Bug#1072801: ITP: lsix -- Show thumbnails in terminal using sixel graphics

2024-06-08 Thread Richard Lewis
Blair Noctis writes: > Package: wnpp > Severity: wishlist > Owner: Blair Noctis > X-Debbugs-Cc: debian-de...@lists.debian.org, n...@sail.ng > > * Package name: lsix > Version : 1.8.2 > Upstream Contact: b9 > * URL : https://github.com/hackerb9/lsix > * License

Bug#1072715: make it easier to change autopkgtest backends

2024-06-06 Thread Richard Lewis
Package: sbuild Version: 0.85.0 Severity: wishlist X-Debbugs-Cc: richard.lewis.deb...@googlemail.com Dear Maintainer, sbuild is really great. I have a small feature request to make it easier to navigate the autopkgtest options: In sbuild.conf i use $autopkgtest_root_args = '';

Bug#241787: options to seperate hosts and for log compaction would both be nice

2024-06-02 Thread Richard Lewis
On Sun, 12 May 2024 17:01:36 +0100 Richard Lewis wrote: > > This bug is nearly 20 years old. (It is a shame no-one replied - the links > > no longer work and there is not enough info recorded to action) > > > > Unless anyone is watching and can proivde more i

Bug#654557: logcheck-database: pure-ftpd rules need update

2024-06-01 Thread Richard Lewis
On Sat, 1 Jun 2024 at 14:21, Kiss Gabor (Bitman) wrote: > > On Sat, 1 Jun 2024, Richard Lewis wrote: > > > > does not cover log entry > > > > > > Jan 4 07:23:42 gatling pure-ftpd: (?@203.158.197.21) [INFO] Logout. > > > > > > The problem i

Bug#651319: ignore.d.server/nagios: SERVICE FLAPPING line doesn't allow whitespace

2024-06-01 Thread Richard Lewis
On Wed, 07 Dec 2011 09:39:55 -0800 andrew bezella wrote: > Package: logcheck-database > Version: 1.3.13 > Severity: minor > > in most cases whitespace is allowed in SERVICE names, but for the > SERVICE FLAPPING ALERT it is not. using the cases where > whitespace is allowed as a template, i made

Bug#591757: logcheck-database: please update ignore rules for nagios

2024-06-01 Thread Richard Lewis
On Thu, 05 Aug 2010 11:28:16 +0200 Albert Dengg wrote: > please update the ignore rules for nagios: > nagios (at least nagios3) will write two lines for each passive > service check that it resives through nsca: > nagios3: EXTERNAL COMMAND: PROCESS_SERVICE_CHECK_RESULT;... > nagios3:

Bug#590677: [logcheck-database] additional rules for nagios/radius

2024-06-01 Thread Richard Lewis
On Wed, 28 Jul 2010 13:52:44 +0200 Hendrik Jaeger wrote: > Package: logcheck-database > Severity: wishlist > Tags: patch > > > Hi, > > check_radius output filter: > > ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ check_radius: rc_avpair_gen: > received VSA attribute with unknown Vendor-Id [[:digit:]]+$ A

Bug#690607: logcheck-database: consider to add a line to ignore.d.server/cyrus-imapd

2024-06-01 Thread Richard Lewis
On Tue, 16 Oct 2012 03:04:36 +0200 Sebastian Steinhuber wrote: > Package: logcheck-database > Version: 1.3.15 > Severity: minor > Tags: patch > > Dear Maintainer, > to drop messages of the form: > > Oct 15 21:01:22 dds cyrus/cyr_expire[26497]: DIGEST-MD5 common mech free > > I added a line (#13)

Bug#764062: logcheck-database: does not filter amavis CLEAN messages

2024-06-01 Thread Richard Lewis
On Fri, 17 Oct 2014 00:57:07 +0200 =?UTF-8?B?SsOpcsO0bWUgRHJvdWV0?= wrote: > ^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ amavis\[[[:digit:]]+\]: > \([-[:digit:]]+\) Passed (CLEAN|SPAM(MY)?)( {RelayedInbound})?,( LOCAL)?( > \[(IPv6:)?[[:xdigit:].:]{3,39}\](:[[:xdigit:]]{0,5})?){0,2} <[^>]*> -> >

Bug#689418: logcheck-database: refine sendmail STARTTLS rule

2024-06-01 Thread Richard Lewis
On Tue, 02 Oct 2012 14:28:24 +0200 > With sendmail, self-signed certificates trigger a warning like: > > | Oct 2 13:02:07 hostname sm-mta[24652]: STARTTLS=client, > relay=host.example., version=TLSv1/SSLv3, verify=FAIL, > cipher=DHE-RSA-AES256-SHA, bits=256/256 > > There is a logcheck rule for

Bug#632825: logcheck: New ignore rule for arpwatch

2024-06-01 Thread Richard Lewis
On Wed, 06 Jul 2011 10:22:21 +0200 Wojciech Nizinski wrote: > Please add following ignore rule for arpwatch: > > ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ arpwatch: short \(want 42\)$ It's a shame no-one replied since 2011, Is there still interest in adding this rule to logcheck-database? it looks

Bug#778905: logcheck: logging changes in spamd

2024-06-01 Thread Richard Lewis
control: tags -1 + moreinfo thanks On Sat, 21 Feb 2015 14:57:15 + Andrew Gallagher wrote: > spamd no longer suffixes "(closed before headers)" with "at /usr/sbin/spamd > line N" > > Updated rule attached. This may also apply to other errors that I haven't > been able to test yet. It's a

