[OT] logcheck and fetchnews
Hello, sorry for posting this to devel but I failed while asking other lists. I just want to make sure that it is a bug of logcheck and not my own before I file a bug-report: Im using ~ dpkg --status logcheck Package: logcheck ... Version: 1.1.1-4 I have defined the following ignore-rules in /etc/logcheck/logcheck.ignore: fetchnews fetchnews\[.*\]:.*illegal fetchnews.*illegal article fetchnews\[.*\]:.*illegal article.*/var/spool/news.* Success fetchnews\[.*\]:.*Illegal seek fetchnews\[.*\]:.*Success Seems strange why I did define some rules which are stronger than others but they are just all my trials which failed to block the following messages. I hoped that the first rule should have deleted all fetchnews entries but I continueally get the follwoing type of messages: Date: Mon, 21 Aug 2000 12:02:04 +0200 From: root [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: wr-linux02 08/21/00:12.02 system check Security Violations =-=-=-=-=-=-=-=-=-= Aug 21 11:03:39 wr-linux02 fetchnews[19687]: illegal article: /var/spool/news/interbase/public/general/1096: Illegal seek Aug 21 11:03:39 wr-linux02 fetchnews[19687]: illegal article: /var/spool/news/interbase/public/general/1097: Illegal seek Aug 21 11:03:39 wr-linux02 fetchnews[19687]: illegal article: /var/spool/news/interbase/public/kinobi/jdbc-odbc-oledb/54: Illegal seek Aug 21 11:03:39 wr-linux02 fetchnews[19687]: illegal article: /var/spool/news/mers/interbase/list/1147: Illegal seek Could anybody help me out of this boring messages? Is this a bug of logcheck? Kind regards Andreas.
Re: [OT] logcheck and fetchnews
* Andreas Tille in [OT] logcheck and fetchnews dated 2000/08/21 14:05 * wrote: Hello, sorry for posting this to devel but I failed while asking other lists. I just want to make sure that it is a bug of logcheck and not my own before I file a bug-report: ...snip... Seems strange why I did define some rules which are stronger than others but they are just all my trials which failed to block the following messages. I hoped that the first rule should have deleted all fetchnews entries but I continueally get the follwoing type of messages: Security Violations =-=-=-=-=-=-=-=-=-= Aug 21 11:03:39 wr-linux02 fetchnews[19687]: illegal article: /var/spool/news/interbase/public/general/1096: Illegal seek Aug 21 11:03:39 wr-linux02 fetchnews[19687]: illegal article: /var/spool/news/interbase/public/general/1097: Illegal seek Aug 21 11:03:39 wr-linux02 fetchnews[19687]: illegal article: /var/spool/news/interbase/public/kinobi/jdbc-odbc-oledb/54: Illegal seek Aug 21 11:03:39 wr-linux02 fetchnews[19687]: illegal article: /var/spool/news/mers/interbase/list/1147: Illegal seek Could anybody help me out of this boring messages? Is this a bug of logcheck? No, just someone who didn't read the documentation. You need to create lines to ignore violations in logcheck.violations.ignore, if you'd read the documentation in /usr/share/doc/logcheck though you'd know that. Check INSTALL.gz and it clearly defines the purpose of each of the files in the /etc/logcheck hierarchy. -- shaky cellar pgp17bW84HEO4.pgp Description: PGP signature
Re: [OT] logcheck and fetchnews
On Mon, 21 Aug 2000, Ashley Clark wrote: No, just someone who didn't read the documentation. Sorry, this is not my best day :-((. Thanks Andreas.