[OT] logcheck and fetchnews
Hello,
sorry for posting this to devel but I failed while asking other lists.
I just want to make sure that it is a bug of logcheck and not my own
before I file a bug-report:
Im using
~> dpkg --status logcheck
Package: logcheck
...
Version: 1.1.1-4
I have defined the following ignore-rules in /etc/logcheck/logcheck.ignore:
fetchnews
fetchnews\[.*\]:.*illegal
fetchnews.*illegal article
fetchnews\[.*\]:.*illegal article.*/var/spool/news.* Success
fetchnews\[.*\]:.*Illegal seek
fetchnews\[.*\]:.*Success
Seems strange why I did define some rules which are stronger than others
but they are just all my trials which failed to block the following
messages. I hoped that the first rule should have deleted all fetchnews
entries but I continueally get the follwoing type of messages:
Date: Mon, 21 Aug 2000 12:02:04 +0200
From: root <tillea@rki.de>
To: tillea@rki.de
Subject: wr-linux02 08/21/00:12.02 system check
Security Violations
=-=-=-=-=-=-=-=-=-=
Aug 21 11:03:39 wr-linux02 fetchnews[19687]: illegal article: /var/spool/news/interbase/public/general/1096: Illegal seek
Aug 21 11:03:39 wr-linux02 fetchnews[19687]: illegal article: /var/spool/news/interbase/public/general/1097: Illegal seek
Aug 21 11:03:39 wr-linux02 fetchnews[19687]: illegal article: /var/spool/news/interbase/public/kinobi/jdbc-odbc-oledb/54: Illegal seek
Aug 21 11:03:39 wr-linux02 fetchnews[19687]: illegal article: /var/spool/news/mers/interbase/list/1147: Illegal seek
....
Could anybody help me out of this boring messages?
Is this a bug of logcheck?
Kind regards
Andreas.
Reply to: