Bug 141649

Summary:	Some improvements to unmatches entries in logwatch-7.1
Product:	Gentoo Linux	Reporter:	Jesus de Santos Garcia <jesus.de.santos>
Component:	New packages	Assignee:	Gentoo's Team for Core System packages <base-system>
Status:	RESOLVED FIXED
Severity:	enhancement	CC:	jmjoseph, rockoo
Priority:	High
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---
Attachments:	Patch for /usr/share/logwatch/scripts/services/emerge Patch for /usr/share/logwatch/scripts/services/sshd Patch for logwatch xntpd service script

Description Jesus de Santos Garcia 2006-07-24 17:40:26 UTC

logwatch-7.1 mails me everyday with unmatches entries like these:

**Unmatched Entries**
 Starting rsync with rsync://194.97.4.250/gentoo-portage

*Unmatched Entries**
 reverse mapping checking getaddrinfo for dsl-del-static-048.173.144.59.touchtelindia.net failed - POSSIBLE BREAK-IN ATTEMPT!

 User alias from 59.144.173.48 not allowed because none of user's groups are listed in AllowGroups
 User guest not allowed because shell /dev/null is not executable



I have created patches to detect properly this entries.

Comment 1 Jesus de Santos Garcia 2006-07-24 17:41:29 UTC

Created attachment 92665 [details, diff]
Patch for /usr/share/logwatch/scripts/services/emerge

Comment 2 Jesus de Santos Garcia 2006-07-24 17:42:00 UTC

Created attachment 92666 [details, diff]
Patch for /usr/share/logwatch/scripts/services/sshd

Comment 3 Jacob Joseph 2006-12-08 08:46:30 UTC

Rather than starting another bug, here's a patch to correct the xntpd script

**Unmatched Entries**
   adjusting local clock by 0.192872s: 1 time(s)
...

-Jacob

Comment 4 Jacob Joseph 2006-12-08 08:48:02 UTC

Created attachment 103628 [details, diff]
Patch for logwatch xntpd service script

Comment 5 Daniel Webert 2007-05-24 02:49:39 UTC

today i sent the diffs upstream ...

Comment 6 Benedikt Böhm (RETIRED) gentoo-dev

2009-12-03 18:10:39 UTC

it has been merged upstream, please test if it works with the latest snapshot (layman -f -a hollow)

Comment 7 Benedikt Böhm (RETIRED) gentoo-dev

2009-12-04 11:25:58 UTC

fixed in sys-apps/logwatch-7.3.7_pre20091204