tr -s ' ' | tr ' ' ','`
   }


Bug#736115: More Information.

2014-01-19 Thread Dave Vehrs
This blog report got me wondering if Lynis tested for and would report 
these crontab events.  Unfortunately it did not, and that is when I 
determined the problem was with the pattern egrep was searching for.


http://blog.sucuri.net/2014/01/the-hidden-backdoors-to-the-city-of-cron.html


--
Dave Vehrs   dve...@gmail.com


--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#726826: lynis: Lynis fails to check a few places NTP client might be configured.

2013-10-19 Thread Dave Vehrs
Package: lynis
Version: 1.3.2-1
Severity: normal
Tags: patch

Dear Maintainer,

I've run into a pair of small problems with the way Lynis is testing for
configured NTP clients.

The first problem I encountered was on my laptop, because this machine is
running intermittently I have my NTP client configured in
/etc/anacrontab and
not in /etc/crontab.  The second file was being checked by Lynis but not
the first and so was
missed on my system.

The second problem I encountered was on a few servers I manage.  On them, I
have my NTP client set to run from /etc/cron.daily but Lynis only checks
/etc/cron.d and /var/spool/crontab.  I was able to add a small loop that
then
checks /etc/cron.d, /etc/cron.hourly, /etc/cron.daily, /etc/cron.weekly,
/etc/cron.monthly and /var/spool/crontab.  This should allow a user to
configure his NTP client to run based on what is appropriate to
compensate for
the time drift of his system.

I have included a patch that includes fixes for both problems for your
consideration.  Is this the type of change Lynis should make on Debian?

Thank you,

Dave Vehrs

-- System Information:
Debian Release: jessie/sid
  APT prefers unstable
  APT policy: (990, 'unstable'), (1, 'experimental')
Architecture: i386 (i686)

Kernel: Linux 3.10-1-686-pae (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

lynis depends on no packages.

Versions of packages lynis recommends:
ii  menu  2.1.46

Versions of packages lynis suggests:
ii  dnsutils  1:9.9.3.dfsg.P2-4

-- no debconf information

*** tests_time.patch
--- tests_time.orig 2013-10-19 08:46:21.0 -0600
+++ tests_time  2013-10-19 09:07:42.0 -0600
@@ -50,55 +50,72 @@
Display --indent 2 --text - Checking running NTP
daemon... --result NOT FOUND --color WHITE
fi

-# Check crontab for OpenBSD/FreeBSD
-   if [ -f /etc/crontab ]; then
-   FIND=`cat /etc/crontab | egrep ntpdate|rdate | grep -v '^#'`
-   if [ ! ${FIND} =  ]; then
-   FOUND=1;
-   Display --indent 2 --text - Checking NTP client in
crontab file... --result FOUND --color GREEN
- else
-   Display --indent 2 --text - Checking NTP client in
crontab file... --result NOT FOUND --color WHITE
-   fi
-   fi
-
-   # Don't run check in cron job directory on Solaris
-   # /etc/cron.d/FIFO is a special file and test get stuck at this file
-   if [ ! ${OS} = Solaris ]; then
-   # Check cron jobs
-   if [ -d /etc/cron.d ]; then
-   FIND=`ls /etc/cron.d`
-   if [ ! ${FIND} =  ]; then
-   FIND2=`egrep rdate|ntpdate /etc/cron.d/*`
-   if [ ! ${FIND2} =  ]; then
-   FOUND=1;
-   Display --indent 2 --text - Checking NTP client
in cron.d files... --result FOUND --color GREEN
-   logtext Result: found ntpdate or rdate in
/etc/cron.d directory
-   logtext Output: ${FIND2}
- else
-   Display --indent 2 --text - Checking NTP client
in cron.d files... --result NOT FOUND --color WHITE
-   fi
- else
-   logtext Result: /etc/cron.d is empty, skipping
search in cron.d directory
-   fi
-   fi
+# If not already found, check files.
+   if [ ${FOUND} -eq 0 ]; then
+# Check if ntpdate or rdate are scheduled for execution in
various crontab files for OpenBSD/FreeBSD/Linux
+logtext Test: Searching for scheduled ntpdate or rdate
execution in a few files...
+for FILE in \
+/etc/crontab \
+/etc/anacrontab; do
+# Check if file exists
+if [ -f ${FILE} ]; then
+# Check if rdate or ntpdate are configured to run in FILE
+FIND=`cat ${FILE} | egrep ntpdate|rdate | grep -v '^#'`
+if [ ! ${FIND} =  ]; then
+FOUND=1
+Display --indent 2 --text - Checking for NTP
client in ${FILE} file... --result FOUND --color GREEN
+logtext Result: found ntpdate or rdate in ${FILE}
file
+logtext Output: ${FIND}
+else
+Display --indent 2 --text - Checking for NTP
client in ${FILE} file... --result NOT FOUND --color WHITE
+fi
+else
+logtext Result: ${FILE} does not exist, skipping search.
+fi
+done
+fi

-   if [ -d /var/spool/crontabs ]; then
-   FIND=`ls /var/spool/crontabs`
-   if [ ! ${FIND} =  ]; then
-   FIND2=`egrep rdate|ntpdate /var/spool/crontabs/*`
-   if [ ! ${FIND2} =  ]; then
-   FOUND=1;
-   Display --indent 2 --text - Checking NTP client
in crontabs files... --result FOUND

