Bug#368900: [Logcheck-devel] Bug#368900: ignore.d.workstation/anacron should be moved to ignore.d.server

[Elmar Hoffmann]

Hi Jamie,

on Sun, Jun 04, 2006 at 22:17:41 +0100, you wrote:

> A server is in almost all cases meant to be up and available 24/7,  
> anacron is designed for systems (such as workstations) which are not.
>
> Most servers will be running cron, not anacron.

So?
Actually none of my servers runs anacron. My desktop box however does
and logcheck does not filter its messages.
Though I could easily come up with examples of servers where using
anacron would perfectly make sense, like servers used at events.

It is not logcheck's business to tell the user what packages to
install or not in which scenario, but simply to filter those syslog
messages generated by *any* package that are irrelevant in the given
scenario.
The filtering levels paranoid, server and workstation are, quoting
README.logcheck, "functioning rather like verbosity settings" nothing
more (maybe paranoid, normal and ignorant would be more fitting?).
They are much more a matter of how much information the user wishes to
get about his systems than what he uses them for.

Besides the admittedly extreme and exceptional, yet perfectly valid
use cases of the tinfoil-hat wearing individual using paranoid level
on his workstation on the one hand and the careless admin using
workstation level for his servers on the other hand, there is mine of
using the server level for a workstation right inbetween.
Quoting the description of the workstation level in README.logcheck
that level "is only appropriate for relatively sheltered, non-critical
machines." That does not apply to my workstation nor any developer
workstation running various services and its again easy to come up
with more examples.

BTW, that description apparently could use an update I guess,
"anything matching "kernel:"" sounds a lot like originating from the
times of unanchored rules. :)

elmar

-- 

 .'"`.                                                            /"\
| :' :   Elmar Hoffmann <elho at elho.net>    ASCII Ribbon Campaign  \ /
`. `'    GPG key available via pgp.net        against HTML email   X
  `-                                                    & vCards  / \
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : http://lists.alioth.debian.org/pipermail/logcheck-devel/attachments/20060605/4c1b47b1/attachment.pgp