Arthur Marsh
2010-Nov-05 09:55 UTC
[Logcheck-devel] Bug#602494: logcheck runs filters for packages not installed
Package: logcheck Version: 1.3.13 Severity: normal Hi, at present my logcheck is into 33 minutes of cpu time for running the ignore/innd rule, when the innd package is not installed. If running logcheck against only locally created logfiles, there should be a configuration option to only run logcheck against installed (or non-purged) packages. -- System Information: Debian Release: squeeze/sid APT prefers unstable APT policy: (500, 'unstable'), (500, 'testing'), (500, 'stable') Architecture: i386 (i686) Kernel: Linux 2.6.36-git6 (SMP w/1 CPU core; PREEMPT) Locale: LANG=en_AU.UTF-8, LC_CTYPE=en_AU.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/bash Versions of packages logcheck depends on: ii adduser 3.112+nmu1 add and remove users and groups ii cron 3.0pl1-115 process scheduling daemon ii exim4-daemon-light [mail-tran 4.72-2 lightweight Exim MTA (v4) daemon ii lockfile-progs 0.1.15 Programs for locking and unlocking ii logtail 1.3.13 Print log file lines that have not ii mime-construct 1.11 construct/send MIME messages from ii sysklogd [system-log-daemon] 1.5-6 System Logging Daemon Versions of packages logcheck recommends: ii logcheck-database 1.3.13 database of system log rules for t Versions of packages logcheck suggests: ii syslog-summary 1.14-2 summarize the contents of a syslog -- Configuration Files: /etc/cron.d/logcheck changed: PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin MAILTO=root @reboot logcheck if [ -x /usr/sbin/logcheck ]; then ionice -c3 nice -n5 /usr/sbin/logcheck -R; fi 2 * * * * logcheck if [ -x /usr/sbin/logcheck ]; then ionice -c3 nice -n5 /usr/sbin/logcheck; fi /etc/logcheck/logcheck.conf [Errno 13] Permission denied: u'/etc/logcheck/logcheck.conf' /etc/logcheck/logcheck.logfiles [Errno 13] Permission denied: u'/etc/logcheck/logcheck.logfiles' -- debconf-show failed
Reasonably Related Threads
- Bug#535562: logcheck runs at normal I/O priority, and is hard-coded to nice -n10
- Bug#617232: logcheck: ignore regexes match ipv4 addresses only, causing false positives with ipv6 addresses.
- Bug#290195: violations.d/sudo and violations.ignore.d/logcheck-sudo missing sudo log entries
- Bug#703936: logcheck-database: SSH Bad Protocol Version Idenitifcation Rule is incomplete
- Bug#320274: logcheck-database: Please add pop3 to dovecot