Bug#720057: RFS: podget/0.6.15-2

2013-08-17 Thread Dave Vehrs
Package: sponsorship-requests
Severity: normal [important for RC bugs, wishlist for new packages]


Dear mentors,

  I am looking for a sponsor for my package podget

 * Package name: podget
   Version : 0.6.15-2
   Upstream Author : Dave Vehrs dve...@gmail.com
 * URL : https://sourceforge.net/projects/podget/
 * License : GPL version 3.0
   Section : misc

  It builds those binary packages:

podget - Podcast aggregrator/downloader optimized for cron

  To access further information about this package, please visit the following 
URL:

  http://mentors.debian.net/package/podget


  Alternatively, one can download the package with dget using this command:

dget -x 
http://mentors.debian.net/debian/pool/main/p/podget/podget_0.6.15-2.dsc

  More information about hello can be obtained from http://www.example.com.

  Changes since the last upload:

  * Updated Standards Version to 3.9.4
  * Fixed error reported by Lintain in the man page.
  * Moved session files to be created and stored in /tmp by default rather than
the old location ${HOME}/.podget.  Also created dir_session configuration
file variable so the user can reassign as they desire.
  * Added test for ownership of session files so multiple users can use the
same session directory and their sessions won't conflict with each other.
  * Fixed so that podget can properly handle spaces in filenames.
  * Include patch by Simon Rutishauser to enable export of the server list as an
OPML file.  

Regards,
   
Dave Vehrs


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#699723: RFS: podget/0.6.10-1

2013-02-03 Thread Dave Vehrs

Package: sponsorship-requests
Severity: normal

Dear mentors,

I am looking for a sponsor for my package podget

I received a request from a user (who also uses Debian!) for a small 
update for which I was
able to implement fairly easily.  We've tested it and everything seems 
ready to distribute.


I also included a couple of refinements that help improve the package.

* Package name: podget
  Version : 0.6.10-1
  Upstream Author : Dave Vehrs dve...@gmail.com
* URL : https://sourceforge.net/projects/podget/
* License : GPL version 3
  Section : misc

It builds those binary packages:

  podget - Podcast aggregrator/downloader optimized for cron

To access further information about this package, please visit the 
following URL:


http://mentors.debian.net/package/podget


Alternatively, one can download the package with dget using this command:

  dget -x 
http://mentors.debian.net/debian/pool/main/p/podget/podget_0.6.10-1.dsc


More information about hello can be obtained from http://www.example.com.

Changes since the last upload:

  * Update to filename_formatfix to correct for trailing characters on
enclosures for the zdf.de podcasts.  Issue submitted by Joerg 
Schiermeier on

Jan 20, 2013.  Thanks.
  * Fixed to display of filenames while marking older podcasts as 
downloaded
with the --recent option.  Rather than display the current filename 
for
each item, it would display the last modified filename repeatedly.  
Fixed

to display the filename of the item being marked as downloaded.
  * Refined the filename_formatfix to correct filenames downloaded from
Vimcasts.org.  Filename modification is now simpler and easier to
understand.

Regards,
   Dave Vehrs


--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#683473: RFS: podget/Update to version 0.6.9-1

2012-12-29 Thread Dave Vehrs

Hi all,

Submitted an updated version of podget to Debian Mentors and I'm still 
looking for sponsorship.


This update addresses two issues submitted by users, which are:

  * Update to filename_formatfix to correct for ?referrer=rss being 
added to
all filenames downloaded from Vimcasts.org.  Bug submitted by Andi 
(apoisel)

on Dec 19, 2012.
  * Update to use mktemp to create temporary file for playlist sorting.  If
mktemp is not available, the script falls back to trying to use 
tempfile.

Bug submitted by Scheini-72 on Aug 20, 2012.

Many thanks to them.

* Package name: podget
  Version : 0.6.9-1
  Upstream Author : Dave Vehrs
* URL : http://podget.sourceforge.net
* License : GPL v3
  Section : misc

To access further information about this package, please visit the 
following URL:


http://mentors.debian.net/package/podget

Alternatively, one can download the package with dget using this command:

  dget -x 
http://mentors.debian.net/debian/pool/main/p/podget/podget_0.6.9-1.dsc


More information about podget can be obtained from 
http://podget.sourceforge.net


Thank you for your consideration,

Dave Vehrs


--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#582186: podget: unix2dos moved into tofrodos, now called fromdos

2012-12-29 Thread Dave Vehrs


Updated package so it requires unix2dos.  Package has be submitted for a 
request for sponsorship so as soon as it is accepted, I will close this 
report.


Belated thanks!

Dave


--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#641803: podget: playlists are always empty

2012-12-29 Thread Dave Vehrs
Updated this fix to include a check for mktemp in addition to temfile.  
So it should work for people who have either.


This patch will be including in version 0.6.9, for which I submitted a 
request for sponsorship.  Here's hoping we get it soon!


Dave Vehrs


--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#459949: podget doesn't deal well with constant filename parts in URI

2012-12-29 Thread Dave Vehrs

Tags: Fixed

Marking this bug as 'fixed' as it has been for a while and I've 
submitted a new version for sponsorship.  Here's hoping the new version 
is accepted soon.


Thanks to all!

Dave Vehrs


--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#448994: podget: uncommenting playlist_namebase doesn't work

2012-12-29 Thread Dave Vehrs

tag: fixed

Submitted a new version and request for sponsorship that includes these 
fixes.  Marking bug as fixed.