Bug#740203: logcheck-databse: proposed ignore rules for hostapd

2024-06-01 Thread Richard Lewis
control: tags -1 + moreinfo thanks On Wed, 26 Feb 2014 22:21:18 +0100 Gabriel Niebler wrote: > ^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ hostapd: [[:alnum:]]+: STA > ([0-9a-f]{2}:){5}[0-9a-f]{2} IEEE 802\.11: authenticated$ > ^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ hostapd: [[:alnum:]]+: STA

Bug#686144: logcheck: ignore.d.server/imapproxy regex for LOGIN and LOGOUT lines from syslog wrong

2024-06-01 Thread Richard Lewis
control: tags -1 + moreinfo On Wed, 29 Aug 2012 07:03:36 +0200 Sven Fischer wrote: > Package: logcheck > Version: 1.3.13 > Severity: normal > > In ignore.d.server/imapproxy the first two lines (LOGIN and LOGOUT) for the > regex contain double quotes. These are too much, hence the regex does not

Bug#654557: logcheck-database: pure-ftpd rules need update

2024-06-01 Thread Richard Lewis
control: tags -1 + moreinfo thanks On Wed, 04 Jan 2012 09:58:11 +0100 Gabor Kiss wrote: > /etc/logcheck/ignore.d.server/pure-ftpd rule > > ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ pure-ftpd: > \([._[:alnum:]-]+@[._[:alnum:]-]+\) \[INFO\] Logout\.$ > > does not cover log entry > > Jan 4 07:23:42

Bug#652537: Please add rule for inetutils-syslogd

2024-06-01 Thread Richard Lewis
control: tags -1 moreinfo On Sun, 18 Dec 2011 11:11:13 + debian-b...@nospam.pz.podzone.net wrote: > Package: logcheck > Version: 1.2.69 > > The inetutils-syslogd (2:1.5.dfsg.1-9) package provides a system > logging daemon. syslogd periodically logs the following message: > > Dec 17 00:29:11

Bug#909036: logcheck: Please update ignore rules for named GeoIP (after upgrade to Strech)

2024-05-31 Thread Richard Lewis
control: tags -1 + confirmed On Mon, 17 Sep 2018 20:48:12 +0200 mi te wrote: > Package: logcheck > Version: 1.3.18 > Severity: normal > > Dear Maintainer, > > After upgrade to Stretch, get a notification from logcheck every time after > BIND is restarted for logrotate. > They should be added to

Bug#547774: dovecot-related rules against logcheck

2024-05-31 Thread Richard Lewis
On Thu, 30 May 2024 at 20:43, Boyd Stephen Smith Jr. wrote: > > On Thursday, May 30, 2024 12:37:49 PM CDT Richard Lewis wrote: > > Is there still interest in updating rules for dovecot? > > Best I can volunteer is my current dovecot-local that is in active use. > (Attached.)

Bug#691258: Missing / in RE for "reducing the advertised EDNS UDP packet size"

2024-05-31 Thread Richard Lewis
On Tue, 23 Oct 2012 17:55:06 +0200 =?utf-8?B?TG/Dr2M=?= Minier wrote: > Package: logcheck > Version: 1.3.15 > Severity: minor > Tags: patch > > Hi, > > Got this log from time to time in System Events: > Oct 23 13:48:16 pig2 named[28880]: success resolving >

Bug#687990: logcheck-database: bind: "updating zone...PTR" and "signer...approved"

2024-05-31 Thread Richard Lewis
On Tue, 18 Sep 2012 06:00:06 +0200 Paul Muster wrote: > Update: > > > (1) please change > > > > ^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ named\[[[:digit:]]+\]: client > > [.:[:xdigit:]]+#[[:digit:]]+: updating zone '[-._[:alnum:]]+/IN': > > (adding an RR|deleting rrset) at '[._[:alnum:]-]+' A$ >

Bug#590675: [logcheck-database] additional rules for bind

2024-05-31 Thread Richard Lewis
On Wed, 28 Jul 2010 13:49:43 +0200 Hendrik Jaeger wrote: > Package: logcheck-database > Severity: wishlist > Tags: patch > > Hi, > > We have some additional rules for bind: > > ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ named\[[0-9]+\]: > (general: )?(info: )?received control channel command 'stats'$

Bug#1070482: systemd: tmpfiles.d not cleaning /var/tmp by default

2024-05-30 Thread Richard Lewis
Luca Boccassi writes: > Here's two paragraphs, one for each change, for the release notes: - More context and explanation would be helpful - suggestions below, - Based on the discussion on d-devel, the tmpfs change is much less controversial and so should be lower down. - how do we

Bug#778903: logcheck: saslauthd logging has changed

2024-05-30 Thread Richard Lewis
On Sat, 21 Feb 2015 14:53:21 + Andrew Gallagher wrote: > New versions of saslauthd say "pam_unix(smtp:auth)" instead of "(pam_unix)". > New rule is: > > ^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ saslauthd\[[[:digit:]]+\]: > pam_unix\(smtp:auth\) authentication failure; logname= uid=0 euid=0

Bug#765944: logcheck-database: improved openvpn rules

2024-05-30 Thread Richard Lewis
On Sun, 19 Oct 2014 14:06:02 +0100 Peter Wyss wrote: > Package: logcheck-database > The logcheck ignore.d.server rules for openvpn need some adjustments. > > The following 2 entries need to be adjusted to include [AF_INET]: > ^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ >

Bug#693183: Please include ignore.d.server rules for DMA

2024-05-30 Thread Richard Lewis
On Wed, 14 Nov 2012 03:50:07 +0100 Carlos Alberto Lopez Perez wrote: > Package: logcheck-database > Hello, > > After deploying DMA, I found that logcheck is not filtering the typical > notification messages of mail delivery that any mailer daemon generates. > > I successfully filtered all this

Bug#1002453: logcheck: [logcheck-database] rules for opensmtpd

2024-05-30 Thread Richard Lewis
On Wed, 22 Dec 2021 11:08:09 +0100 Amadego wrote: > These are a proposal for escluding lines that are not harmful: > > ^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ smtpd\[[[:digit:]]+\]: > [[:xdigit:]]{16} mta (connecting|connected|disconnected|tls ciphers=).*$ > ^\w{3} [ :[:digit:]]{11}

Bug#625894: logcheck-database: /etc/logcheck/ignore.d.server/spamd regexp broken, triggered by unusual Message-Id

2024-05-30 Thread Richard Lewis
On Thu, 09 May 2013 14:49:29 -0700 Gerald Turner wrote: > Gerald Turner writes: > > Hello, there are a few commas that are out of place in one of the > > spamassassin expressions: > > FYI, but is still present in logcheck-database 1.3.15 (wheezy). (hello again) It looks like the spamd rules

Bug#590674: [logcheck-database] rules for atftpd

2024-05-30 Thread Richard Lewis
On Wed, 28 Jul 2010 13:47:53 +0200 Hendrik Jaeger wrote: > Package: logcheck-database > We use these rules for atftpd messages: > > ^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ atftpd\[[[:digit:]]+\]: > timeout: retrying...$ ^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ > atftpd\[[[:digit:]]+\]: Fetching

Bug#925248: /etc/logcheck/ignore.d.server/postfix: update rule for log message written when TLS connection is established

2024-05-30 Thread Richard Lewis
On Fri, 22 Mar 2019 03:41:03 +0900 Yasuhiro KIMURA wrote: > There is following rule in ignore.d.server/postfix. > > ^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ postfix/smtpd?\[[[:digit:]]+\]: > ((Anonymous|Trusted|Verified) )?TLS connection established (to|from) > [^[:space:]]+:

Bug#547774: dovecot-related rules against logcheck

2024-05-30 Thread Richard Lewis
Hi, logcheck has several old bugs suggesting new rules for dovecot. It's a pitty no-one replied, but let's change that now. Unfortuntely, the patches in these bugs do not cleanly apply to the latest version. I had a look at updating but not being a dovecot user akes it less thn feasible Is

Bug#1072105: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring.

2024-05-28 Thread Richard Lewis
On Tue, 28 May 2024 17:15:02 +0100 Luca Boccassi wrote: > On Tue, 28 May 2024 17:44:54 +0200 Michael Biebl > > Please do not not ship conflicting configuration for /run/lock > > > > /usr/lib/tmpfiles.d/debian.conf:d /run/lock1777 root root - - > > /usr/lib/tmpfiles.d/legacy.conf:d

Bug#987971: (for post boomworm)

2024-05-28 Thread Richard Lewis
control: tags -1 wontfix control: retitle -1 remove logcheck user on purge Tagging wontfix: debian policy is to not remove system users, since they may still open files

Bug#401259: logcheck: logcheck needs to override locale for grep

2024-05-28 Thread Richard Lewis
On Sat, 3 Apr 2010 02:07:20 +0400 Dmitry Semyonov wrote: > Another reason to set LC_ALL=C is grep slowness in UTF-8 locale. > Depending on used patterns, I saw "grep -E" to be 6 times slower > compared to C locale, and I guess this was not the worst case. The > performance problem seems to be

Bug#198762: logcheck: Rewriting log lines to be more easily human readable

2024-05-27 Thread Richard Lewis
On Wed, 25 Jun 2003 10:35:02 -0400 Erik Jacobson wrote: > While looking through a few pages worth of FTP logs and other such > things in my logcheck reports, I would think that many people might find > the ability to have rewrite rules for logcheck. It would enable > administrators to sift out

Bug#690145: bad rule in ignore for saslauthd (patch included)

2024-05-27 Thread Richard Lewis
On Wed, 10 Oct 2012 09:24:26 -0400 CJ Fearnley wrote: > File: /etc/logcheck/ignore.d.server/saslauthd > The following patch fixes a bug in the regex for ignoring > useless lines from saslauthd authentication failures > (/etc/logcheck/ignore.d.server/saslauthd) on this Squeeze system: > >

Bug#617232: logcheck: ignore regexes match ipv4 addresses only, causing false positives with ipv6 addresses.

2024-05-27 Thread Richard Lewis
On Mon, 07 Mar 2011 11:19:04 + "Benjamin M. A'Lee" wrote: > Various files under ignore.d.* use "[0-9.]{7,15}" to match an IPv4 > address, e.g., a connection to rsyncd. However, this does not match > IPv6 addresses, causing spurious reports. > > A better regexp might be something like:

Bug#761813: grep and locales

2024-05-23 Thread Richard Lewis
On Tue, 14 Mar 2023 10:19:19 -0400 Simon Deziel wrote: > On 2023-03-14 08:49, Richard Lewis wrote: > > On Mon, 13 Mar 2023, 12:36 Simon Deziel, wrote: > > > >> egrep still consumes a lot of memory for me. A workaround I've been > >> using is to add th

