Logcheck devel - Jul 2008 - Bug#489009: logcheck-database: smbd_audit ignore rule ignores everything

Package: logcheck-database
Version: 1.2.66
Severity: grave
Justification: renders package unusable

The rule in /etc/logcheck/ignore.d.server/smbd_audit ignores everything.
The reason seems to be missing grouping with regard to the pipe (|) operator. At
the end of the rule you have |.+$, which effectively applies to everything.

Greetings,
Piotr


-- System Information:
Debian Release: lenny/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (x86_64)

Kernel: Linux 2.6.25.9-orbiter.x86-64.1 (PREEMPT)
Locale: LANG=pl_PL.UTF-8, LC_CTYPE=pl_PL.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

-- debconf information:
* logcheck-database/rules-directories-note:
  logcheck-database/standard-rename-note:
  logcheck-database/conffile-cleanup: false

* Piotr Kaczuba <pepe at attika.ath.cx> [2008-07-02 20:54:29
CEST]:
> The rule in /etc/logcheck/ignore.d.server/smbd_audit ignores everything.
> The reason seems to be missing grouping with regard to the pipe (|)
> operator. At the end of the rule you have |.+$, which effectively
> applies to everything.
 You are right, that | was forgotten got get escaped - thanks for your
report.

 So long,
Rhonda

Your message dated Fri, 04 Jul 2008 09:47:03 +0000
with message-id <E1KEhsd-00008p-Tr at ries.debian.org>
and subject line Bug#489009: fixed in logcheck 1.2.67
has caused the Debian Bug report #489009,
regarding logcheck-database: smbd_audit ignore rule ignores everything
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner at bugs.debian.org
immediately.)


-- 
489009: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=489009
Debian Bug Tracking System
Contact owner at bugs.debian.org with problems
-------------- next part --------------
An embedded message was scrubbed...
From: Piotr Kaczuba <pepe at attika.ath.cx>
Subject: logcheck-database: smbd_audit ignore rule ignores everything
Date: Wed, 02 Jul 2008 20:54:29 +0200
Size: 2020
Url:
http://lists.alioth.debian.org/pipermail/logcheck-devel/attachments/20080704/56542b54/attachment.eml
-------------- next part --------------
An embedded message was scrubbed...
From: Gerfried Fuchs <rhonda at debian.at>
Subject: Bug#489009: fixed in logcheck 1.2.67
Date: Fri, 04 Jul 2008 09:47:03 +0000
Size: 4920
Url:
http://lists.alioth.debian.org/pipermail/logcheck-devel/attachments/20080704/56542b54/attachment-0001.eml