logcheck ignores all logs in "server" or "workstation" config

Bug #297771 reported by Mike Miller
14
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Debian
Fix Released
Unknown
logcheck (Ubuntu)
Fix Released
High
Unassigned
Intrepid
Fix Released
High
Martin Pitt

Bug Description

Binary package hint: logcheck

Duplicate of debian bug 489009 (see http://<email address hidden>/msg01630.html).

This was seen on intrepid.

Debian claimed it was a low priority bug (since it was fixed before it reached testing, in 1.2.67), but it causes users of logcheck to miss all system messages (and intrepid took 1.2.66)!

description: updated
Revision history for this message
Daniel Hahler (blueyed) wrote :

Marking fix released for Jaunty, which has been synced from Debian again, but for Intrepid it should get fixed through a SRU (http://wiki.ubuntu.com/SRU).

Changed in logcheck:
importance: Undecided → High
status: New → Fix Released
Revision history for this message
Daniel Hahler (blueyed) wrote :

Subscribing motu-sru and proposing, to get the whole of 1.2.68 into intrepid-updates, which would contain other fixes/improvements, too:

logcheck (1.2.68) unstable; urgency=low

  * Thanks to Hanspeter Kunz for all his patches.

  * ignore.d.server/dovecot:
    - ignore connection closed messages.
    - ignore forwards and to cope with missing >'s at the end of long msgids.
    - ignore closed connection messages also when connection is reset by peer.

  * ignore.d.server/postfix:
    - ignore "NOQUEUE: milter-reject" messages.
    - enhanced "TLS library problem" rule to also ignore "bad
      certificate" errors.
    - added rule to ignore "SSL23_GET_CLIENT_HELLO:unknown protocol"
      messages.

 -- martin f. krafft <email address hidden> Thu, 17 Jul 2008 12:17:19 +0200

logcheck (1.2.67) unstable; urgency=low

  [ Gerfried Fuchs ]
  * fix ignore.d.server/smbd_audit which had an unescaped | resulting in
    everything ignored (closes: #489009). As this hasn't transitioned yet to
    testing no urgency bump.
  * Added README.source, more or less a plain copy from
    <http://www.logcheck.org/git.html>

 -- Gerfried Fuchs <email address hidden> Fri, 04 Jul 2008 10:38:07 +0200

Revision history for this message
Daniel Hahler (blueyed) wrote :
Revision history for this message
Daniel Hahler (blueyed) wrote :

Whoops.. subscribing ubuntu-sru, since logcheck is in main..

Revision history for this message
Martin Pitt (pitti) wrote :

Thanks Daniel!

logcheck (1.2.66ubuntu1) intrepid-proposed; urgency=low

  * rulefiles/linux/ignore.d.server/smbd_audit: Fix unescaped "|" which caused
    logcheck to ignore all logs in "server" or "workstation" configs. Fix
    backported from 1.2.67. (LP: #297771)

 -- Martin Pitt <email address hidden> Mon, 17 Nov 2008 12:38:08 +0100

Changed in logcheck:
assignee: nobody → pitti
importance: Undecided → High
status: New → In Progress
Revision history for this message
Martin Pitt (pitti) wrote :

Accepted into intrepid-proposed, please test and give feedback here. Please see https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to enable and use -proposed. Thank you in advance!

Changed in logcheck:
status: In Progress → Fix Committed
Revision history for this message
Steve Beattie (sbeattie) wrote :

I was able to reproduce the behavior with the released intrepid version of logcheck, 1.2.66, and can confirm that logcheck 1.2.66ubuntu1 in intrepid-proposed fixes the issue, with logged messages being reported correctly.

Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package logcheck - 1.2.66ubuntu1

---------------
logcheck (1.2.66ubuntu1) intrepid-proposed; urgency=low

  * rulefiles/linux/ignore.d.server/smbd_audit: Fix unescaped "|" which caused
    logcheck to ignore all logs in "server" or "workstation" configs. Fix
    backported from 1.2.67. (LP: #297771)

 -- Martin Pitt <email address hidden> Mon, 17 Nov 2008 12:38:08 +0100

Changed in logcheck:
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.