Bug#630721: logcheck: improve support for non-POSIX charsets in generated report

2024-05-23 Thread Richard Lewis
On Thu, 16 Jun 2011 16:38:49 +0200 Nenad Cimerman wrote: TLDR: some time in the last 15 years, this bug against logcheck has been fixed, as far as i can tell > My system is setup with non-POSIX default locale (see below), using UTF-8 > character encoding. > This leads to many lines inside

Bug#1071426: logcheck-database: smartd: Match nvme lines too

2024-05-20 Thread Richard Lewis
On Sun, 19 May 2024 at 05:06, Stefanos Harhalakis wrote: > See attached patch for matching NVMe devices too in smartd logs Thanks - yes i'd noticed that the rules for smartd need an update and this is on the radar - however, the update to the names of the .state files i was not aware of! I

Bug#1071377: chkrootkit: File name including a quote mark throws script off

2024-05-20 Thread Richard Lewis
On Sat, 18 May 2024 at 08:39, Shai Berger wrote: > This morning, when chkrootkit made its daily run, I had > in /tmp a file named: 'חברת חשמל לישראל בע"מ - חשבון דו חודשי.pdf' > (the single quote marks on the edges are not part of the name, but > the double quote mark in the middle is) > > This

Bug#358965: RE: bash: Please support setting terminal title for screen

2024-05-15 Thread Richard Lewis
On Sun, 4 May 2014 22:33:23 +1000 Scott Leggett wrote: > I just spent half an hour figuring out how to get window titles to > reflect my session in byobu.. and I find the exact patch required is > already here (thanks Josh). > > I guess this is just a +1 for patching skel.bashrc so that ssh-ing

Bug#625895: logcheck-database: /etc/logcheck/ignore.d.server/dovecot rule misses unusual Message-Id

2024-05-12 Thread Richard Lewis
On Fri, 06 May 2011 11:32:03 -0700 Gerald Turner wrote: > Hello, I've seen some legitimate mails with unusual Message-Id headers > that cause logchecks dovecot delivery rule to be bypassed. > > Example: … sieve: msgid=<20110422T2108.GA.(stdi.s...@fsing.rootsland.net>: > stored mail into mailbox

Bug#491127: logcheck: please consider an option which will always check the entire log file

2024-05-12 Thread Richard Lewis
On Sun, 12 May 2024 at 19:57, Marc Haber wrote: > > On Sun, May 12, 2024 at 06:54:59PM +0100, R Lewis wrote: > > On Wed, 16 Jul 2008 23:15:51 +0200 Marc Haber > > wrote: > > > > > It would help with debugging to have an option that causes logcheck to > > > always look through the entire log

Bug#975694: [logcheck-database] stop filtering smartd attribute change events

2024-05-12 Thread Richard Lewis
control: tags -1 + moreinfo thanks On Wed, 25 Nov 2020 13:13:14 +0500 Alex Volkov wrote: > IDK how it was in 2006 when this stupid decision was made, but nowadays > `smartd` has all the needed filtering features in itself, in a case someone > gets "annoyed" by attribute changes. Yeah, sure, it

Bug#862638: logcheck: Please add suricata rules to logcheck

2024-05-12 Thread Richard Lewis
control: tags -1 moreinfo control: severity -1 wishlist thanks On Mon, 15 May 2017 10:42:03 +0200 > I am very happy with logcheck. It is great working and very usefull. However, > it would be nice, if you could add a ruleset for suricata (a successor to the > well known snort IDS), so I get

Bug#735287: logcheck: invent conditional logging

2024-05-12 Thread Richard Lewis
On Tue, 14 Jan 2014 13:33:25 +0100 Arne Wichmann wrote: > There is one thing I would like to have in logcheck for quite a long time > already: > > Invent a mechanism by which a pattern is only mailed (or not mailed) if > another pattern was seen a given time before it (or also possibly after >

Bug#919866: logcheck: Feature request: wildcards in .logfiles pathnames

2024-05-12 Thread Richard Lewis
On Sun, 20 Jan 2019 15:50:55 +0530 Charles Atkinson wrote: > Please consider introducing wildcards into the paths in the .logfiles > configuration files. Perhaps similar to the way they are used in logrotate's > paths. > A use case is when using logcheck to check logs from multiple

Bug#241787: options to seperate hosts and for log compaction would both be nice

2024-05-12 Thread Richard Lewis
> This bug is nearly 20 years old. (It is a shame no-one replied - the links > no longer work and there is not enough info recorded to action) > > Unless anyone is watching and can proivde more info about what the issue > is/was then i suggest we close it. A year later: closing. logcheck can

Bug#302379: dh_installlogcheck installs files as root:root 644, not root:logcheck 640

2024-05-12 Thread Richard Lewis
On Mon, 24 Aug 2009 08:36:21 -0400 =?iso-8859-1?B?RnLpZOlyaWMgQnJp6HJl?= wrote: > On Thu, Mar 31, 2005 at 09:54:34AM -0500, Marc Sherman wrote: > > I reported a bug on a couple clamav packages (302253, 302254) which > > noted that in Sarge, logcheck files are supposed to be root:logcheck > > 640,

Bug#383289: RFE: logtail locking

2024-05-12 Thread Richard Lewis
On Wed, 16 Aug 2006 05:33:26 -0500 bingo wrote: > It would be good if logtail supports locking. I think we need some more information if this bug is to be action-ed. logcheck uses logtail2 now (and syslog is not the default):so perhaps it is not relevant after nearly 20 years (there were other

Bug#750232: logtail2 should not not print the final log entry if it does not end with "\n"