Thanks,

Dave Vehrs


--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#683473: RFS: podget/0.6.7-1 - Update to version 0.6.8-12

2012-12-03 Thread Dave Vehrs

Hi all,

Submitted a few updates to Debian Mentors for this package.  Filed a new 
RFS (#694968) and was correctly informed to continue using the old one.  
So here goes...


Addressed the errors reported by the QA process and Bart Martens.

* Package name: podget
  Version : 0.6.8-12
  Upstream Author : Dave Vehrs
* URL : http://podget.sourceforge.net
* License : GPL v3
  Section : misc

To access further information about this package, please visit the 
following URL:


http://mentors.debian.net/package/podget

Alternatively, one can download the package with dget using this command:

  dget -x 
http://mentors.debian.net/debian/pool/main/p/podget/podget_0.6.8-12.dsc


More information about podget can be obtained from 
http://podget.sourceforge.net


Thank you for your consideration,

Dave Vehrs


--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#694968: RFS: podget/0.6.8-12

2012-12-02 Thread Dave Vehrs

Package: sponsorship-requests
Severity: normal

Dear mentors,

I am looking for a sponsor for my package podget.

There has been an older version included in the Debian repositories but 
it is a
little out of date.  This package is an update that covers all that has 
been

fixed in the last 5 years.

If there is anything else that needs to be fixed, let me know and I'll 
get on it!


* Package name: podget
  Version : 0.6.8-12
  Upstream Author : Dave Vehrs
* URL : http://podget.sourceforge.net
* License : GPL v3
  Section : misc

It builds these binary packages:

  podget - Podcast aggregrator/downloader optimized for cron

To access further information about this package, please visit the 
following URL:


http://mentors.debian.net/package/podget


Alternatively, one can download the package with dget using this command:

  dget -x 
http://mentors.debian.net/debian/pool/main/p/podget/podget_0.6.8-12.dsc


More information about podget can be obtained from 
http://podget.sourceforge.net


Changes since the last upload:

  Version 0.6.8 has focused on changes needed for the Debian Package.  
This is the

  fifth revision and I believe it is now ready to go.

  The last version to be accepted for the Debian repositories was 
0.5.8.  Since then,

  there have been the following changes:

  podget (0.6.8) unstable; urgency=low

  * Updates for Debian Package.
  * Fixed version string in podget to be 0.6.8

   -- Dave Vehrs dve...@gmail.com  Sat, 2 Dec 2012 11:29:30 -0700

  podget (0.6.7) unstable; urgency=low

  * Fixed Bug #3146457 reported on Sourceforge by oaolsen.  Fixes urls 
with

ampersands in them. Thanks.
  * Fixed Bug #3021524 reported on Sourceforge by thebreaker.  Fixes 
running

session detection. Thanks.
  * Fixed podgets verbosity with a patch submitted by Norman Rasmussen. 
And

fixed my email address in the script. Thanks.

   -- Dave Vehrs dve...@gmail.com Sat, 14 Apr 2012 11:28:55 -0700

  podget (0.6.6) unstable; urgency=low

  * Fixed Bug #666149 reported by Elena Grandi via the Debian reporting 
system.
Playlist names were being created with spaces that would break some 
lines.

Added quotes to prevent. Thanks.

   -- Dave Vehrs dve...@gmail.com Wed, 4 Apr 2012 15:47:55 -0700

  podget (0.6.5) unstable; urgency=low

  * Added version reporting flags (-V or --version), so people can test 
to see

what version they have installed.

   -- Dave Vehrs dve...@gmail.com Wed, 4 Apr 2012 15:30:00 -0700

  podget (0.6.4) unstable; urgency=low

  * Fixed enclosure bug.
  * Fixed error checking for successful wget run.

   -- Dave Vehrs dve...@gmail.com Fri, 19 Nov 2011 10:44:00 -0700

  podget (0.6.3) unstable; urgency=low

  * Fixed tempfile bug/typo.
  * Fixed -f and --force to redownload existing files, including fix to
wget base options.

   -- Dave Vehrs dve...@gmail.com Fri, 18 Nov 2011 11:29:02 -0700

  podget (0.6.2) unstable; urgency=low

  * Added use of the tempfile command to the playlist sorting per Renalt
Sabitov's idea and bug report (via Debian).

   -- Dave Vehrs dve...@gmail.com Fri, 16 Sep 2011 18:00:19 -0700

  podget (0.6.1) unstable; urgency=low

  * Various fixes for Debian Lintain reports.

   -- Dave Vehrs dve...@gmail.com Wed, 14 Sep 2011 12:56:19 -0700

  podget (0.6) unstable; urgency=low

  * Added date substitutions to the feed category per David Willmore's
feature request (#1652606).  Thanks.
  * Reversed order of filename character modifications and format fixing.
  * Fixed error reports to go to stderr.
  * Added more custom error/exit codes to simplify debugging.
  * Added another filename format fix for feeds from LBC Plus per
MoonUnit's feature request (#1660764).  Thanks.
  * Fixed playlist sorting to prevent a race condition in some 
implementations

of the sort command as suggested by Cameron Paine. Thanks.
  * Fixed Indexfile creation for Podcast feeds that have the enclosure URL
broken over multiple lines as suggested by Colin Carter. Thanks.
  * Modified Session file messaging to clearer report when old session 
files

were removed.
  * Fixed -r (most recent) and -f (force) command line options to override
the defaults stored in the user configuration files.  Thanks to Jim C.
for reporting the bug and providing a potential patch.
  * Wrapped eval statement on line 422 in quotes to try to fix an OBSD 
error.

