Bug#286331: acknowledged by developer (Re: [Logcheck-devel] Bug#286331: logcheck-database: Restart messages for spamd (when using rulesdujour))

[Marc Sherman]

maximilian attems wrote:
> 
>>package; the log messages are caused by a local install at my site of
>>rulesdujour, which restarts spamd in the daily cron job when the
>>downloaded rules are updated.
>>
>>The following messages are logged when this happens:
>>Dec 19 07:20:41 pyloric spamd[23676]: server killed by SIGTERM, shutting
>>down
>>Dec 19 07:20:43 pyloric root: spamd starting
>>Dec 19 07:20:58 pyloric spamd[679]: server started on port 783/tcp
>>(running version 2.64)
> 
> 
> this looks like an "security event" which logcheck out of policy
> won't filter, please include that in your local-spamd file
> in /etc/logcheck/violations.ignore.d/.

Nope, those aren't picked up as violations -- I've had them filtered in 
my ignore.server.d/spamd for a while now, and it works just fine.  I 
understand if you don't want to add them to the distro, though, so 
please let me know and I'll move them to ignore.server.d/local-spamd.

Will logcheck complain if there's a foo and a local-foo in the same 
directory?

Thanks,
- Marc