2024-05-12 Thread Richard Lewis
On Mon, 2 Jun 2014 10:25:40 -0700 (PDT) Chris Stromsoe wrote: > logtail2 does not do any sanity checking on the final line of input to > make sure that it is complete and "\n" terminated. If syslog is not set > to flush on every write, it's possible for consecutive runs of logcheck to > get a

Bug#470997: logcheck: allow running w/o locking

2024-05-12 Thread Richard Lewis
On Fri, 14 Mar 2008 21:50:17 -0400 =?utf-8?b?RnLDqWTDqXJpYyBCcmnDqHJl?= < > When testing a checked-out copy of the rulefiles against an old log copy > and sending the output to stdout, I still have to use sudo because > logcheck insists on creating a lockfile. It'd be nice to provide an > option

Bug#470608: work-around for logcheck email charset

2024-05-12 Thread Richard Lewis
On Sat, 16 May 2020 17:12:42 -0700 Wade Richards wrote: > This is regarding Debian bug #47608 "wrong charset in logcheck mail > (charset=unknown-8bit)" > > > The maintainer has closed this bug as 'wontfix', but if an end-user is > looking for a work-around, you can add the following to your >

Bug#1033059: logcheck: NEWS advice how to deal with timestamps in different formats

2024-05-12 Thread Richard Lewis
On Sat, 18 Mar 2023 18:55:25 + Richard Lewis wrote: > On Sat, 18 Mar 2023, 15:12 Holger Levsen, wrote: > > > On Thu, Mar 16, 2023 at 06:00:06PM +, Holger Levsen wrote: > > > aaah, thanks! I only checked > > /usr/share/doc/logcheck/NEWS.Debian.gz &

Bug#583600: ignore individual entries but write summaries

2024-05-12 Thread Richard Lewis
On Fri, 28 May 2010 19:04:17 +0200 Holger Levsen wrote: > I often add logcheck ignore rules for security related events (like ssh login > attemps. etc), cause they are too many and login is protected reasonably > anyway. > > But then I would like to get summaries for some ignored patterns,

Bug#1070281: logcheck: becomes less and less usable because of user-level logs

2024-05-05 Thread Richard Lewis
On Fri, 3 May 2024, 12:44 Francesco Potortì, wrote: > > > One cure would be to have logcheck ignore user-level messages, and only > care about system-level ones. Is that possible? > > > >maybe it is possible - how do you define "system-level message"? > > Those created by root-owned processes,

Bug#1070436: autopkgtest-virt-schroot: error when using 'unshare --net' even though schroot allows this

2024-05-05 Thread Richard Lewis
control: close 1070436 thanks On Sun, 5 May 2024, 19:10 Jochen Sprickerhof, wrote: > Hi Richard, > > * Richard Lewis [2024-05-05 11:32]: > >If i try and run tests that use 'unshare --net' with a > >schroot backend they fail inside autopkgtest even though > >this work

Bug#1070436: autopkgtest-virt-schroot: error when using 'unshare --net' even though schroot allows this

2024-05-05 Thread Richard Lewis
Package: autopkgtest Version: 5.28 Severity: normal X-Debbugs-Cc: richard.lewis.deb...@googlemail.com Dear Maintainer, If i try and run tests that use 'unshare --net' with a schroot backend they fail inside autopkgtest even though this works in the schroot being used. This works fine in a

Bug#1070281: logcheck: becomes less and less usable because of user-level logs

2024-05-03 Thread Richard Lewis
control: reassign -1 logcheck-database thanks (this is mostly about logcheck-database) On Fri, 3 May 2024, 09:39 Francesco Potortì, wrote: > > > Starting maybe a couple years ago, logcheck spits an amount of stuff that > has now become unamnageable. logcheck-database was mostly dormant sround

Bug#1070152: chkrootkit: duplicate line from ifpromisc

2024-05-02 Thread Richard Lewis
On Thu, 2 May 2024, 03:45 Vincent Lefevre, wrote: > On 2024-05-01 19:05:06 +0100, Richard Lewis wrote: > > I agree that you should be able to filter out duplicate lines. And i > think > > this is possible with a custom filter. > > Yes, but "sed" may not b

Bug#1015201: logcheck: Update patterns, here: rsyslogd

2024-05-02 Thread Richard Lewis
lOn Mon, 29 Apr 2024, 14:19 Helge Kreutzmann, wrote: > Am Sat, Apr 27, 2024 at 07:11:40PM +0100 schrieb Richard Lewis: > > On Sun, 17 Jul 2022 17:28:11 +0100 Richard Lewis > > wrote: > > > Hi Helge. Apologies no-one has replied to this bug report for 2 years > &g

Bug#1070152: chkrootkit: duplicate line from ifpromisc

2024-05-01 Thread Richard Lewis
On Wed, 1 May 2024, 00:57 Vincent Lefevre, wrote: > On 2024-05-01 01:29:10 +0200, Vincent Lefevre wrote: > > For instance, /var/log/chkrootkit/log.expected contains > > > > WARNING: Output from ifpromisc: > > lo: not promisc and no packet sniffer sockets > > : PACKET >

Bug#409444: logcheck: ignore "last line repeated $n times" if prevline matched

2024-04-28 Thread Richard Lewis
On Sat, 03 Feb 2007 10:29:38 +0100 Jonas Koelker wrote: > I (think I) want to see how many times the messages I care about are > repeated. This means I can't ignore "last line repeated $n times" > messages (obviously). But since those can also occur after messages > that are ignored, I can't