  * Changed install command --mode flags to -m in the Makefile so that it
would be OBSD compatible.
  * Changed #!/bin/bash to #!/usr/bin/env bash so that its more cross 
platform

compatible.
  * Moved test for configuration directory to before creation of 
session file

so it has a place to store the session file.
  * Added Filename Format fix for podcasts hosted on Catradio.cat per 
Oriol

Rius's Bug Report (#1744705). Thanks.
  * Fixed Filesystem paths including spaces crash the podget script 
(Bug#

1889724) submitted

Bug#694900: RFS: podget/0.6.8-5

2012-12-01 Thread Dave Vehrs

Package: podget
Version: 0.6.8-5
Severity: normal

Dear mentors,

I am looking for a sponsor for my package podget.

There has been an older version included in the Debian repositories but 
it is a
little out of date.  This package is an update that covers all that has 
been

fixed in the last 5 years.

If there is anything else that needs to be fixed, let me know and I'll 
get on it!


* Package name: podget
  Version : 0.6.8-5
  Upstream Author : Dave Vehrs
* URL : http://podget.sourceforge.net
* License : GPL v3
  Section : misc

It builds these binary packages:

  podget - Podcast aggregrator/downloader optimized for cron

To access further information about this package, please visit the 
following URL:


http://mentors.debian.net/package/podget


Alternatively, one can download the package with dget using this command:

  dget -x 
http://mentors.debian.net/debian/pool/main/p/podget/podget_0.6.8-5.dsc


More information about podget can be obtained from 
http://podget.sourceforge.net


Changes since the last upload:

  Version 0.6.8 has focused on changes needed for the Debian Package.  
This is the

  fifth revision and I believe it is now ready to go.

Regards,
   Dave Vehrs


--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#693705: package not updated in over 5 years

2012-11-20 Thread Dave Vehrs

Hello Raf,

I have tried to submit updates via Debian Mentors but the packages 
always seem to be denied for various reasons.  The latest update seems 
to have just a couple issues that should be fairly easily fixable.  I 
hope to have them fixed and an update submitted for consideration soon.


Wish me luck!

Dave

On 11/19/2012 07:52 AM, Raf Czlonka wrote:

Package: podget
Version: 0.5.8-1
Severity: wishlist

Hi Dave,

The version of 'podget' in Debian repository hasn't changed in a long
time. 0.5.8-1 is the package version available in all: oldstable,
stable, testing and unstable.

This version of podget has been released nearly 6 years ago and there
have been several realeses since then, with the newest one (0.6.7)
being released over half a year ago.

Over the years the package accumulated several bugs which haven't been
fixed or have been dealt with upstream but not fixed in the package.

There's also a similar bug report in Ubuntu filed over a year and
a half ago [0].

Considering all of the above but mostly the fact that you are also
the upstream developer it seems that enthusiasm to maintain the
package after uploading it to Debian repository has waned quite
quickly.

Do you have any plans updating the package?

[0] https://bugs.launchpad.net/ubuntu/+source/podget/+bug/715505

Kind regards,

Raf

-- System Information:
Debian Release: wheezy/sid
   APT prefers unstable
   APT policy: (999, 'unstable'), (500, 'testing-proposed-updates'), (500, 
'stable-updates'), (500, 'testing'), (1, 'experimental'), (1, 'stable')
Architecture: powerpc (ppc)

Kernel: Linux 3.2.0-4-powerpc
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages podget depends on:
ii  bash   4.2-5
ii  coreutils  8.13-3.2
ii  grep   2.14-1
ii  sed4.2.1-10
ii  tofrodos   1.7.9.debian.1-1
ii  wget   1.14-1

podget recommends no packages.

Versions of packages podget suggests:
ii  libc6  2.13-37

-- no debconf information



--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#683356: closed by Bart Martens ba...@debian.org (RFP: podget)

2012-07-31 Thread Dave Vehrs

On 07/30/2012 11:39 PM, Debian Bug Tracking System wrote:

This is an automatic notification regarding your Bug report
which was filed against the wnpp package:

#683356: RFP: podget -- Podcast aggregrator/downloader optimized for cron

It has been closed by Bart Martensba...@debian.org.

Their explanation is attached below along with your original report.
If this explanation is unsatisfactory and you have not received a
better one in a separate message then please contact Bart 
Martensba...@debian.org  by
replying to this email.



You said:

Is already in Debian.
http://packages.qa.debian.org/p/podget.html

This is true. Version 0.5.8-1 is already in the Debian Repositories.  However, 
what I am requesting is for version 0.6.7 to be accepted and uploaded to the 
repositories.

From the changelog, the following issues have been addressed:

 podget (0.6.7-1) unstable; urgency=low

  * Fixed Bug #3146457 reported on Sourceforge by oaolsen.  Fixes urls with
ampersands in them. Thanks.
  * Fixed Bug #3021524 reported on Sourceforge by thebreaker.  Fixes running
session detection. Thanks.
  * Fixed podgets verbosity with a patch submitted by Norman Rasmussen. And
fixed my email address in the script. Thanks.

podget (0.6.6-1) unstable; urgency=low

  * Fixed Bug #666149 reported by Elena Grandi via the Debian reporting system.
Playlist names were being created with spaces that would break some lines.
Added quotes to prevent.

podget (0.6.5-1) unstable; urgency=low

  * Added version reporting flags (-V or --version), so people can test to see
what version they have installed.

podget (0.6.4-1) unstable; urgency=low

  * Fixed enclosure bug.
  * Fixed error checking for successful wget run.

podget (0.6.3-1) unstable; urgency=low

  * Fixed tempfile bug/typo.
  * Fixed -f and --force to redownload existing files, including fix to
wget base options.

podget (0.6.2-1) unstable; urgency=low

  * Added use of the tempfile command to the playlist sorting per Renalt
Sabitov's idea and bug report (via Debian).

podget (0.6.1-1) unstable; urgency=low

  * Various fixes for Debian Lintain reports.

podget (0.6) unstable; urgency=low

  * Added date substitutions to the feed category per David Willmore's
feature request (#1652606).  Thanks.
  * Reversed order of filename character modifications and format fixing.
  * Fixed error reports to go to stderr.
  * Added more custom error/exit codes to simplify debugging.
  * Added another filename format fix for feeds from LBC Plus per
MoonUnit's feature request (#1660764).  Thanks.
  * Fixed playlist sorting to prevent a race condition in some implementations
of the sort command as suggested by Cameron Paine. Thanks.
  * Fixed Indexfile creation for Podcast feeds that have the enclosure URL
broken over multiple lines as suggested by Colin Carter.  Thanks.
  * Modified Session file messaging to clearer report when old session files
were removed.
  * Fixed -r (most recent) and -f (force) command line options to override
the defaults stored in the user configuration files.  Thanks to Jim C.
for reporting the bug and providing a potential patch.
  * Wrapped eval statement on line 422 in quotes to try to fix an OBSD error.
  * Changed install command --mode flags to -m in the Makefile so that it
would be OBSD compatible.
  * Changed #!/bin/bash to #!/usr/bin/env bash so that its more cross platform
compatible.
  * Moved test for configuration directory to before creation of session file
so it has a place to store the session file.
  * Added Filename Format fix for podcasts hosted on Catradio.cat per Oriol
Rius's Bug Report (#1744705). Thanks.
  * Fixed Filesystem paths including spaces crash the podget script (Bug#
1889724) submitted by Anonymous. Thanks.
  * Fixed Some filenames cause podget to fail (Patch#1845815) submitted by
Anonymous. Thanks.
  * Fixed error with playlist loading submitted by Markus.  Thanks.
  * Added a filename format fix as suggested by Rob Sims via the Debian Bug
Reporting System (http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=459949,
Bug#459949). Thanks.
  * Added SCRIPTS directory for user submitted scripts.  First script is from
Steven Black and allows for easy addition of feeds from within Firefox.
Thanks.
  * Added patch from Steven Black to fix problem handling single apostrophes in
filenames.  Thanks again.


As you can see there have been many fixes over the last couple years and it 
would be good to get the updated version into the repositories.

Tar.GZ of the files at:
http://sourceforge.net/projects/podget/files/podget/podget-0.6.7/podget-0.6.7.tar.gz/download

My attempt at a Debian package can be found at:
http://sourceforge.net/projects/podget/files/podget/podget-0.6.7/podget_0.6.7-1_all.deb/download

Is it possible to get the updated version uploaded?  Or am I submitting it 
wrong?  If so can you point me in the right 

Bug#683473: RFS: podget/0.6.7-1

2012-07-31 Thread Dave Vehrs
 of feeds from within Firefox.
Thanks.
  * Added patch from Steven Black to fix problem handling single apostrophes in
filenames.  Thanks again.

 -- Dave Vehrsdve...@gmail.com   Sun, 25 Apr 2010 12:28:39 -0700



  Thanks in advance for all your help,
   Dave Vehrs


--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#683356: RFP: podget -- Podcast aggregrator/downloader optimized for cron

2012-07-30 Thread Dave Vehrs
Package: wnpp
Severity: wishlist

* Package name: podget
  Version : 0.6.7
  Upstream Author : Dave Vehrs dve...@gmail.com
* URL : http://sourceforge.net/projects/podget/files/podget/
* License : GPL
  Programming Lang: Bash
  Description : Podcast aggregrator/downloader optimized for cron

 Podget is a simple podcast aggregator optimized for running as a scheduled
 background job (i.e. cron). It features support for downloading podcasts
 from RSS  XML feeds, for sorting the files into folders 
 categories, for importing URLs from iTunes PCAST files  OPML lists
 automatic M3U  ASX playlist creation, and automatic cleanup of old files.
 It also features automatic UTF-16 conversion for podcasts hosted on MS
 Windows servers.

 I have packaged several updates to the podget package that I could use the 
 help of a mentor to get submitted to the Debian repositories.  I've had 
 several requests from people affected by bugs in the old version that is 
 currently in the repositories.  This version should address many, if not 
 all of those issues,  Files in both a tar and my attempt at a Debian package 
 can be found at the above URL.  

 Thanks in advance for your  help!

 Dave V


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#666149: podget: Playlist generation failure when there are spaces in the filename

2012-04-04 Thread Dave Vehrs
On Thu, 2012-03-29 at 09:01 +, Elena ``of Valhalla'' Grandi wrote:
 Playlist generation failure when there are spaces in the filename

I believe I've patched podget as you described to fix this bug. 

I've uploaded updated packages onto http://podget.sourceforge.net and
used dput to upload them to ftp.incoming.debian.org.  However I am not
an official Debian maintainer so I need help getting the updates into
the repositories.  I've used reportbug to request help so hopefully it
won't be long.

