[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

[OT] logcheck and fetchnews



Hello,

sorry for posting this to devel but I failed while asking other lists.
I just want to make sure that it is a bug of logcheck and not my own
before I file a bug-report:

Im using 

~> dpkg --status logcheck
Package: logcheck
...
Version: 1.1.1-4

I have defined the following ignore-rules in /etc/logcheck/logcheck.ignore:

fetchnews
fetchnews\[.*\]:.*illegal
fetchnews.*illegal article
fetchnews\[.*\]:.*illegal article.*/var/spool/news.* Success
fetchnews\[.*\]:.*Illegal seek
fetchnews\[.*\]:.*Success

Seems strange why I did define some rules which are stronger than others
but they are just all my trials which failed to block the following
messages.  I hoped that the first rule should have deleted all fetchnews
entries but I continueally get the follwoing type of messages:

Date: Mon, 21 Aug 2000 12:02:04 +0200
From: root <tillea@rki.de>
To: tillea@rki.de
Subject: wr-linux02 08/21/00:12.02 system check


Security Violations
=-=-=-=-=-=-=-=-=-=
Aug 21 11:03:39 wr-linux02 fetchnews[19687]: illegal article: /var/spool/news/interbase/public/general/1096: Illegal seek
Aug 21 11:03:39 wr-linux02 fetchnews[19687]: illegal article: /var/spool/news/interbase/public/general/1097: Illegal seek
Aug 21 11:03:39 wr-linux02 fetchnews[19687]: illegal article: /var/spool/news/interbase/public/kinobi/jdbc-odbc-oledb/54: Illegal seek
Aug 21 11:03:39 wr-linux02 fetchnews[19687]: illegal article: /var/spool/news/mers/interbase/list/1147: Illegal seek
....

Could anybody help me out of this boring messages?
Is this a bug of logcheck?

Kind regards

        Andreas.



Reply to: