Your message dated Sat, 20 Mar 2010 19:49:59 +0000
with message-id <e1nt4gj-0004f8...@ries.debian.org>
and subject line Bug#571033: fixed in logrotate 3.7.8-5
has caused the Debian Bug report #571033,
regarding logrotate: Logrotate mis-parses config if log dir does not exist, and 
rotates wrong files
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
571033: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=571033
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: logrotate
Version: 3.7.8-4
Severity: critical
Justification: breaks unrelated software


If the directory of a log file specification with wild cards does not exist,
logrotate may mis-parse the config file so badly that it will rotate arbitrary
files appearing in the postrotate script.

Imagine that /bin/sh appears there and it is rotated to /bin/sh.1 . Ouch.
If logrotate fails to parse the config, it must abort, and not
clobber random files.



The interesting part of the "logrotate -d /etc/logrotate.conf" output is
provided below. This is
https://bugs.launchpad.net/ubuntu/+source/apache2/+bug/392532 and causes the
apache2 init script to be rotated away.

I could not reproduce this under lenny. I guess it was introduced in 3.7.8.


====================================

including /etc/logrotate.d                   
reading config file apache2                  
error: error accessing /var/log/apache2: No such file or directory
error: apache2:1 glob failed for /var/log/apache2/*.log           
error: found error in /var/log/apache2/*.log , skipping           
removing last 1 log configs                                       
error: apache2:11 lines must begin with a keyword or a filename (possibly in 
double quotes)
error: apache2:12 missing end of line                                           
           
reading config info for /etc/init.d/apache2 reload > /dev/null                  
           
                fi                                                              
           
        endscript                                                               
           
}                                                                               
           

reading config file apt
...
reading config info for /var/log/btmp                                           
                  

Handling 22 logs

rotating pattern: /var/log/apache2/*.log  weekly (4 rotations)
empty log files are rotated, old logs are removed             

rotating pattern: /etc/init.d/apache2 reload > /dev/null
                fi                                      
        endscript                                       
}                                                       


 weekly (4 rotations)
empty log files are rotated, old logs are removed
considering log /etc/init.d/apache2              
  log does not need rotating                     
considering log reload                           
error: stat of reload failed: No such file or directory
considering log >                                      
error: stat of > failed: No such file or directory     
considering log /dev/null                              
  log does not need rotating                           
considering log fi                                     
error: stat of fi failed: No such file or directory    
considering log endscript                              
error: stat of endscript failed: No such file or directory
considering log }                                         
error: stat of } failed: No such file or directory        


rotating pattern: /var/log/apt/term.log  monthly (6 rotations)
...



--- End Message ---
--- Begin Message ---
Source: logrotate
Source-Version: 3.7.8-5

We believe that the bug you reported is fixed in the latest version of
logrotate, which is due to be installed in the Debian FTP archive:

logrotate_3.7.8-5.debian.tar.gz
  to main/l/logrotate/logrotate_3.7.8-5.debian.tar.gz
logrotate_3.7.8-5.dsc
  to main/l/logrotate/logrotate_3.7.8-5.dsc
logrotate_3.7.8-5_i386.deb
  to main/l/logrotate/logrotate_3.7.8-5_i386.deb



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 571...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Paul Martin <p...@debian.org> (supplier of updated logrotate package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Sat, 20 Mar 2010 19:37:26 +0000
Source: logrotate
Binary: logrotate
Architecture: source i386
Version: 3.7.8-5
Distribution: unstable
Urgency: low
Maintainer: Paul Martin <p...@debian.org>
Changed-By: Paul Martin <p...@debian.org>
Description: 
 logrotate  - Log rotation utility
Closes: 571033
Changes: 
 logrotate (3.7.8-5) unstable; urgency=low
 .
   * New patch:
     + parser571033.patch: fix the config parser to not get confused when
       a wildcard produces no results. (Closes: 571033)
   * Switch to dpkg-source 3.0 (quilt) format
   * Bump debhelper version to 7 (dh_clean -k -> dh_prep).
   * Update standards version to 3.8.4 (no changes).
Checksums-Sha1: 
 ff50f3857d27a16e3ba7a05a81e85c1ed6b931a9 1691 logrotate_3.7.8-5.dsc
 ad76ee3a344c298e6fcf4b0555a2c741e5acfa5a 20874 logrotate_3.7.8-5.debian.tar.gz
 4e585d6bc48e46cc4d8184ade2fc38401b36410d 42802 logrotate_3.7.8-5_i386.deb
Checksums-Sha256: 
 5ab9097df3322da7e0f315cf850e4a8a26c00ad96f1375271a23373f8cc12a7e 1691 
logrotate_3.7.8-5.dsc
 68325f91cbb615c2f9fe03f754cd9a764c2a69afb250fefe9a0a4b853e72b186 20874 
logrotate_3.7.8-5.debian.tar.gz
 6fef3a51d2ae65c8c1f8f7863cf84abfa8cd1620bba29d55de8f411a9361c7f0 42802 
logrotate_3.7.8-5_i386.deb
Files: 
 bf8532e9af70deb845284ec65c2a07a3 1691 admin important logrotate_3.7.8-5.dsc
 75a7b6a932b94382b846b390d9d4e086 20874 admin important 
logrotate_3.7.8-5.debian.tar.gz
 987bd0f84dcebf50376bab6c3c58bf0a 42802 admin important 
logrotate_3.7.8-5_i386.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
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=9SQu
-----END PGP SIGNATURE-----



--- End Message ---

Reply via email to