[Logcheck-devel] Bug#569843: logcheck-database: acpid filter misses trailing white space

[Mats Erik Andersson]

Package: logcheck-database
Version: 1.2.69
Severity: normal
Tags: patch

The syslog messages for acpid when a window client connects
or disconnect all have a trailing single space at each line.
Therefore the existing two patterns in

  /etc/logcheck/ignore.d.server/acpid

fail to filter out the events. Furthermore, the disconnect
message includes a PID-numbered client, which is not present
in the pattern at all.

A functional patch follows!


--- /tmp/acpid	2010-02-14 18:53:53.000000000 +0100
+++ /etc/logcheck/ignore.d.server/acpid	2010-02-14 19:14:55.000000000 +0100
@@ -5 +5 @@
-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ acpid: client connected from [[:digit:]]+\[[[:digit:]]+:[[:digit:]]+\]$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ acpid: client connected from [[:digit:]]+\[[[:digit:]]+:[[:digit:]]+\][[:space:]]*$
@@ -8 +8 @@
-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ acpid: client has disconnected$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ acpid: client [[:digit:]]+\[[[:digit:]]+:[[:digit:]]+\] has disconnected[[:space:]]*$


-- System Information:
Debian Release: 5.0.3
  APT prefers stable
  APT policy: (500, 'stable'), (90, 'testing'), (80, 'unstable')
Architecture: i386 (i686)

Kernel: Linux 2.6.26-2-686 (SMP w/1 CPU core)
Locale: LANG=sv_SE, LC_CTYPE=sv_SE (charmap=ISO-8859-1)
Shell: /bin/sh linked to /bin/bash

-- no debconf information