Logcheck devel - Mar 2006 - Bug#355383: logcheck: Should ignore backup files in .d dirs

Package: logcheck
Version: 1.2.43a
Severity: wishlist


I just got this e-mail from logcheck:

"
Security Events for su~
=-=-=-=-=-=-=-=-=-=-=-...
"

Note the tilde in the "su~".  It comes from here:
"
foo:/etc/logcheck/violations.d# ls *
logcheck  su  su~  sudo  su.dpkg-old
"

The su~ file is obviously a backup file created by Emacs or whatever from when
I've
been editing the "su" file.

I'd like logcheck to ignore backup files (files with names ending in ~) when
it does
its thing.

-- System Information:
Debian Release: testing/unstable
  APT prefers testing
  APT policy: (990, 'testing')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.15-1-686-smp
Locale: LANG=sv_SE, LC_CTYPE=sv_SE (charmap=ISO-8859-1)

Versions of packages logcheck depends on:
ii  adduser          3.80                    Add and remove users and groups
ii  cron             3.0pl1-92               management of regular background p
ii  debconf [debconf 1.4.70                  Debian configuration management sy
ii  debianutils      2.15.2                  Miscellaneous utilities specific t
ii  exim [mail-trans 3.36-18                 An MTA (Mail Transport Agent)
ii  grep             2.5.1.ds2-4             GNU grep, egrep and fgrep
ii  lockfile-progs   0.1.10                  Programs for locking and unlocking
ii  logcheck-databas 1.2.43a                 database of system log rules for t
ii  logtail          1.2.43a                 Print log file lines that have not
ii  mailx            1:8.1.2-0.20050715cvs-1 A simple mail user agent
ii  sysklogd [system 1.4.1-17                System Logging Daemon

logcheck recommends no packages.

-- debconf information:
* logcheck/security_level: server
* logcheck/manage_conffiles: true
* logcheck/auto_create_logfiles: true
* logcheck/upgrade-note:
* logcheck/changes:
* logcheck/install-note:
* logcheck/rules-directories-note:
* logcheck/email_address: root
* logcheck/rewrite-note:

package logcheck
severity 355383 important
merge 353793 355383
thanks!

On 5 Mar 2006, at 12:35, Johan Walles wrote:
> I just got this e-mail from logcheck:
>
> Security Events for su~
<snip>
> The su~ file is obviously a backup file created by Emacs or  
> whatever from when I've
> been editing the "su" file.
>
> I'd like logcheck to ignore backup files (files with names ending  
> in ~) when it does
> its thing.
<snip>

This will be fixed in the next release (due within a week or so).

Thanks for your bug report,

-- 
-Jamie L. Penman-Smithson <jamie at silverdream.org>
  t: +44 1273 424795; f: +44 1273 424795
  PGP: C0A7 955E EED6 A309 23D7 863B C76A 26A3 F0DC FCA8
  never send mail to: oubliette.z at gmail.com


-------------- next part --------------
A non-text attachment was scrubbed...
Name: PGP.sig
Type: application/pgp-signature
Size: 186 bytes
Desc: This is a digitally signed message part
Url :
http://lists.alioth.debian.org/pipermail/logcheck-devel/attachments/20060426/47916089/attachment.pgp

Processing commands for control at bugs.debian.org:
> package logcheck
Ignoring bugs not assigned to: logcheck
> severity 355383 important
Bug#355383: logcheck: Should ignore backup files in .d dirs
Severity set to `important'.
> merge 353793 355383
Bug#353793: /usr/sbin/logcheck does no longer skip '<rule file>~'
files?
Bug#355383: logcheck: Should ignore backup files in .d dirs
Bug#355949: logcheck is processing logcheck.dpkg-old
Merged 353793 355383 355949.
> thanks!
Stopping processing here.

Please contact me if you need assistance.

Debian bug tracking system administrator
(administrator, Debian Bugs database)