** Description changed:
+ [Impact]
+
+ Messages about /etc/securetty aren't being handled by logwatch and end
+ up in the "Unmatched Entries" section. Support for /etc/securetty was
+ dropped in focal, but some services or other software haven't been
+ updated to reflect this change and so issue the warning.
+
+
+ [Test Case]
+
+ $ export CODENAME="focal"
+ $ lxc launch ubuntu:${CODENAME} test-logwatch
+ $ lxc exec test-logwatch -- bash
+
+ # apt-get update
+ # apt-get dist-upgrade -y
+ # apt-get install -y logwatch
+
+ # wget
https://bugs.launchpad.net/ubuntu/+source/logwatch/+bug/1890751/+attachment/5407063/+files/unmatched-entries-securetty%3Aauth.log
+ # cat unmatched-entries-securetty:auth.log >> /var/log/auth.log
+
+ # logwatch --detail High --service all --range all --output stdout
+
+ Without the fix, there will be unmatched entries for /etc/securetty,
+ which may appear in multiple sections within the report; with the fix
+ there will be no such messages.
+
+ (Note: For testing it's not really necessary to trigger the original
+ condition that produces the log entry, since for Logwatch the purpose is
+ more about making sure the entry is detected and processed
+ appropriately.)
+
+
+ [Regression Potential]
+
+ Since logwatch filters logs for errors pertinent to administrators,
+ standard things to watch out for are undesired changes in this filtering
+ behavior, such as flagging or failing to flag issues differently than
+ before, other than the specific messages being filtered with this
+ change.
+
+
+ [Original Report]
+
$ sudo logwatch --detail Low --range today --service all --output stdout
- --------------------- pam_unix Begin ------------------------
+ --------------------- pam_unix Begin ------------------------
- sudo:
- Sessions Opened:
- root -> root: 4 Time(s)
- Unknown Entries:
- Couldn't open /etc/securetty: No such file or directory: 4 Time(s)
-
-
- ---------------------- pam_unix End -------------------------
+ sudo:
+ Sessions Opened:
+ root -> root: 4 Time(s)
+ Unknown Entries:
+ Couldn't open /etc/securetty: No such file or directory: 4 Time(s)
+
+ ---------------------- pam_unix End -------------------------
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1890751
Title:
unmatched entry for securetty on focal
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/logwatch/+bug/1890751/+subscriptions
--
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
