[Logcheck-devel] Bug#269959: logcheck-database: courier ignore.d.server contains word from violations.d list

[Lars Ehrhardt]

Package: logcheck-database
Version: 1.2.26
Severity: normal

Hi,

the file courier contains the line:
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ pop3d-ssl: Unexpected SSL connection
shutdown\.$

This triggers the security logcheck section because of the word
"shutdown". Quick fix is to move or duplicate this line to
violations.ignore.d/logcheck-courier.

BTW: It looks like the courier package added logcheck rules as well,
although they look incomplete and could be more specific. Maybe it is a 
good idea to talk to the courier maintainer and ask him to include the
courier rules from logcheck-database in his packages?

Cheers

Lars

-- System Information:
Debian Release: 3.1
  APT prefers testing
  APT policy: (500, 'testing'), (50, 'unstable'), (1, 'experimental')
Architecture: i386 (i686)
Kernel: Linux 2.6.8.1
Locale: LANG=de_DE at euro, LC_CTYPE=de_DE at euro

Versions of packages logcheck-database depends on:
ii  debconf [debconf-2.0]         1.4.30.2   Debian configuration management sy

-- debconf information excluded