[Logcheck-devel] Bug#277782: marked as done (logcheck reports "Could not run logtail or save output" and fails)
Debian Bug Tracking System
owner at bugs.debian.org
Tue Nov 2 06:03:05 UTC 2004
Your message dated Tue, 02 Nov 2004 00:47:03 -0500
with message-id <E1COrVX-0000B0-00 at newraff.debian.org>
and subject line Bug#277782: fixed in logcheck 1.2.30
has caused the attached Bug report to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere. Please contact me immediately.)
Debian bug tracking system administrator
(administrator, Debian Bugs database)
--------------------------------------
Received: (at submit) by bugs.debian.org; 22 Oct 2004 12:08:17 +0000
>From curious at moof.curious.org Fri Oct 22 05:08:17 2004
Return-path: <curious at moof.curious.org>
Received: from dsl092-158-067.wdc2.dsl.speakeasy.net (localhost.localdomain) [66.92.158.67]
by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
id 1CKyDQ-0002u8-00; Fri, 22 Oct 2004 05:08:17 -0700
Received: from curious by localhost.localdomain with local (Exim 3.36 #1 (Debian))
id 1CKvK7-0002JJ-00; Fri, 22 Oct 2004 05:02:59 -0400
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
From: curious <curious at curious.org>
To: Debian Bug Tracking System <submit at bugs.debian.org>
Subject: logcheck reports "Could not run logtail or save output" and fails
X-Mailer: reportbug 2.63
Date: Fri, 22 Oct 2004 05:02:59 -0400
Message-Id: <E1CKvK7-0002JJ-00 at localhost.localdomain>
Sender: curious <curious at moof.curious.org>
Delivered-To: submit at bugs.debian.org
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2004_03_25
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-7.6 required=4.0 tests=BAYES_00,DATE_IN_PAST_03_06,
HAS_PACKAGE autolearn=no version=2.60-bugs.debian.org_2004_03_25
X-Spam-Level:
Package: logcheck
Version: 1.2.28
Severity: important
logcheck sends the following email, without the expected log data:
Warning: If you are seeing this message, your log files may not have
been
checked!
Details:
Could not run logtail or save output
Check temporary directory: /tmp/logcheck.mNAra3
declare -x HOME="/var/lib/logcheck"
declare -x LANG="en_US"
declare -x LANGUAGE="en_US:en_GB:en"
declare -x LOGNAME="logcheck"
declare -x MAILTO="root"
declare -x OLDPWD
declare -x
PATH="/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin"
declare -x PWD="/var/lib/logcheck"
declare -x SHELL="/bin/sh"
declare -x SHLVL="2"
{{{{Inserting all sorts of related information that may or maynot be
helpful ;) }}}}
----
# whereis logtail;
logtail: /usr/sbin/logtail /usr/share/man/man8/logtail.8.gz
-----
# logtail
No logfile to read. Use -f switch.
{logtail -f /var/log/syslog shows the syslog and adds syslog.offset to
/var/log directory}
-----
# ls -l /var/log/syslog
-rw-r----- 1 root adm 2450 2004-10-22 04:53 /var/log/syslog
-----
# cat /etc/group | grep logcheck
adm:x:4:logcheck
logcheck:x:104:
-----
# su -s /bin/bash -c "/usr/sbin/logcheck -d" logcheck
D: [1098435481] Turning debug mode on
D: [1098435481] Sourcing - /etc/logcheck/logcheck.conf
D: [1098435481] Finished getopts c:dhH:l:L:m:opr:RsS:tTuvw
D: [1098435481] Trying to get lockfile: /var/lock/logcheck.lock
D: [1098435481] Running lockfile-touch /var/lock/logcheck.lock
D: [1098435481] cleanrules: /etc/logcheck/cracking.d/logcheck
D: [1098435481] cleanrules: /etc/logcheck/violations.d/logcheck
