[Logcheck-devel] Bug#412201: /tmp: write error: No space left on device

[Rainer Zocholl]

Package: logcheck
Version: 1.2.39



logcheck contains the line:

TMPDIR=$(mktemp -d -p /tmp logcheck.XXXXXX

and is storing tons of data there.

On linux-vserver (e.g.) "/tmp" defaults to just 16MB!

So, sometimes, an empty email is generated and the user "nobody" 
on localhost got this error message:

-------------------

cat: write error: No space left on device
/usr/sbin/logcheck: line 161: cannot create temp file for here document: 
No space left on device
mail: /tmp/mail.RsXXXXaK2dAQ: No space left on device
Null message body; hope that's ok

-------------------


Increasing /tmp was no solution:

/etc/logcheck# df
Filesystem           1K-blocks      Used Available Use% Mounted on
/dev/hdv1            225179116  97931996 115808632  46% /
none                     49152         0     49152   0% /tmp

/etc/logcheck# mount
/dev/hdv1 on / type ufs (defaults)
none on /proc type proc (0)
none on /tmp type tmpfs (size=48m,mode=1777)
none on /dev/pts type devpts (gid=5,mode=620)



Problem of the admin?
I don't think so, because the admin sees: "logcheck is running,
i get emails".
Only in an attack state he wouldn't get the email...
The logcheck script seems to use the first unix programmers paradigma:
"All resources are unlimited" ;-)