Logcheck devel - Feb 2010 - Bug#569843: logcheck-database: acpid filter misses trailing white space

Package: logcheck-database
Version: 1.2.69
Severity: normal
Tags: patch

The syslog messages for acpid when a window client connects
or disconnect all have a trailing single space at each line.
Therefore the existing two patterns in

  /etc/logcheck/ignore.d.server/acpid

fail to filter out the events. Furthermore, the disconnect
message includes a PID-numbered client, which is not present
in the pattern at all.

A functional patch follows!


--- /tmp/acpid	2010-02-14 18:53:53.000000000 +0100
+++ /etc/logcheck/ignore.d.server/acpid	2010-02-14 19:14:55.000000000 +0100
@@ -5 +5 @@
-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ acpid: client connected from
[[:digit:]]+\[[[:digit:]]+:[[:digit:]]+\]$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ acpid: client connected from
[[:digit:]]+\[[[:digit:]]+:[[:digit:]]+\][[:space:]]*$
@@ -8 +8 @@
-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ acpid: client has disconnected$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ acpid: client
[[:digit:]]+\[[[:digit:]]+:[[:digit:]]+\] has disconnected[[:space:]]*$


-- System Information:
Debian Release: 5.0.3
  APT prefers stable
  APT policy: (500, 'stable'), (90, 'testing'), (80,
'unstable')
Architecture: i386 (i686)

Kernel: Linux 2.6.26-2-686 (SMP w/1 CPU core)
Locale: LANG=sv_SE, LC_CTYPE=sv_SE (charmap=ISO-8859-1)
Shell: /bin/sh linked to /bin/bash

-- no debconf information

tags 569843 +unreproducible +moreinfo
thanks

Mats Erik Andersson wrote:
> 
> The syslog messages for acpid when a window client connects
> or disconnect all have a trailing single space at each line.
> Therefore the existing two patterns in
> 
>   /etc/logcheck/ignore.d.server/acpid
> 
> fail to filter out the events. 
I tried to reproduce this in squeeze and sid with no success, but the 
log lines don't contain a trailing space. So I'm tagging this bug as
unreproducible.

Please provide more info (e.g. acpid version or example log lines) about
howto reproduce this behaviour, if its still reproducible by you.
> Furthermore, the disconnect
> message includes a PID-numbered client, which is not present
> in the pattern at all.
This has been fixed in 53f7a7b.

Greetings,

Hannes

Processing commands for control at bugs.debian.org:
> tags 569843 +unreproducible +moreinfo
Bug #569843 [logcheck-database] logcheck-database: acpid filter misses trailing
white space
Added tag(s) unreproducible.
Bug #569843 [logcheck-database] logcheck-database: acpid filter misses trailing
white space
Added tag(s) moreinfo.
> thanks
Stopping processing here.

Please contact me if you need assistance.

Debian bug tracking system administrator
(administrator, Debian Bugs database)

Your message dated Sat, 15 Jan 2011 01:01:11 +0100
with message-id <20110115000110.GA32699 at mea.homelinux.org>
and subject line Not present in testing/squeeze. Closing.
has caused the Debian Bug report #569843,
regarding logcheck-database: acpid filter misses trailing white space
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner at bugs.debian.org
immediately.)


-- 
569843: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=569843
Debian Bug Tracking System
Contact owner at bugs.debian.org with problems
-------------- next part --------------
An embedded message was scrubbed...
From: Mats Erik Andersson <mats.andersson at gisladisker.se>
Subject: logcheck-database: acpid filter misses trailing white space
Date: Sun, 14 Feb 2010 19:37:49 +0100
Size: 3855
URL:
<http://lists.alioth.debian.org/pipermail/logcheck-devel/attachments/20110115/54a81ae1/attachment.eml>
-------------- next part --------------
An embedded message was scrubbed...
From: Mats Erik Andersson <mats.andersson at gisladisker.se>
Subject: Not present in testing/squeeze. Closing.
Date: Sat, 15 Jan 2011 01:01:11 +0100
Size: 2345
URL:
<http://lists.alioth.debian.org/pipermail/logcheck-devel/attachments/20110115/54a81ae1/attachment-0001.eml>