Bug#386527: linux-image-2.6.17-2-686: evbug.ko gets loaded automatically and fills up disk with logs
Package: linux-image-2.6.17-2-686
Version: 2.6.17-8
Severity: normal
Despite evbug.ko is listed in a /etc/modprobe.d/blacklist file, for some unknown
reason it is loaded automatically. If loaded, it generates zillions of event
notices into log files in /var/log directory:
evbug.c: Event. Dev: isa0060/serio0/input0, Type: 4, Code: 4, Value: 31
evbug.c: Event. Dev: isa0060/serio0/input0, Type: 1, Code: 31, Value: 0
evbug.c: Event. Dev: isa0060/serio0/input0, Type: 0, Code: 0, Value: 0
evbug.c: Event. Dev: isa0060/serio0/input0, Type: 4, Code: 4, Value: 34
evbug.c: Event. Dev: isa0060/serio0/input0, Type: 1, Code: 34, Value: 1
evbug.c: Event. Dev: isa0060/serio0/input0, Type: 0, Code: 0, Value: 0
evbug.c: Event. Dev: isa0060/serio0/input0, Type: 4, Code: 4, Value: 34
evbug.c: Event. Dev: isa0060/serio0/input0, Type: 1, Code: 34, Value: 0
evbug.c: Event. Dev: isa0060/serio0/input0, Type: 0, Code: 0, Value: 0
The problem is that these messages fill several gigabytes on a typical
desktop machine. If machine is limited to disk space, even logrotate can't
help from logs blocking normal work of other users on that machine.
Moreover, the log undermines security and privacy of local users, because
the event log can be used as a keylogger log to retrieve user input.
A temporal fix exists - moving or renaming evbug.ko.
Machine has additional kernel modules compiled: fglrx, madwifi and vmware.
-- System Information:
Debian Release: testing/unstable
APT prefers unstable
APT policy: (500, 'unstable')
Architecture: i386 (i686)
Shell: /bin/sh linked to /bin/bash
Kernel: Linux 2.6.17-2-686
Locale: LANG=lt_LT.UTF-8, LC_CTYPE=lt_LT.UTF-8 (charmap=UTF-8)
Versions of packages linux-image-2.6.17-2-686 depends on:
ii initramfs-tools [linux-initra 0.78 tools for generating an initramfs
ii module-init-tools 3.2.2-3 tools for managing Linux kernel mo
Versions of packages linux-image-2.6.17-2-686 recommends:
pn libc6-i686 <none> (no description available)
-- debconf information:
linux-image-2.6.17-2-686/postinst/old-initrd-link-2.6.17-2-686: true
shared/kernel-image/really-run-bootloader: true
linux-image-2.6.17-2-686/postinst/old-dir-initrd-link-2.6.17-2-686: true
linux-image-2.6.17-2-686/preinst/lilo-initrd-2.6.17-2-686: true
linux-image-2.6.17-2-686/preinst/failed-to-move-modules-2.6.17-2-686:
linux-image-2.6.17-2-686/postinst/depmod-error-initrd-2.6.17-2-686: false
linux-image-2.6.17-2-686/postinst/create-kimage-link-2.6.17-2-686: true
linux-image-2.6.17-2-686/postinst/bootloader-test-error-2.6.17-2-686:
linux-image-2.6.17-2-686/preinst/lilo-has-ramdisk:
linux-image-2.6.17-2-686/prerm/removing-running-kernel-2.6.17-2-686: true
linux-image-2.6.17-2-686/preinst/abort-overwrite-2.6.17-2-686:
linux-image-2.6.17-2-686/preinst/already-running-this-2.6.17-2-686:
linux-image-2.6.17-2-686/postinst/old-system-map-link-2.6.17-2-686: true
linux-image-2.6.17-2-686/preinst/bootloader-initrd-2.6.17-2-686: true
linux-image-2.6.17-2-686/preinst/initrd-2.6.17-2-686:
linux-image-2.6.17-2-686/preinst/abort-install-2.6.17-2-686:
linux-image-2.6.17-2-686/preinst/overwriting-modules-2.6.17-2-686: true
linux-image-2.6.17-2-686/postinst/kimage-is-a-directory:
linux-image-2.6.17-2-686/preinst/elilo-initrd-2.6.17-2-686: true
linux-image-2.6.17-2-686/prerm/would-invalidate-boot-loader-2.6.17-2-686: true
linux-image-2.6.17-2-686/postinst/depmod-error-2.6.17-2-686: false
linux-image-2.6.17-2-686/postinst/bootloader-error-2.6.17-2-686:
Reply to: