[Logcheck-devel] Bug#244411: marked as done (logcheck: Upgrade loses symlinks in /etc/logcheck)

Fri Jun 3 17:33:12 UTC 2005

Your message dated Fri, 3 Jun 2005 19:20:56 +0200
with message-id <20050603172056.GX2386 at sputnik.stro.at>
and subject line logcheck closing woody bugs, please upgrade.
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)

--------------------------------------
Received: (at submit) by bugs.debian.org; 18 Apr 2004 11:31:33 +0000
>From Marco.Franzen at bigfoot.com Sun Apr 18 04:31:33 2004
Return-path: <Marco.Franzen at bigfoot.com>
Received: from mail2.uklinux.net [80.84.72.32] 
	by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
	id 1BFAWL-0005Mx-00; Sun, 18 Apr 2004 04:31:33 -0700
Received: from pika.franzen.uklinux.net (crwy-3e353dea.pool.mediaWays.net [62.53.61.234])
	by mail2.uklinux.net (Postfix) with ESMTP id 4A4E1409FD4
	for <submit at bugs.debian.org>; Sun, 18 Apr 2004 11:31:32 +0000 (UTC)
Received: from marco by pika.franzen.uklinux.net with local (Exim 3.35 #1 (Debian))
	id 1BFAWI-0001J4-00; Sun, 18 Apr 2004 12:31:30 +0100
To: Debian Bug Tracking System <submit at bugs.debian.org>
Subject: logcheck: Upgrade loses symlinks in /etc/logcheck
X-Debbugs-CC: Marco Franzen <marco at pika.marco.franzen.bigfoot.com>
Message-Id: <E1BFAWI-0001J4-00 at pika.franzen.uklinux.net>
From: Marco Franzen <Marco.Franzen at bigfoot.com>
Date: Sun, 18 Apr 2004 12:31:30 +0100
Delivered-To: submit at bugs.debian.org
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2004_03_25 
	(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-10.0 required=4.0 tests=BAYES_00,HAS_PACKAGE,
	X_DEBBUGS_CC autolearn=ham version=2.60-bugs.debian.org_2004_03_25
X-Spam-Level: 
X-CrossAssassin-Score: 1

Package: logcheck
Version: 1.1.1-13.1woody1
Severity: serious

The system administrator should be free to replace the symlinks in
/etc/logcheck (ignore.d and logcheck.ignore) with whatever he or she
pleases - most likely symlinks again to one of the corresponding
.paranoid, .server or .workstation directory and file, but it could
even be something entirely different.

I had pointed my symlinks to the .server directory and file and
created cusomisations in ignored.d.server/local.  But after upgrading
to this security update, I got spammed with lots of entirely normal
log entries.  I had to sift through them in order not to miss anything
important (i.e. do the filtering work of logcheck manually).

It turned out the update had silently removed my symlinks and replaced
them with new symlinks pointing to the .paranoid directory and file.

I could have missed an important log entry among the noise, or I could
have found it too late.  Silently reversing the sysadmin's choice
probably also violates Policy.

-- System Information
Debian Release: 3.0
Architecture: i386
Kernel: Linux pika 2.4.25 #1 Wed Feb 18 20:41:10 GMT 2004 i586
Locale: LANG=C, LC_CTYPE=

Versions of packages logcheck depends on:
ii  cron             3.0pl1-72               management of regular background p
ii  debconf          1.0.32                  Debian configuration management sy
ii  exim             3.35-1woody2            An MTA (Mail Transport Agent)
ii  exim [mail-trans 3.35-1woody2            An MTA (Mail Transport Agent)
ii  logcheck-databas 1.1.1-13.1woody1        A database of system log rules for
ii  logtail          1.1.1-13.1woody1        Returns parts of logfiles that hav
ii  mailx            1:8.1.2-0.20020411cvs-1 A simple mail user agent.
ii  sysklogd         1.4.1-10                System Logging Daemon
ii  sysklogd [system 1.4.1-10                System Logging Daemon

---------------------------------------
Received: (at 244411-done) by bugs.debian.org; 3 Jun 2005 17:21:24 +0000
>From max at stro.at Fri Jun 03 10:21:24 2005
Return-path: <max at stro.at>
Received: from baikonur.stro.at [213.239.196.228] 
	by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
	id 1DeFrI-0006A8-00; Fri, 03 Jun 2005 10:21:24 -0700
Received: from sputnik (stallburg.stro.at [128.131.216.190])
	by baikonur.stro.at (Postfix) with ESMTP id 2C5DE5C016;
	Fri,  3 Jun 2005 19:20:51 +0200 (CEST)
Received: from max by sputnik with local (Exim 4.50)
	id 1DeFqq-0000tu-Nu; Fri, 03 Jun 2005 19:20:56 +0200
Date: Fri, 3 Jun 2005 19:20:56 +0200
From: maximilian attems <janitor at sternwelten.at>
To: 242760-done at bugs.debian.org, 244411-done at bugs.debian.org
Subject: logcheck closing woody bugs, please upgrade.
Message-ID: <20050603172056.GX2386 at sputnik.stro.at>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.5.9i
X-Virus-Scanned: by Amavis (ClamAV) at stro.at
Delivered-To: 244411-done at bugs.debian.org
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
	(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-3.0 required=4.0 tests=BAYES_00 autolearn=no 
	version=2.60-bugs.debian.org_2005_01_02
X-Spam-Level: 
X-CrossAssassin-Score: 2

dear logcheck users,

thanks for using Debian and especially logcheck,
we hope that Sarge contain an even better logcheck version.

as Sarge is about to be announced as stable,
i'm pleased to be able to close those bugs,
as they are fixed in it's logcheck version.

happy upgrading +
thanks for your feedback

--
maks