Bug#260330: [Logcheck-devel] Bug#260330: logcheck: error recovery tries to kill LOCK twice

[maks attems]

On Tue, 20 Jul 2004, Erich Schubert wrote:

> Package: logcheck
> Version: 1.2.23
> Severity: wishlist
> 
> Hi,
> i'm having troubles with logcheck not working on selinux here.
> During that i got error messages like "could not kill xyz".
> Enabling debug showed the following:
> 
> D: [1090274523] Running logtail: /var/log/syslog
> D: [1090274523] error: Killing lockfile-touch - 29766
> D: [1090274523] error: Removing lockfile: /var/lock/logcheck.lock
> D: [1090274523] Error: Could not run logtail or save output
> D: [1090274523] cleanup: Killing lockfile-touch - 29766
> /usr/sbin/logcheck: line 84: kill: (29766) - No such process
> 
> apparenty logcheck tries to kill the same process twice.
> Maybe the variable could just be unset after successfully killing the
> process or the kill could only be made if the process does
> actually still run.

looks like logtail has either not the permissions to read
/var/log/syslog or /var/lib/logcheck/offset.var.log.syslog.
could you check if the user logcheck exists,
if he has admin group rights, if the group admin is allowed
to read syslog or if /var/lib/logcheck/ is readable for the
user logcheck.

hope that helps to narrow down the problem?
please report back
a++ maks

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : http://lists.alioth.debian.org/pipermail/logcheck-devel/attachments/20040720/e665165a/attachment.pgp