Debian Bug Tracking System
2005-Jun-03 17:33 UTC
[Logcheck-devel] Bug#244411: marked as done (logcheck: Upgrade loses symlinks in /etc/logcheck)
Your message dated Fri, 3 Jun 2005 19:20:56 +0200 with message-id <20050603172056.GX2386 at sputnik.stro.at> and subject line logcheck closing woody bugs, please upgrade. has caused the attached Bug report to be marked as done. This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what I am talking about this indicates a serious mail system misconfiguration somewhere. Please contact me immediately.) Debian bug tracking system administrator (administrator, Debian Bugs database) -------------------------------------- Received: (at submit) by bugs.debian.org; 18 Apr 2004 11:31:33 +0000>From Marco.Franzen at bigfoot.com Sun Apr 18 04:31:33 2004Return-path: <Marco.Franzen at bigfoot.com> Received: from mail2.uklinux.net [80.84.72.32] by spohr.debian.org with esmtp (Exim 3.35 1 (Debian)) id 1BFAWL-0005Mx-00; Sun, 18 Apr 2004 04:31:33 -0700 Received: from pika.franzen.uklinux.net (crwy-3e353dea.pool.mediaWays.net [62.53.61.234]) by mail2.uklinux.net (Postfix) with ESMTP id 4A4E1409FD4 for <submit at bugs.debian.org>; Sun, 18 Apr 2004 11:31:32 +0000 (UTC) Received: from marco by pika.franzen.uklinux.net with local (Exim 3.35 #1 (Debian)) id 1BFAWI-0001J4-00; Sun, 18 Apr 2004 12:31:30 +0100 To: Debian Bug Tracking System <submit at bugs.debian.org> Subject: logcheck: Upgrade loses symlinks in /etc/logcheck X-Debbugs-CC: Marco Franzen <marco at pika.marco.franzen.bigfoot.com> Message-Id: <E1BFAWI-0001J4-00 at pika.franzen.uklinux.net> From: Marco Franzen <Marco.Franzen at bigfoot.com> Date: Sun, 18 Apr 2004 12:31:30 +0100 Delivered-To: submit at bugs.debian.org X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2004_03_25 (1.212-2003-09-23-exp) on spohr.debian.org X-Spam-Status: No, hits=-10.0 required=4.0 tests=BAYES_00,HAS_PACKAGE, X_DEBBUGS_CC autolearn=ham version=2.60-bugs.debian.org_2004_03_25 X-Spam-Level: X-CrossAssassin-Score: 1 Package: logcheck Version: 1.1.1-13.1woody1 Severity: serious The system administrator should be free to replace the symlinks in /etc/logcheck (ignore.d and logcheck.ignore) with whatever he or she pleases - most likely symlinks again to one of the corresponding .paranoid, .server or .workstation directory and file, but it could even be something entirely different. I had pointed my symlinks to the .server directory and file and created cusomisations in ignored.d.server/local. But after upgrading to this security update, I got spammed with lots of entirely normal log entries. I had to sift through them in order not to miss anything important (i.e. do the filtering work of logcheck manually). It turned out the update had silently removed my symlinks and replaced them with new symlinks pointing to the .paranoid directory and file. I could have missed an important log entry among the noise, or I could have found it too late. Silently reversing the sysadmin's choice probably also violates Policy. -- System Information Debian Release: 3.0 Architecture: i386 Kernel: Linux pika 2.4.25 #1 Wed Feb 18 20:41:10 GMT 2004 i586 Locale: LANG=C, LC_CTYPE Versions of packages logcheck depends on: ii cron 3.0pl1-72 management of regular background p ii debconf 1.0.32 Debian configuration management sy ii exim 3.35-1woody2 An MTA (Mail Transport Agent) ii exim [mail-trans 3.35-1woody2 An MTA (Mail Transport Agent) ii logcheck-databas 1.1.1-13.1woody1 A database of system log rules for ii logtail 1.1.1-13.1woody1 Returns parts of logfiles that hav ii mailx 1:8.1.2-0.20020411cvs-1 A simple mail user agent. ii sysklogd 1.4.1-10 System Logging Daemon ii sysklogd [system 1.4.1-10 System Logging Daemon --------------------------------------- Received: (at 244411-done) by bugs.debian.org; 3 Jun 2005 17:21:24 +0000>From max at stro.at Fri Jun 03 10:21:24 2005Return-path: <max at stro.at> Received: from baikonur.stro.at [213.239.196.228] by spohr.debian.org with esmtp (Exim 3.35 1 (Debian)) id 1DeFrI-0006A8-00; Fri, 03 Jun 2005 10:21:24 -0700 Received: from sputnik (stallburg.stro.at [128.131.216.190]) by baikonur.stro.at (Postfix) with ESMTP id 2C5DE5C016; Fri, 3 Jun 2005 19:20:51 +0200 (CEST) Received: from max by sputnik with local (Exim 4.50) id 1DeFqq-0000tu-Nu; Fri, 03 Jun 2005 19:20:56 +0200 Date: Fri, 3 Jun 2005 19:20:56 +0200 From: maximilian attems <janitor at sternwelten.at> To: 242760-done at bugs.debian.org, 244411-done at bugs.debian.org Subject: logcheck closing woody bugs, please upgrade. Message-ID: <20050603172056.GX2386 at sputnik.stro.at> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.5.9i X-Virus-Scanned: by Amavis (ClamAV) at stro.at Delivered-To: 244411-done at bugs.debian.org X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 (1.212-2003-09-23-exp) on spohr.debian.org X-Spam-Status: No, hits=-3.0 required=4.0 tests=BAYES_00 autolearn=no version=2.60-bugs.debian.org_2005_01_02 X-Spam-Level: X-CrossAssassin-Score: 2 dear logcheck users, thanks for using Debian and especially logcheck, we hope that Sarge contain an even better logcheck version. as Sarge is about to be announced as stable, i'm pleased to be able to close those bugs, as they are fixed in it's logcheck version. happy upgrading + thanks for your feedback -- maks