Bug#690608: logcheck-database: consider to add ignore.d.server/rrdcached

2024-04-27 Thread Richard Lewis
On Tue, 16 Oct 2012 03:14:20 +0200 Sebastian Steinhuber wrote: > Dear Maintainer, > to drop (slightly boring) messages from the package rrdcached of the > form: > Oct 15 22:59:29 dds rrdcached[12045]: flushing old values > > I added a file named ignore.d.server/rrdcached, containing the line: >

Bug#442244: [Logcheck-devel] Bug#442244: logcheck-database: should include the filters from cyrus-imapd-2.2

2024-04-27 Thread Richard Lewis
On Fri, 14 Sep 2007 14:06:58 +0200 martin f krafft wrote: > also sprach Alex Prinsier [2007.09.14.1344 > +0200]: > > Please copy over the filters from cyrus-imapd-2.2. I'm running > > logcheck on a loghost, which doesn't run cyrus itself. There might > > be a better alternative to copying the

Bug#588312: [Logcheck-devel] Bug#588312: logcheck-database: updated rules for many packages

2024-04-27 Thread Richard Lewis
Closing this bug from 2010 (14 years ago!) -- the then-maintainer found that most of the suggestions were either already present or should not actually be added, for various reasons. A requested was made to resubmit as more independent bugs - if that was done, we dont need this bug, and if not

Bug#511483: logcheck-database: please add rules for rkhunter

2024-04-27 Thread Richard Lewis
package: logcheck-database # think it's reasonable to add rkhunter rules - although the ones in this bug need updates severity 511483 normal tags 511481 - wontfix

Bug#592365: logcheck: ignore rules for transmission-daemon

2024-04-27 Thread Richard Lewis
On Tue, 10 Aug 2010 10:28:54 +1000 Nemo wrote: > > ^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ > > transmission-daemon\[[[:digit:]]+\]: Saved > > "/var/lib/transmission-daemon/info/.*" \(bencode.c:1651\)$ > > ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ transmission-daemon\[[0-9]+\]: .* DHT > > announce

Bug#1015201: logcheck: Update patterns, here: rsyslogd

2024-04-27 Thread Richard Lewis
On Sun, 17 Jul 2022 17:28:11 +0100 Richard Lewis wrote: > > The pattern for rsyslogd can be improved. Please add the following > > line: > > > > imuxsock: Acquired UNIX socket '/run/systemd/journal/syslog' \(fd 3\) from > > systemd. \[v8.2206.0\] > > >

Bug#532719: [Logcheck-devel] Bug#532719: additional sample

2024-04-27 Thread Richard Lewis
On Tue, 16 Jun 2009 11:27:57 -0700 Russ Allbery wrote: > chrysn writes: > touch /etc/default/locale will also make these go away with no behavior > changes. In my experience, it happens on systems upgraded from older > versions of Debian but not with new installs. I think this is more a > bug

Bug#510472: logcheck-database: pam_unix messages could be ignored.

2024-04-27 Thread Richard Lewis
On Tue, 18 Aug 2009 20:24:31 -0400 =?iso-8859-1?B?RnLpZOlyaWMgQnJp6HJl?= wrote: > On Fri, Jan 02, 2009 at 10:21:51AM +0100, Jan Evert van Grootheest wrote: > > Package: logcheck-database > > Version: 1.2.68 > > > > It has now started to spam the logs with lots of > > Jan 2 09:22:57 sisko

Bug#590684: [logcheck-database] rules for rsyslog

2024-04-27 Thread Richard Lewis
On Mon, 02 Aug 2010 10:29:03 +0200 Hannes von Haugwitz wrote: > > ^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ rsyslogd: \[origin > > software="rsyslogd" swVersion="3.18.6" x-pid="[[:digit:]]+" > > x-info="http://www.rsyslog.com"\] restart$ > > Daemon restart messages are willingly not included in

Bug#1069697: lintian: debian-changelog-line-too-short CVEs

2024-04-23 Thread Richard Lewis
On Tue, 23 Apr 2024, 00:12 Thorsten Glaser, wrote: > P: openjdk-8-doc: debian-changelog-line-too-short CVEs > [usr/share/doc/openjdk-8-doc/changelog.Debian.gz:4] > > The changelog in question is: > > * New upstream release > * CVEs > - CVE-2024-21011 > - CVE-2024-21085 > -

Bug#885414: base-files: lack of quoting in shell variable expansions in /etc/profile

2024-04-20 Thread Richard Lewis
On Thu, 18 Apr 2024, 23:18 Santiago Vila, wrote: > El 18/4/24 a las 22:17, Richard Lewis escribió: > >>> '^[a-zA-Z0-9_][a-zA-Z0-9._-]*\.sh$' > >> > >> Hi. I confirm that this is appropriate for what we distribute: > > > > What about local sc

Bug#885414: base-files: lack of quoting in shell variable expansions in /etc/profile

2024-04-18 Thread Richard Lewis
> >'^[a-zA-Z0-9_][a-zA-Z0-9._-]*\.sh$' > > Hi. I confirm that this is appropriate for what we distribute: What about local scripts added by users (which this change might prevent loading): perhaps a NEWS.Debian entry would suffice?