Thank you for the bug report and your interest in podget!

Dave Vehrs




-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#649084: -f/--force option doesn't work at all

2011-11-18 Thread Dave Vehrs
OK, the -f or --force  appear to be working here but that's because I
haven't gotten a new version uploaded into Debian for a while (you
have version 0.5.8 and I'm on 0.6.2).  I've uploaded a new version
with dput and requested help to upload it through reportbug.  So
hopefully this will take care of the first issue.

I'm looking into adding -vv, etc for the various verbosity levels.
Hopefully that will follow soon.

Thanks for the report and I'm sorry I didn't keep it up to date.

Dave

On Thu, Nov 17, 2011 at 5:35 AM, Raf Czlonka rafal.czlo...@gmail.com wrote:
 Package: podget
 Version: 0.5.8-1
 Severity: normal

 Hi,

 I've been using podget for a while now. Today I started filesystem
 cleanup, searching for empty files and directories amongst other things.
 Some playlists were empty which I guess is related to the bug reported
 earlier.
 What surprised me though was the fact that some of the files were empty
 as well. I remembered that there's an option to download files which
 have already been downloaded so I looked in the manual.
 I expected that some of the files might not be available for download
 any more, since they might have gotten removed form a particular feed,
 but I was expecting all the files which are still available to be
 re-downloaded. To my surprise podget only reported that the files have
 already been downloaded.
 To summarise, force option (either -f or --force) doesn't work at all.

 P.S. Could we get -v behaviour, known from other utilities, implemented
 in podget as well, please? I mean the --verbosity LEVEL equivalent when
 one simply uses -vv, -vvv, etc.

 Regards,

 Raf

 -- System Information:
 Debian Release: wheezy/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'testing'), (500, 'stable'), (1, 
 'experimental')
 Architecture: powerpc (ppc)

 Kernel: Linux 3.0.0-2-powerpc
 Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8)
 Shell: /bin/sh linked to /bin/dash

 Versions of packages podget depends on:
 ii  bash       4.1-3
 ii  coreutils  8.13-3
 ii  grep       2.9-2
 ii  sed        4.2.1-9
 ii  tofrodos   1.7.9.debian.1-1
 ii  wget       1.13.4-1

 podget recommends no packages.

 Versions of packages podget suggests:
 ii  libc6  2.13-21

 -- no debconf information






--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#641803: podget: playlists are always empty

2011-09-16 Thread Dave Vehrs
Actually had this fixed in the Sourceforge version of Podget but I
liked your use of the tempfile command.  So I modified my version to
use it as well and modified the Debian requirements to include
debianutils.

I will be submitting a new version to mentors.debian.net to update the
version in Debian soon.

Thank you and I'll let you know when its acceoted,

Dave

On Fri, Sep 16, 2011 at 4:52 AM, Renat Sabitov s...@srr.pp.ru wrote:
 Package: podget
 Version: 0.5.8-1
 Severity: normal

 Playlists created by podget are always empty. The problem is in the buggy 
 pipe which takes data from the same file that it uses to put data back. Patch 
 is available:


 --- /usr/bin/podget.old 2011-09-16 14:29:17.0 +0400
 +++ /usr/bin/podget     2011-09-16 14:32:46.0 +0400
 @@ -623,7 +623,10 @@

     # Sort new playlist
     if [ -e $dir_library/$playlist_name ] ; then
 -        cat $dir_library/$playlist_name | sort  
 $dir_library/$playlist_name
 +       PL_TMP=`tempfile`
 +        cat $dir_library/$playlist_name | sort  $PL_TMP
 +       cat $PL_TMP  $dir_library/$playlist_name
 +       rm $PL_TMP

         # Create ASX Playlist
         if [ ${asx_playlist} -gt 0 ] ; then



 -- System Information:
 Debian Release: 6.0.2
  APT prefers stable
  APT policy: (500, 'stable')
 Architecture: i386 (i686)

 Kernel: Linux 2.6.32-5-486
 Locale: LANG=ru_RU.UTF-8, LC_CTYPE=ru_RU.UTF-8 (charmap=UTF-8) (ignored: 
 LC_ALL set to ru_RU.UTF-8)
 Shell: /bin/sh linked to /bin/dash

 Versions of packages podget depends on:
 ii  bash                    4.1-3            The GNU Bourne Again SHell
 ii  coreutils               8.5-1            GNU core utilities
 ii  grep                    2.6.3-3          GNU grep, egrep and fgrep
 ii  sed                     4.2.1-7          The GNU sed stream editor
 ii  tofrodos                1.7.8.debian.1-2 Converts DOS - Unix text files,
 ii  wget                    1.12-2.1         retrieves files from the web

 podget recommends no packages.

 Versions of packages podget suggests:
 ii  libc6                         2.11.2-10  Embedded GNU C Library: Shared 
 lib

 -- no debconf information






--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#570278: dialog: --and-widget does not exit properly

2010-02-17 Thread Dave Vehrs
Package: dialog
Version: 1.1-20100119-1
Severity: important


The --add-widget flag is supposed to allow you to chain various
dialog boxes and should exit if you select NO or Cancel at any
level.  However, it simply continues on to the next level regardless
of what options are selected.

Confirmed this bug happens in this version and the version 
(1.0-20060221) on Etch.

