Your message dated Sat, 11 Jan 2014 00:20:23 +0000
with message-id <[email protected]>
and subject line Bug#709753: fixed in samhain 3.1.0-1
has caused the Debian Bug report #709753,
regarding mail reports with default config fail almost silently
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
709753: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=709753
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: samhain
Version: 2.8.3a-1
Severity: normal
the wheezy version (very quietly) fails to send any mail reports
with the default config, i.e. SetMailAddress=root@localhost and no
SetMailRelay. the squeeze version worked fine with this combo of settings.
here's the relevant output from samhain -t check -i -p debug -m crit -l none:
...
MARK : [2013-05-25T18:15:01+1000] (samhain.c, 2080, 0) msg=<File check
completed.>, time=<3>, kBps=<96006.504000>
DEBUG : [2013-05-25T18:15:01+1000] (sh_mail.c, 1653, 4) msg=<The requested
name is valid but does not have an IP address: >, subroutine=<res_query>
DEBUG : [2013-05-25T18:15:01+1000] (sh_mail.c, 1895, 0) msg=<No MX record for
domain localhost>, subroutine=<get_mx>
ERROR : [2013-05-25T18:15:01+1000] (sh_mail.c, 1930, 0) msg=<Unknown host
localhost>, subroutine=<return_mx>
ERROR : [2013-05-25T18:15:01+1000] (sh_mail.c, 1084, 0) msg=<The specified
host is unknown: localhost>, subroutine=<return_mx>, service=<email>,
host=<localhost>
ERROR : [2013-05-25T18:15:01+1000] (sh_mail.c, 725, 0) msg=<Service failure>,
service=<mail>, obj=<root@localhost>
ALERT : [2013-05-25T18:15:01+1000] (samhain.c, 781, 0) msg=<EXIT>,
program=<Samhain>, status=<None>
the machine in question has a perfectly working /etc/hosts entry for localhost,
and the faulty behaviour is the same if one uses [email protected].
the problem shows up in samhain's logs with severity debug and error, which
is quite low considering that samhain assigns lots of events the severities
crit or alert and that the logs are usually quite large; that syslogseverity
defaults to alert makes it even harder to spot the trouble.
as a workaround i used: SetMailAddress=root, SetMailRelay=localhost
regards
az
--- End Message ---
--- Begin Message ---
Source: samhain
Source-Version: 3.1.0-1
We believe that the bug you reported is fixed in the latest version of
samhain, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Javier Fernández-Sanguino Peña <[email protected]> (supplier of updated samhain
package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.8
Date: Fri, 10 Jan 2014 16:51:45 +0100
Source: samhain
Binary: samhain
Architecture: source i386
Version: 3.1.0-1
Distribution: unstable
Urgency: medium
Maintainer: Javier Fernández-Sanguino Peña <[email protected]>
Changed-By: Javier Fernández-Sanguino Peña <[email protected]>
Description:
samhain - Data integrity and host intrusion alert system
Closes: 689902 700109 701353 709753 733468
Changes:
samhain (3.1.0-1) unstable; urgency=medium
.
* New upstream release. (Closes: #733468, #700109)
* This new upstream release builds with gcc 4.8 (Closes: #701353)
* Fix use of /var/run/samhain, which is created by the init.d script since
version 2.6.2-1:
- Remove the /var/run/samhain directory when the package is purged
- Do not ship /var/run/samhain in the package file
Thanks go to Thomas Goirand for spotting this issue and providing a patch,
which I used as a basis for the above changes
(Closes: #689902)
* Default samhainrc now uses SetMailAddress=root, SetMailRelay=localhost
since there have been reports of the previous confguration
(SetMailAddress=root@localhost, SetMailRelay=NULL) not working since
samhain tries to retrieve an MX record for 'localhost' from the DNS
(Closes: 709753)
Checksums-Sha1:
02a86d8a78cc67b43f93d5687586f3438dfd54a1 1114 samhain_3.1.0-1.dsc
d04826370fd5a527fd203902a13613309b54c786 2123573 samhain_3.1.0.orig.tar.gz
9b648f07942b1a1d60b53b4b8ad7a98fe572393b 39518 samhain_3.1.0-1.diff.gz
075f06435a50c64c880da36488885091aa697a51 1105670 samhain_3.1.0-1_i386.deb
Checksums-Sha256:
e1b3b959371b25c1414c9539527018d7f534b46bc90712a74ecc43fa8deeda53 1114
samhain_3.1.0-1.dsc
0b9b8133861fd612bc23681afd5cfdecbe1aafae9c0de5e0504f64a25432e301 2123573
samhain_3.1.0.orig.tar.gz
af85374a42372ec0e656350b9fe977069b9e7e934b00565fd9a7cb6488734379 39518
samhain_3.1.0-1.diff.gz
e8b61fdde6a2babdca76c1d5e2ec8c3c415695c65a5f6e591d036129e32a680e 1105670
samhain_3.1.0-1_i386.deb
Files:
eebbaa66ca7f7a659a65641c9d2665a9 1114 admin optional samhain_3.1.0-1.dsc
770dfcca74db744fc453fa18f54543b4 2123573 admin optional
samhain_3.1.0.orig.tar.gz
75a38a3a9866fc93ed9e71754f0f3791 39518 admin optional samhain_3.1.0-1.diff.gz
b0093c241fbb0c4f1464d07bb20ca743 1105670 admin optional
samhain_3.1.0-1_i386.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.15 (GNU/Linux)
iD8DBQFS0B5KsandgtyBSwkRAsYmAJ0QHwvNgUzQjTBkCl1OkJ2Jry6/uwCeKYqx
p96QFPdTOjGVY5HVy1LjbuM=
=W4cN
-----END PGP SIGNATURE-----
--- End Message ---