Bug#1068775: sbuild-qemu: fails to work, if piuparts is requested, but not installed on the host

2024-04-14 Thread Richard Lewis
On Fri, 12 Apr 2024, 19:00 Johannes Schauer Marin Rodrigues, < jo...@debian.org> wrote: > Hi Francesco, > > Quoting Francesco Poli (wintermute) (2024-04-11 00:13:51) > > > > sbuild --dist unstable --purge-build=never --purge-deps=never > --chroot-mode=autopkgtest --autopkgtest-virt-server=qemu

Bug#1056137: systemd: downgrading systemd packages kills off the desktop environment

2024-02-28 Thread Richard Lewis
On Wed, 28 Feb 2024 18:37:41 +0100 Michael Biebl wrote: > On Fri, 17 Nov 2023 14:40:05 +0100 Christoph Anton Mitterer > wrote: > > Package: systemd > > Version: 255~rc2-1 > > Because of #1056135 I was downgradin systemd/udev packages to 254.5-1. > > While apt was still running, this causes the

Bug#1064395: logcheck: rsyslog produces two timestamp formats in latest version

2024-02-27 Thread Richard Lewis
On Mon, 26 Feb 2024, 13:03 Michael Biebl, wrote: > Hi > > On Thu, 22 Feb 2024 19:01:05 +0000 Richard Lewis > wrote: > > On Thu, 22 Feb 2024, 10:15 Ralf Schlatterbeck, wrote: > > > > > On Wed, Feb 21, 2024 at 02:52:33PM +0100, Ralf Schlatterbeck wrote: &g

Bug#1064395: logcheck: rsyslog produces two timestamp formats in latest version

2024-02-22 Thread Richard Lewis
On Thu, 22 Feb 2024, 10:15 Ralf Schlatterbeck, wrote: > On Wed, Feb 21, 2024 at 02:52:33PM +0100, Ralf Schlatterbeck wrote: > > > > I forgot to mention: > > There is an upstream (rsyslog) bug-report at > > https://github.com/rsyslog/rsyslog/issues/5332 > > Upstream has decided that it is not a

Bug#1059769: chkrootkit-daily : filtering out empty lines to prevent unnecessary empty alert emails.

2023-12-31 Thread Richard Lewis
On Sun, 31 Dec 2023 at 17:30, Franck Richter wrote: > Currently chkrootkit-daily send me emails even if I ignore all false > positives using chkrootkit.ignore. > Because chkrootkit outputs empty lines that cannot be excluded via > chkrootkit.ignore. I havn't checked this, but: i think you

Bug#1057302: Bug#1057234: sbuild: Generates weird messages in /var/log/syslog

2023-12-27 Thread Richard Lewis
On Sun, 3 Dec 2023 00:06:23 +0100 =?UTF-8?B?UHJldcOfZSwgSGlsbWFy?= wrote: > On 02.12.2023 08:30, Johannes Schauer Marin Rodrigues wrote: > > Quoting Hilmar Preusse (2023-12-01 23:10:36) > > Hi, > > >> I run sbuild as following: > >> > >> sbuild --no-run-lintian --arch-all --dist=sid *.dsc -d >

Bug#1058755: logcheck: Email not report log lines

2023-12-19 Thread Richard Lewis
control: close -1 thanks On Tue, 19 Dec 2023, 08:39 Stefano Callegari, wrote: > > > > The logs lines there are, but after the header I see many blank lines: I > > use mutt in a full screen console (more than 50 lines) and I need to > press > > page down for 16 times before reach the first line

Bug#1058755: logcheck: Email not report log lines

2023-12-17 Thread Richard Lewis
On Sun, 17 Dec 2023 at 19:03, Stefano Callegari wrote: > Il Fri, Dec 15, 2023 at 11:31:18PM +0000, Richard Lewis scrisse: > > On Fri, 15 Dec 2023 at 16:06, Stefano Callegari > > wrote: > > > > > from few days the email from cron are empty, there is only the heade

Bug#1058755: logcheck: Email not report log lines

2023-12-15 Thread Richard Lewis
On Fri, 15 Dec 2023 at 16:06, Stefano Callegari wrote: > from few days the email from cron are empty, there is only the header.txt. > /etc/logcheck <-bash> # su -s /bin/bash -c "/usr/sbin/logcheck -l > /var/log/syslog" logcheck > > the email has the log lines. Without the -l option, still

Bug#1042049: lintian: FTBFS: 3 tests failed

2023-12-11 Thread Richard Lewis
On Thu, 7 Dec 2023 22:05:29 +1300 Vladimir Petko wrote: > As of today there are more test failures: > Test Summary Report > --- > debian/test-out/eval/checks/documentation/manual/manpage-errors-from-man/generic.t >

Bug#1057470: Outdated rkhunter since 2018-02

2023-12-06 Thread Richard Lewis
On Wed, 6 Dec 2023, 04:41 Jörg Frings-Fürst, wrote: > Hello Francois, > > I did not search for Vulnerabilities. However, I am of the opinion that > using > rkhunter in its current form is equivalent to using a 6 year old virus > scanner > and therefore involves an increased security risk. > i

Bug#1057234: sbuild: Generates weird messages in /var/log/syslog

2023-12-04 Thread Richard Lewis
On Fri, 1 Dec 2023, 22:15 Hilmar Preusse, wrote: > > 2023-12-01T09:36:52.230653+01:00 haka2 schroot[3182]: [unstable- > amd64-sbuild-327cf8c2-30d1-4469-aa7b-9bc3653dbc45 chroot] (root->root) > Running > command: "perl -e #012use strict;#012 >use warnings;#012use POSIX;#012 > >

Bug#1056905: trixie: document architecture support in trixie

2023-11-26 Thread Richard Lewis
Package: release-notes tags: trixie X-Debbugs-No-Ack: yes Per https://lists.debian.org/debian-devel-announce/2023/11/msg5.html mips64el is marked as out-of-sync and may not release with trixie. If so, we will need something in release-notes about architectures being removed. Or maybe both