Example code:
retval=0
dialog --yesno 1 0 0 \
   --add-widget --yesno 2 0 0 \
   --add-widget --yesno 3 0 0 
case $retval in
  0) echo Clicked YES ;;
  1) echo Clicked NO ;;
  *) echo Something else ;;
esac

With this script, I should be able to select no to the first or
second yes/no question and it should exit right then.  It does not.
It continues on to the end.

Do I have a mistake in my code or is this a bug?

-   



-- System Information:
Debian Release: squeeze/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)

Kernel: Linux 2.6.32-trunk-686 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages dialog depends on:
ii  debianutils   2.30   Miscellaneous utilities specific t
ii  libc6 2.10.2-5   Embedded GNU C Library: Shared lib
ii  libncursesw5  5.7+20090803-2 shared libraries for terminal hand

dialog recommends no packages.

dialog suggests no packages.

-- no debconf information



-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#448994: uncommenting playlist_namebase doesn't work

2008-04-08 Thread Dave Vehrs
Package: podget
Version: 0.5.8-1
Severity: normal

OK the problem here was the descriptive comment.

The variable is to change the format of the playlist name.   Not to
disable the creation of the playlist.

Others have suggested disabling the creation of playlists and it is
under consideration for a future feature.

Updated comment included in CVS and will be included in the next Debian package.



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#459949: podget doesn't deal well with constant filename parts in URI

2008-04-08 Thread Dave Vehrs
 Package: podget
 Version: 0.5.8-1
 Severity: wishlist

I accepted most of your patch into the Podget CVS today.  The sorting
has been handled another way by a previous patch but the filename fix
was accepted as written.

I will close the bug when the new Debian package is released.

Thanks.



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#407087: Logcheck rule update.

2007-01-15 Thread Dave Vehrs

Package:  logcheck-database
Version:  1.2.52
Severity: Minor
Tags: Patch

I've got a suggested rule update for the kernel file in the
/etc/logcheck/ignore.d.workstation directory.

The file already contains this rule: 
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ kernel: input: Logitech USB Mouse as /class/input/input[[:digit:]]+$


However my system was reporting the following two similar events:
[date] [hostname] kernel: input: B16_b_02 USB-PS/2 Optical Mouse as 
/class/input/input644
[date] [hostname] kernel: input: Chicony  PFU-65 USB Keyboard as 
/class/input/input636

Which I was able to capture with the following two rules:
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ kernel: input: Chicony  PFU-65 USB Keyboard 
as /class/input/input[[:digit:]]+$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ kernel: input: B16_b_02 USB-PS/2 Optical 
mouse as /class/input/input[[:digit:]]+$

However, then I got to thinking about combining the rules, so that
other input devices will be captured as well.  Thats when I came up
with one final rule to replace the Logitech rule currently in the
kernel file and eliminate the need for my new rules.

So I'm suggesting we replace the current rule:
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ kernel: input: Logitech USB Mouse as 
/class/input/input[[:digit:]]+$

With this more generic version:
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ kernel: input: [-_/[:alnum:][:space:]]+ as 
/class/input/input[[:digit:]]+$

Thanks,

Dave


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#383198: vim-scripts: newer version of relaxedgreen.vim available

2006-08-15 Thread Dave Vehrs

Package: vim-scripts
Version: 6-3 


New version of the relaxedgreen.vim colorscheme.  With several bug
fixes and updates for new Vim7 items.

http://www.vim.org/scripts/script.php?script_id=791

-- System Information
Debian Release: testing/unstable
Architecture:  amd64
Kernel: 2.6.16-2-amd64-generic
Locale: en_US.UTF-8


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#337998: logcheck ignore rules updates

2005-11-07 Thread Dave Vehrs
Package: logcheck-database
Version: 1.2.42
Files:  /etc/logcheck/ignore.d.server/kernel
  /etc/logcheck/ignore.d.workstation/kernel
Severity:  Minor
Tags: Patch

Local system: Linux B166ER 2.6.11-mm4 #1 Fri May 27 17:30:15 MDT 2005
x86_64 GNU/Linux

Updated the following rules to match the output seen on my system.

(Note:  Rules should be on a single line but email may break them up)

---

OLD:
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ kernel: usb [0-9]-[0-9]: USB
disconnect, address [0-9]$

NEW:
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ kernel: usb [0-9]-[.[:digit:]]+:
USB disconnect, address [0-9]+$

---

OLD:
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ kernel: usb [0-9]+-[0-9]+: new
(low|full|high) speed USB device using ([_[:alnum:]-]+ and )?address
[0-9]+$

NEW:
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ kernel: usb [0-9]+-[.[:digit:]]+:
new (low|full|high) speed USB device using ([_[:alnum:]-]+ and
)?address [0-9]+$

---

OLD:
^\w{3} [ :0-9]{11} [._[:alnum:]-]+
input.agent\[[0-9]+\]:[[:space:]]+(evdev|evbug|joydev): (already
loaded|loaded successfully|blacklisted)$

NEW:
^\w{3} [ :0-9]{11} [._[:alnum:]-]+
input.agent\[[0-9]+\]:[[:space:]]+(mousedev|tsdev|evdev|evbug|joydev):
(already loaded|loaded successfully|blacklisted)$

---

OLD:
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ kernel: input: USB HID
v[.[:digit:]]+ Joystick \[[ [:alnum:][:punct:]]+\] on
usb-[\:[:digit:].-]+$

NEW:
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ kernel: input: USB HID
v[.[:digit:]]+ (Joystick|Keyboard|Mouse) \[[ [:alnum:][:punct:]]+\] on
usb-[\:[:digit:].-]+$

---

Thanks,

Dave Vehrs



Bug#338003: logcheck-database new ignore rule file for cron-apt

2005-11-07 Thread Dave Vehrs
Package: logcheck-database
Version: 1.2.42
Files:  /etc/logcheck/ignore.d.server/cron-apt
  /etc/logcheck/ignore.d.workstation/cron-apt
Severity: Minor
Tags: Patch

Local System: Linux B166ER 2.6.11-mm4 #1 Fri May 27 17:30:15 MDT 2005
x86_64 GNU/Linux

Support for cron-apts output in /var/log/messages.

