hello, tommorow 1.2.23 hits sarge, so our user get nice templates there. 1.2.24 could be released next days (has a lots of new rules and rule fixes, some minor logtail fixes, removes unused /var/state/logcheck). uplaoding current head for testing at the usual place: debian.stro.at/sarge as 1.2.23+1.2.24rc2 *) lets look through our bug reports (ordered witch decreasing importance). must have 1.2.24: #258735 wrong permissions in /etc/logcheck that's a current show-stopper, we have troubles getting permissions right when upgrading from woody - user logcheck is not created!! sarge items (1.2.24 || 1.2.25 || 1.2.26): #255932: News file is not displayed on upgrade Alfie said to works on that. #215640: logcheck: documentation confusing/contradictory ideas for better explanations in manpage, but needs rephrasing. #258427: logcheck/logtail didn't detect tampering logfile Alfie didn't find that to be a bug, but i will take a better look at logtail how it's happening to get the hole logfile mailed #259603: postfix/lmtp rules do not match some configurations hard rule to design, maybe remote strings inside #213711 missing ignore pattern for squid todd half done, just missing one more rule for squidguard #260101: anon-proxy server messages me working on it, needs moreinfo hope that helps to resume what needs to be done currently, eevans you stepped in at the beginning of 1.2.24 please do not stop that nice habitude! :) a++ maks *) rc1 catched a nasty leftover of my logcheck.postinst change. ps i'm going surfing next week for 2 weeks.
On Mon, 19 Jul 2004, maks attems wrote:> #260101: anon-proxy server messages > me working on it, needs moreinfonuked this one anon-proxy is above 10.000 in popcorn stats. -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: Digital signature Url : http://lists.alioth.debian.org/pipermail/logcheck-devel/attachments/20040719/7c657ba4/attachment.pgp
On Mon, 19 Jul 2004, maks attems wrote:> #213711 missing ignore pattern for squid > todd half done, just missing one more rule for squidguardfinished that too.. -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: Digital signature Url : http://lists.alioth.debian.org/pipermail/logcheck-devel/attachments/20040719/e21c2c77/attachment.pgp
On Mon, 19 Jul 2004, maks attems wrote:> #258427: logcheck/logtail didn't detect tampering logfile > Alfie didn't find that to be a bug, but i will take a better look > at logtail how it's happening to get the hole logfile maileddone, 4 items left.. -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: Digital signature Url : http://lists.alioth.debian.org/pipermail/logcheck-devel/attachments/20040719/d82b2fe7/attachment.pgp
Great work with the recent bugs! Hopefully I will confirm the fix on #258735 today and most likely release within two days. Cheers, -Todd On Mon, Jul 19, 2004 at 04:04:57PM +0200, maks attems wrote:> hello, > > tommorow 1.2.23 hits sarge, so our user get nice templates there. > 1.2.24 could be released next days > (has a lots of new rules and rule fixes, some minor logtail fixes, > removes unused /var/state/logcheck). uplaoding current head for > testing at the usual place: debian.stro.at/sarge as 1.2.23+1.2.24rc2 *) > > lets look through our bug reports (ordered witch decreasing importance). > > must have 1.2.24: > #258735 wrong permissions in /etc/logcheck > that's a current show-stopper, we have troubles getting permissions right > when upgrading from woody - user logcheck is not created!! > > sarge items (1.2.24 || 1.2.25 || 1.2.26): > #255932: News file is not displayed on upgrade > Alfie said to works on that. > > #215640: logcheck: documentation confusing/contradictory > ideas for better explanations in manpage, but needs rephrasing. > > #258427: logcheck/logtail didn't detect tampering logfile > Alfie didn't find that to be a bug, but i will take a better look > at logtail how it's happening to get the hole logfile mailed > > #259603: postfix/lmtp rules do not match some configurations > hard rule to design, maybe remote strings inside > > #213711 missing ignore pattern for squid > todd half done, just missing one more rule for squidguard > > #260101: anon-proxy server messages > me working on it, needs moreinfo > > hope that helps to resume what needs to be done currently, > eevans you stepped in at the beginning of 1.2.24 > please do not stop that nice habitude! :) > > > a++ maks > > *) rc1 catched a nasty leftover of my logcheck.postinst change. > > ps i'm going surfing next week for 2 weeks.-- [ Todd J. Troxell ,''`. Student, Debian GNU/Linux Developer, SysAdmin, Geek : :' : http://debian.org || http://rapidpacket.com/~xtat `. `' `- ]
On Tue, 20 Jul 2004, Todd Troxell wrote:> Great work with the recent bugs! Hopefully I will confirm the fix on #258735 > today and most likely release within two days. > > Cheers, > > -Toddhad announced logcheck 1.2.23 on lwn.net. :) maybe you wanna do same for 1.2.24? -> http://lwn.net/Articles/92808/ -> http://lwn.net/Articles/93596/ a++ maks -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: Digital signature Url : http://lists.alioth.debian.org/pipermail/logcheck-devel/attachments/20040722/d5518001/attachment.pgp
* maks attems <debian at sternwelten.at> [2004-07-19 16:04]:> sarge items (1.2.24 || 1.2.25 || 1.2.26): > #255932: News file is not displayed on upgrade > Alfie said to works on that.Sorry... I am going to reformat it. Timestamp of the file is available through CVS, will check the log who commited it and use that in the format line. I hope I won't forget, because my offline version has now my name and address in there, and I don't want to claim that entry for myself. :) Again, sorry for the delay. And now, todd did it. Well, my own fault :) <nitpick>Although according to the time in CVS his entry is 15 minutes off.</nitpick>> #215640: logcheck: documentation confusing/contradictory > ideas for better explanations in manpage, but needs rephrasing.If it isn't done yet I might want to take a look at it. Though I am not a native speaker I hope my writing skills are not the worst. (At least you accepted my rewrite of the templates. :))> #258427: logcheck/logtail didn't detect tampering logfile > Alfie didn't find that to be a bug, but i will take a better look > at logtail how it's happening to get the hole logfile mailedI've read your close message, but simply don't understand it correctly.... Please get back to me on this, maybe in german. :) What I meant is that if logcheck notices tampering with a file it should notice this in the mails. Not few root kits do in fact tamper with the logfiles, so it should rather complain in some way than ignore the tampering. That was my original meaning why I don't think that its a bug but a feature. Of course a strange feature that should get a more meaningful warning message, but still a good feature.> ps i'm going surfing next week for 2 weeks.Cool. If you find interesting projects/pics send the URLs!! So long, Alfie -- (o)_ ,-----ooO--00--Ooo-----. <http://www.gimp.org/> . . (>)_ ,' Gerfried Fuchs `. GNU Image Manipulation Program \`-___-'/ ,' <alfie at ist.org> `. <http://www.gimp.org/win32/> O-'oo 7 ` http://alfie.ist.org/ascii/ -' For users of the "other" OS! `-===',' -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: Digital signature Url : http://lists.alioth.debian.org/pipermail/logcheck-devel/attachments/20040723/40974b09/attachment.pgp