Logcheck devel - Mar 2010 - Bug#575378: logcheck-database: ignore.d.server/nfs does not allow underscore in mount points

Package: logcheck-database
Version: 1.2.68
Severity: minor

This is also present in the current squeeze/sid version 1.3.7

For weeks I have been slowly driven mad by logcheck continually
reporting innocuous nfs mount/umount events and I could not see why
they were not being removed by the nfs ignore rules.

Finally I spotted the issue: the mount path listed in the log message
contains an underscore, so doesn't quite match the regexp. Attached is
the very simple patch that allows [._[:alnum:]-]* in path elements.

-- System Information:
Debian Release: 5.0.4
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.18-5-xen-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

-- debconf-show failed
-------------- next part --------------
--- nfs	2010-03-25 10:47:47.000000000 +0000
+++ nfs.orig	2010-03-25 10:47:00.000000000 +0000
@@ -1,2 +1,2 @@
-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ rpc\.mountd: authenticated (un|)mount
request from [._[:alnum:]-]+:[0-9]+ for (/[._[:alnum:]-]*)+
\((/[._[:alnum:]-]*)+\)$
-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ mountd\[[0-9]+\]: authenticated (un|)mount
request from [._[:alnum:]-]+:[0-9]+ for (/[._[:alnum:]-]*)+
\((/[._[:alnum:]-]*)+\)$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ rpc\.mountd: authenticated (un|)mount
request from [._[:alnum:]-]+:[0-9]+ for (/[[:alnum:]]*)+ \((/[[:alnum:]]*)+\)$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ mountd\[[0-9]+\]: authenticated (un|)mount
request from [._[:alnum:]-]+:[0-9]+ for (/[[:alnum:]]*)+ \((/[[:alnum:]]*)+\)$

Your message dated Thu, 15 Apr 2010 17:17:14 +0000
with message-id <E1O2Sgk-0000sE-8V at ries.debian.org>
and subject line Bug#575378: fixed in logcheck 1.3.8
has caused the Debian Bug report #575378,
regarding logcheck-database: ignore.d.server/nfs does not allow underscore in
mount points
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner at bugs.debian.org
immediately.)


-- 
575378: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=575378
Debian Bug Tracking System
Contact owner at bugs.debian.org with problems
-------------- next part --------------
An embedded message was scrubbed...
From: "G. T. Laycock" <gtl1 at mcs.le.ac.uk>
Subject: logcheck-database: ignore.d.server/nfs does not allow underscore in
mount
 points
Date: Thu, 25 Mar 2010 10:48:33 +0000
Size: 4069
URL:
<http://lists.alioth.debian.org/pipermail/logcheck-devel/attachments/20100415/c1803b78/attachment.eml>
-------------- next part --------------
An embedded message was scrubbed...
From: Hannes von Haugwitz <hannes at vonhaugwitz.com>
Subject: Bug#575378: fixed in logcheck 1.3.8
Date: Thu, 15 Apr 2010 17:17:14 +0000
Size: 7182
URL:
<http://lists.alioth.debian.org/pipermail/logcheck-devel/attachments/20100415/c1803b78/attachment-0001.eml>