Example Output:
Oct 31 04:41:04 hostname cron-apt: CRON-APT RUN
[/etc/cron-apt/config]: Mon Oct 31 04:00:01 MST 2005
Oct 31 04:41:04 hostname cron-apt: CRON-APT SLEEP: 2400, Mon Oct 31
04:40:01 MST 2005
Oct 31 04:41:04 hostname cron-apt: CRON-APT ACTION: 3-download
Oct 31 04:41:04 hostname cron-apt: CRON-APT LINE: /usr/bin/apt-get
dist-upgrade -d -y -o APT::Get::Show-Upgraded=true
Oct 31 04:41:04 hostname cron-apt: Reading package lists...
Oct 31 04:41:04 hostname cron-apt: Building dependency tree...
Oct 31 04:41:04 hostname cron-apt: The following packages will be REMOVED:
Oct 31 04:41:04 hostname cron-apt:   python-gtk2-dev
Oct 31 04:41:04 hostname cron-apt: The following packages have been kept back:
Oct 31 04:41:04 hostname cron-apt:   ant extract gdk-imlib1 irb1.8
libdmalloc4 libsigc++-2.0-dev libsigc++-dev
Oct 31 04:41:04 hostname cron-apt:   python-gtk2
Oct 31 04:41:04 hostname cron-apt: The following packages will be upgraded:
Oct 31 04:41:04 hostname cron-apt:   debootstrap dictionaries-common gimp-data
Oct 31 04:41:04 hostname cron-apt: 3 upgraded, 0 newly installed, 1 to
remove and 8 not upgraded.
Oct 31 04:41:04 hostname cron-apt: Need to get 6866kB of archives.
Oct 31 04:41:04 hostname cron-apt: After unpacking 373kB disk space
will be freed.
Oct 31 04:41:04 hostname cron-apt: Get:1 http://debian.csail.mit.edu
unstable/main dictionaries-common 0.62.0 [234kB]
Oct 31 04:41:04 hostname cron-apt: Get:2 http://debian.csail.mit.edu
unstable/main gimp-data 2.2.9-1 [6587kB]
Oct 31 04:41:04 hostname cron-apt: Get:3 http://debian.csail.mit.edu
unstable/main debootstrap 0.3.2.2 [44.8kB]
Oct 31 04:41:04 hostname cron-apt: Fetched 6866kB in 36s (187kB/s)
Oct 31 04:41:04 hostname cron-apt: Download complete and in download only mode

To add logcheck ignore rules, add the following rules to
/etc/logcheck/ignore.d.server/cron-apt and
/etc/logcheck/ignore.d.workstation/cron-apt:

(Note:  Rules should be on one line each but email may break them.)

^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ cron-apt: CRON-APT RUN
\[[-[:alnum:]/]+\]: \w{3} \w{3} [ [:digit:]]+ [:[:digit:]]{8} \w{3}
[[:digit:]]{4}$

^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ cron-apt: CRON-APT SLEEP:
[[:digit:]]+, \w{3} \w{3} [ [:digit:]]+ [:[:digit:]]{8} \w{3}
[[:digit:]]{4}$

^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ cron-apt: CRON-APT ACTION:
(0-update|3-download)$

^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ cron-apt: CRON-APT LINE:
/usr/bin/apt-get dist-upgrade -d -y -o APT::Get::Show-Upgraded=true$

^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ cron-apt: Reading package lists...$

^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ cron-apt: Building dependency tree...$

^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ cron-apt: The following NEW
packages will be installed:$

^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ cron-apt: The following
packages will be REMOVED:$

^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ cron-apt: The following
packages have been kept back:$

^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ cron-apt: The following
packages will be upgraded:$

^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ cron-apt: {3}[ .+[:alnum:]-]+$

^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ cron-apt: [[:digit:]]+
upgraded, [[:digit:]]+ newly installed, [[:digit:]]+ to remove and
[[:digit:]]+ not upgraded.$

^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ cron-apt: Need to get
[[:digit:].]+(kB|MB)(/[.[:digit:]]+(kB|MB))* of archives.$

^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ cron-apt: After unpacking
[[:digit:].]+(kB|MB) (of additional disk space will be used|disk space
will be freed).$

^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ cron-apt: Get:[[:digit:]]+
http://[.[:alnum:]/_]+ [/[:alnum:]]+ [-[:alnum:]_]+[ +.:[:alnum:]-]+
\[[.[:digit:]]+(kB|MB)\]$

^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ cron-apt: Fetched
[[:digit:].]+(kB|MB) in [[:digit:]ms]+ \([[:digit:]]+kB/s\)$

^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ cron-apt: Download complete
and in download only mode$

-

Thanks,

Dave Vehrs