clone 486703 -1
reassign -1 logcheck-database
retitle -1 logcheck-database: please include ignore rules for wu-ftpd
tag -1 +patch
retitle 486703 wu-ftpd: remove logcheck ignore rules
thanks
On Tue, Jun 17, 2008 at 09:26:19PM +0200, Ralf Treinen wrote:
> Unpacking wu-ftpd (from .../wu-ftpd_2.6.2-29_amd64.deb) ...
> dpkg: error processing
> /var/cache/apt/archives/wu-ftpd_2.6.2-29_amd64.deb (--unpack):
> trying to overwrite `/etc/logcheck/ignore.d.server/wu-ftpd', which is
> also in package logcheck-database
Seems that the new version of logcheck-database includes a
/etc/logcheck/ignore.d.server/wu-ftpd file, which conflicts with the current
wu-ftpd package.
I think the best solution is probably to remove the file from the wu-ftpd,
and add the rules to the logcheck-database package. I've attached a patch
which adds the rules from the wu-ftpd package to logcheck-database, along
with a versioned conflict on the wu-ftpd packages which include the logcheck
rules file.
I'll upload a new version of the wu-ftpd package soon without the rules file
included.
--
Chris Butler <[EMAIL PROTECTED]>
GnuPG Key ID: 1024D/D097A261
diff -urN orig/logcheck-1.2.64/debian/control logcheck-1.2.64/debian/control
--- orig/logcheck-1.2.64/debian/control 2008-06-03 23:29:01.000000000 +0100
+++ logcheck-1.2.64/debian/control 2008-06-21 16:03:11.000000000 +0100
@@ -26,7 +26,7 @@
Architecture: all
Depends: ${misc:Depends}
Replaces: logcheck (<= 1.1.1-9)
-Conflicts: amavisd-new (<< 1:2.5.2-1)
+Conflicts: amavisd-new (<< 1:2.5.2-1), wu-ftpd (<< 2.6.2-30)
Description: database of system log rules for the use of log checkers
This database is part of the Logcheck package, but might be used by others.
It brings a database of regular expressions for matching system log entries
diff -urN orig/logcheck-1.2.64/rulefiles/linux/ignore.d.server/wu-ftpd logcheck-1.2.64/rulefiles/linux/ignore.d.server/wu-ftpd
--- orig/logcheck-1.2.64/rulefiles/linux/ignore.d.server/wu-ftpd 2008-03-18 13:57:59.000000000 +0000
+++ logcheck-1.2.64/rulefiles/linux/ignore.d.server/wu-ftpd 2008-06-21 16:01:19.000000000 +0100
@@ -1 +1,7 @@
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ wu-ftpd: PAM-listfile: Refused user [._[:alnum:]-]+ for service wu-ftpd$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ wu-ftpd\[[0-9]+\]: connect from [._[:alnum:]-]+ \([0-9.]{7,15}\)$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ wu-ftpd\[[0-9]+\]: failed login from [._[:alnum:]-]+ \[[0-9.]{7,15}\]$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ wu-ftpd\[[0-9]+\]: FTP LOGIN FROM [._[:alnum:]-]+ \[[0-9.]{7,15}\], [._[:alnum:]-]+$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ wu-ftpd\[[0-9]+\]: FTP LOGIN REFUSED \(ftp not in /etc/passwd\) FROM [._[:alnum:]-]+ \[[0-9.]{7,15}\], [._[:alnum:]-]+$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ wu-ftpd\[[0-9]+\]: FTP session closed$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ wu-ftpd\[[0-9]+\]: User [._[:alnum:]-]+ timed out after [0-9]+ seconds at \w{3} \w{3} [ :0-9]{16}$
