Benjamin M. A'Lee
2011-Mar-07 11:19 UTC
[Logcheck-devel] Bug#617232: logcheck: ignore regexes match ipv4 addresses only, causing false positives with ipv6 addresses.
Package: logcheck Version: 1.3.13 Severity: normal Various files under ignore.d.* use "[0-9.]{7,15}" to match an IPv4 address, e.g., a connection to rsyncd. However, this does not match IPv6 addresses, causing spurious reports. A better regexp might be something like: ([0-9.]{7,15}|[0-9a-f:]{2,39}) -- System Information: Debian Release: 6.0 APT prefers stable APT policy: (990, 'stable') Architecture: i386 (i686) Kernel: Linux 2.6.32.22-kvm-i386-20100921 (SMP w/1 CPU core) Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/bash Versions of packages logcheck depends on: ii adduser 3.112+nmu2 add and remove users and groups ii cron 3.0pl1-116 process scheduling daemon ii lockfile-progs 0.1.15 Programs for locking and unlocking ii logtail 1.3.13 Print log file lines that have not ii mime-construct 1.11 construct/send MIME messages from ii postfix [mail-transport-agent 2.7.1-1 High-performance mail transport ag ii rsyslog [system-log-daemon] 4.6.4-2 enhanced multi-threaded syslogd Versions of packages logcheck recommends: ii logcheck-database 1.3.13 database of system log rules for t Versions of packages logcheck suggests: ii syslog-summary 1.14-2 summarize the contents of a syslog -- Configuration Files: /etc/logcheck/logcheck.conf [Errno 13] Permission denied: u'/etc/logcheck/logcheck.conf' /etc/logcheck/logcheck.logfiles [Errno 13] Permission denied: u'/etc/logcheck/logcheck.logfiles' -- no debconf information
Reasonably Related Threads
- Bug#552222: logcheck: dhclient regexes need updating
- Bug#602494: logcheck runs filters for packages not installed
- Bug#369603: logcheck-database: new rule for dhcpd
- Processed: logcheck ignore rules for rsyslogd
- Bug#338732: logcheck-database: ignore rule for package cvs