D: [1098435481] cleanrules: /etc/logcheck/violations.d/su
D: [1098435481] cleanrules: /etc/logcheck/violations.d/sudo
D: [1098435481] cleanrules: /etc/logcheck/violations.ignore.d/hotplug
D: [1098435481] cleanrules:
/etc/logcheck/violations.ignore.d/logcheck-bind
D: [1098435481] cleanrules:
/etc/logcheck/violations.ignore.d/logcheck-courier
D: [1098435481] cleanrules:
/etc/logcheck/violations.ignore.d/logcheck-cyrus
D: [1098435481] cleanrules:
/etc/logcheck/violations.ignore.d/logcheck-innd
D: [1098435481] cleanrules:
/etc/logcheck/violations.ignore.d/logcheck-postfix
D: [1098435481] cleanrules:
/etc/logcheck/violations.ignore.d/logcheck-sendmail_tmp
D: [1098435481] cleanrules:
/etc/logcheck/violations.ignore.d/logcheck-spamd
D: [1098435481] cleanrules:
/etc/logcheck/violations.ignore.d/logcheck-squid
D: [1098435481] cleanrules:
/etc/logcheck/violations.ignore.d/logcheck-su
D: [1098435481] cleanrules:
/etc/logcheck/violations.ignore.d/logcheck-sudo
D: [1098435481] cleanrules:
/etc/logcheck/violations.ignore.d/logcheck-usb
D: [1098435481] cleanrules:
/etc/logcheck/violations.ignore.d/logcheck-winbind
D: [1098435481] cleanrules: /etc/logcheck/ignore.d.server/anon-proxy
D: [1098435481] cleanrules: /etc/logcheck/ignore.d.server/arpwatch
D: [1098435481] cleanrules: /etc/logcheck/ignore.d.server/automount
D: [1098435481] cleanrules: /etc/logcheck/ignore.d.server/bind
D: [1098435481] cleanrules: /etc/logcheck/ignore.d.server/courier
D: [1098435481] cleanrules: /etc/logcheck/ignore.d.server/cron
D: [1098435481] cleanrules: /etc/logcheck/ignore.d.server/cyrus
D: [1098435481] cleanrules: /etc/logcheck/ignore.d.server/dhclient
D: [1098435481] cleanrules: /etc/logcheck/ignore.d.server/dhcp
D: [1098435481] cleanrules: /etc/logcheck/ignore.d.server/dovecot
D: [1098435481] cleanrules: /etc/logcheck/ignore.d.server/gps
D: [1098435481] cleanrules: /etc/logcheck/ignore.d.server/imapproxy
D: [1098435481] cleanrules: /etc/logcheck/ignore.d.server/imp
D: [1098435481] cleanrules: /etc/logcheck/ignore.d.server/innd
D: [1098435481] cleanrules: /etc/logcheck/ignore.d.server/ipppd
D: [1098435481] cleanrules: /etc/logcheck/ignore.d.server/isdnlog
D: [1098435481] cleanrules: /etc/logcheck/ignore.d.server/isdnutils
D: [1098435481] cleanrules: /etc/logcheck/ignore.d.server/logcheck
D: [1098435481] cleanrules: /etc/logcheck/ignore.d.server/nagios
D: [1098435481] cleanrules: /etc/logcheck/ignore.d.server/nfs
D: [1098435481] cleanrules: /etc/logcheck/ignore.d.server/nntpcache
D: [1098435481] cleanrules: /etc/logcheck/ignore.d.server/ntp
D: [1098435482] cleanrules: /etc/logcheck/ignore.d.server/oidentd
D: [1098435482] cleanrules: /etc/logcheck/ignore.d.server/openvpn
D: [1098435482] cleanrules: /etc/logcheck/ignore.d.server/pdns
D: [1098435482] cleanrules: /etc/logcheck/ignore.d.server/perdition
D: [1098435482] cleanrules: /etc/logcheck/ignore.d.server/postfix
D: [1098435482] cleanrules: /etc/logcheck/ignore.d.server/ppp
D: [1098435482] cleanrules: /etc/logcheck/ignore.d.server/proftpd
D: [1098435482] cleanrules: /etc/logcheck/ignore.d.server/rpc_statd
D: [1098435482] cleanrules: /etc/logcheck/ignore.d.server/rsnapshot
D: [1098435482] cleanrules: /etc/logcheck/ignore.d.server/samba
D: [1098435482] cleanrules: /etc/logcheck/ignore.d.server/scponly
D: [1098435482] cleanrules: /etc/logcheck/ignore.d.server/spamd
D: [1098435482] cleanrules: /etc/logcheck/ignore.d.server/squid
D: [1098435482] cleanrules: /etc/logcheck/ignore.d.server/ssh
D: [1098435482] cleanrules: /etc/logcheck/ignore.d.server/stunnel
D: [1098435482] cleanrules: /etc/logcheck/ignore.d.server/ucd-snmp
D: [1098435482] cleanrules: /etc/logcheck/ignore.d.server/uptimed
D: [1098435482] cleanrules: /etc/logcheck/ignore.d.server/userv
D: [1098435482] cleanrules: /etc/logcheck/ignore.d.paranoid/bind
D: [1098435482] cleanrules: /etc/logcheck/ignore.d.paranoid/cron
D: [1098435482] cleanrules: /etc/logcheck/ignore.d.paranoid/imap
D: [1098435482] cleanrules: /etc/logcheck/ignore.d.paranoid/logcheck
D: [1098435482] cleanrules: /etc/logcheck/ignore.d.paranoid/postfix
D: [1098435482] cleanrules: /etc/logcheck/ignore.d.paranoid/ppp
D: [1098435482] cleanrules: /etc/logcheck/ignore.d.paranoid/proftpd
D: [1098435482] cleanrules: /etc/logcheck/ignore.d.paranoid/qpopper
D: [1098435482] cleanrules: /etc/logcheck/ignore.d.paranoid/squid
D: [1098435482] cleanrules: /etc/logcheck/ignore.d.paranoid/ssh
D: [1098435482] cleanrules: /etc/logcheck/ignore.d.paranoid/stunnel
D: [1098435482] cleanrules: /etc/logcheck/ignore.d.paranoid/sysklogd
D: [1098435482] cleanrules: /etc/logcheck/ignore.d.paranoid/telnetd
D: [1098435482] logoutput called with file: /var/log/syslog
D: [1098435482] Running logtail: /var/log/syslog
D: [1098435482] error: Killing lockfile-touch - 8567
D: [1098435482] error: Removing lockfile: /var/lock/logcheck.lock
D: [1098435482] Error: Could not run logtail or save output
D: [1098435482] Cleanup: Removing - /tmp/logcheck.fa1vVs
-- System Information:
Debian Release: 3.1
APT prefers testing
APT policy: (500, 'testing')
Architecture: powerpc (ppc)
Kernel: Linux 2.6.8-powerpc
Locale: LANG=en_US, LC_CTYPE=en_US
Versions of packages logcheck depends on:
ii adduser 3.59 Add and remove users and groups
ii cron 3.0pl1-86 management of regular background p
ii debconf [debconf 1.4.30.8 Debian configuration management sy
ii debianutils 2.8.4 Miscellaneous utilities specific t
ii exim [mail-trans 3.36-11 An MTA (Mail Transport Agent)
ii lockfile-progs 0.1.10 Programs for locking and unlocking
ii logcheck-databas 1.2.28 A database of system log rules for
ii logtail 1.2.28 Print log file lines that have not
ii mailx 1:8.1.2-0.20040524cvs-1 A simple mail user agent
ii perl 5.8.4-2.3 Larry Wall's Practical Extraction
ii sysklogd [system 1.4.1-15 System Logging Daemon
-- debconf information:
logcheck/changes:
* logcheck/install-note:
---------------------------------------
Received: (at 277782-close) by bugs.debian.org; 2 Nov 2004 05:54:11 +0000
>From katie at ftp-master.debian.org Mon Nov 01 21:54:11 2004
Return-path: <katie at ftp-master.debian.org>
Received: from newraff.debian.org [208.185.25.31] (mail)
by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
id 1COrcR-0008LW-00; Mon, 01 Nov 2004 21:54:11 -0800
Received: from katie by newraff.debian.org with local (Exim 3.35 1 (Debian))
id 1COrVX-0000B0-00; Tue, 02 Nov 2004 00:47:03 -0500
From: Todd Troxell <ttroxell at debian.org>
To: 277782-close at bugs.debian.org
X-Katie: $Revision: 1.51 $
Subject: Bug#277782: fixed in logcheck 1.2.30
Message-Id: <E1COrVX-0000B0-00 at newraff.debian.org>
Sender: Archive Administrator <katie at ftp-master.debian.org>
