Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 705482 - =app-admin/rsyslog-8.1911.0-r1 - /etc/rsysog.d/50-default.conf contains a filter typo
Summary: =app-admin/rsyslog-8.1911.0-r1 - /etc/rsysog.d/50-default.conf contains a fil...
Status: UNCONFIRMED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Thomas Deutschmann
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2020-01-15 11:44 UTC by Alix
Modified: 2020-01-15 12:27 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Alix 2020-01-15 11:44:56 UTC
I believe packaged /etc/rsysog.d/50-default.conf contains a typo. 

The following configuration block from /etc/rsysog.d/50-default.conf catches all user facility messages regardless of their priority:

*.info;auth,authpriv,cron,daemon,lpr,mail,news.none action(
        name="action_messages"
        type="omfile"
        File="/var/log/messages"
        FileOwner="root"
        FileGroup="adm"
)

Therefore all user facility messages are basically doubled in both /var/log/user.log and /var/log/messages.

Correct version of this filter should be the following:

*.=info;auth,authpriv,cron,daemon,lpr,mail,news.none action(
[skip]
)

This change fixes doubling of user facility messages, only user.info messages will end up in both /var/log/user.log and /var/log/messages.

Reproducible: Always