Bug#862649: Dead upstream

2023-11-19 Thread Richard Lewis
On Sat, 06 Oct 2018 01:11:00 + Chris Knadle wrote: > I was investigating this orphaned package in relation to it being a dependency > for Logcheck, and unfortunately the inactive maintainer is also the upstream > author of mime-construct which was last updated 2010-06-23. That can be seen >

Bug#1019690: lintian: Exit code = 2 when using --show-overrides with overriden lintian error

2023-10-27 Thread Richard Lewis
On Thu, 17 Aug 2023 13:01:43 +0200 Philipp Huebner wrote: > FWIW, I can reproduce and thus confirm this. This issue - that the error code is 2 when --show-overrides is used and 0 otherwise is also reproduced in

Bug#1019202: dh-make-elpa: crashes with: Can't locate object method "gecos"

2023-10-22 Thread Richard Lewis
: > > Hi Richard, > > Чт 19 окт 2023 @ 22:42 Richard Lewis : > > > On Mon, 16 Oct 2023 at 09:00, Lev Lamberov wrote: > >> Вс 15 окт 2023 @ 19:37 Richard Lewis : > >> > On Mon, 05 Sep 2022 19:44:27 -0300 David Bremner > >> > wrote: > &

Bug#1019202: dh-make-elpa: crashes with: Can't locate object method "gecos"

2023-10-19 Thread Richard Lewis
On Mon, 16 Oct 2023 at 09:00, Lev Lamberov wrote: > Вс 15 окт 2023 @ 19:37 Richard Lewis : > > On Mon, 05 Sep 2022 19:44:27 -0300 David Bremner wrote: > >> Lev Lamberov writes: > > I also see this bug in bookwork: dh-make-elpa doesnt work at all > > unless D

Bug#1019202: dh-make-elpa: crashes with: Can't locate object method "gecos"

2023-10-15 Thread Richard Lewis
On Mon, 05 Sep 2022 19:44:27 -0300 David Bremner wrote: > Lev Lamberov writes: > > yes I did cd (just did again to double check). I don't have DEBFULLNAME > set, maybe that makes a difference. I also see this bug in bookwork: dh-make-elpa doesnt work at all unless DEBFULLNAME (and maybe

Bug#1053979: chkrootkit: ignore or lower to info for files owned by installed debian packages and unchanged

2023-10-15 Thread Richard Lewis
Thanks - i really like the idea to checking whether results are from Debian packages as that is the first thing a user will want to know. I doubt upstream would include such a patch, but debian has already made huge changes to the output. There is no concept of 'INFO' or 'lowering' of messages in

Bug#1053898: Hardening rsyslog.service breaks debian/tests/logcheck autopkgtest

2023-10-14 Thread Richard Lewis
On Fri, 13 Oct 2023 at 20:27, Michael Biebl wrote: > It turns out that `PrivateTmp=yes` breaks the logcheck autopkgtest. i think the test tells rsyslog to write to /tmp and then calls logcheck on the output outside the unit. But the PrivateTmp=true means rsyslog is actually writing to

Bug#953591: bash: colors should be enabled by default (force_color_prompt)

2023-10-09 Thread Richard Lewis
On Mon, 9 Oct 2023, 04:09 Kevin Otte, wrote: > I wrote a patch to address #1026379 that I feel would be appropriate > here too. As I noted there, using tput for detection basically means > having ncurses-bin as a Recommends, so we may want a better way of doing > this detection. > is it more

Bug#1043043: UDD patches: marks Forwarded as invalid if not 'no', 'not-needed', 'yes' or URL

2023-10-01 Thread Richard Lewis
On Mon, 7 Aug 2023 01:19:38 +0200 Guillem Jover wrote: > On Fri, 2023-08-04 at 23:35:27 -0300, David da Silva Polverari wrote: > > When using https://udd.debian.org/patches.cgi, I notice that whenever > > the Forwarded field contains anything other than "no", "not-needed", > > "yes" or an URL,

Bug#1051896: rkhunter: CVE-2023-4413

2023-09-14 Thread Richard Lewis
On Thu, 14 Sep 2023, 06:00 Francois Marier, wrote: > On 2023-09-13 at 14:15:53, Moritz Mühlenhoff (j...@inutil.org) wrote: > > https://gist.github.com/MatheuZSecurity/16ef0219db8f85f49f945a25d5eb42d7 > > My summary of this is: it's possible to figure out what files/ports/etc. > rkhunter is

Bug#1049412: logcheck: Does not respect removal of /etc/logcheck/header.txt in bullseye

2023-09-10 Thread Richard Lewis
On Tue, 15 Aug 2023 19:54:26 +0200 Santiago Vila wrote: > In preinst, do something like this: > > if upgrading-from-previous-version-whatever-is-coded >if [ ! -f /etc/logcheck/header.txt ]; then > touch /etc/logcheck.header.was.removed.txt >fi > fi > > Then in postinst, do something

Bug#1040690: emacsen-common analysis for cruft files from elpa-foo packages during apt upgrade

2023-08-28 Thread Richard Lewis
On Thu, 17 Aug 2023, 20:57 Nicholas D Steeves, wrote: > Richard Lewis wrote: > > David Bremner wrote: > > > Richard Lewis writes: > > > > David Bremner wrote: > > > > What happens in the 'apt upgrade' is: > > > > the old emacsen-common

  1   2   3   4   >