Date: Tue, 02 Nov 2004 00:47:03 -0500
Delivered-To: 277782-close at bugs.debian.org
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2004_03_25
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-6.0 required=4.0 tests=BAYES_00,HAS_BUG_NUMBER
autolearn=no version=2.60-bugs.debian.org_2004_03_25
X-Spam-Level:
X-CrossAssassin-Score: 3
Source: logcheck
Source-Version: 1.2.30
We believe that the bug you reported is fixed in the latest version of
logcheck, which is due to be installed in the Debian FTP archive:
logcheck-database_1.2.30_all.deb
to pool/main/l/logcheck/logcheck-database_1.2.30_all.deb
logcheck_1.2.30.dsc
to pool/main/l/logcheck/logcheck_1.2.30.dsc
logcheck_1.2.30.tar.gz
to pool/main/l/logcheck/logcheck_1.2.30.tar.gz
logcheck_1.2.30_all.deb
to pool/main/l/logcheck/logcheck_1.2.30_all.deb
logtail_1.2.30_all.deb
to pool/main/l/logcheck/logtail_1.2.30_all.deb
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 277782 at bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Todd Troxell <ttroxell at debian.org> (supplier of updated logcheck package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster at debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.7
Date: Tuesday, 02 Nov 2004 00:21:41 -0500
Source: logcheck
Binary: logcheck logtail logcheck-database
Architecture: source all
Version: 1.2.30
Distribution: unstable
Urgency: low
Maintainer: Debian logcheck Team <logcheck-devel at lists.alioth.debian.org>
Changed-By: Todd Troxell <ttroxell at debian.org>
Description:
logcheck - Mails anomalies in the system logfiles to the administrator
logcheck-database - A database of system log rules for the use of log checkers
logtail - Print log file lines that have not been read
Closes: 277635 277636 277782 278337
Changes:
logcheck (1.2.30) unstable; urgency=low
.
maks:
* Move pptpd rules to level server.
* Small typo fixes in docs.
* New rules for bind, courier, cpqarrayd, dhcp, jabberd, nagios, ntp,
openvpn, postfix, slapd, smartd, smokeping, squid, ssh, thy, uptimed.
all for level server thanks to Peter Palfrader <weasel at debian.org>.
* Logcheck/rules: Don't take locale for granted use character class instead.
* Fix 2 samba rules at level server. (closes: #277635)
* Added rules for perdition, postfix, pure-ftpd, snmpd.
thanks to Brendon Baumgartner <brendon at brendon.com>
* Small enhancment courier rule.
* Simplify logic in logcheck-postinst.
jamie:
* Add rules for dnsmasq. (closes: #277636)
* Add rules for hylafax.
* Add violations.ignore.d rules for hylafax.
alfie:
* Fix sed error to really remove trailing spaces. (closes: #278337)
* Add myself to uploaders field because of stable releases.
todd:
* Remove chown from debian/rules. (closes: #277782)
Files:
f7ecf621697688c1ca6705e234fb9908 703 admin optional logcheck_1.2.30.dsc
997fc66d90b62581b6f499a215172ac2 86232 admin optional logcheck_1.2.30.tar.gz
fa9e5de917aa1215fa95cb0b7f361415 40484 admin optional logcheck_1.2.30_all.deb
a8d58ffc3656c38bfb67f0a3a26fd9cd 53674 admin optional logcheck-database_1.2.30_all.deb
4b866f21f9fc1bf2e0ea9c040dde653b 24058 admin optional logtail_1.2.30_all.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)
iD8DBQFBhxoR4u3oQ3FHP2YRAveWAJ0QBA3LVgMcXyoQhTV0IYgklDKYeACfdXIv
d9iNSWwqszWiYsWf9x4hohU=
=lbKP
-----END PGP SIGNATURE-----
More information about the Logcheck-devel
mailing list