Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 710312 - app-admin/logcheck-1.3.18-r1 - /etc/cron.hourly/logcheck.cron: mkdir: cannot create directory '/var/lock/logcheck': Permission denied
Summary: app-admin/logcheck-1.3.18-r1 - /etc/cron.hourly/logcheck.cron: mkdir: cannot ...
Status: UNCONFIRMED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: AMD64 Linux
: Normal normal (vote)
Assignee: No maintainer - Look at https://wiki.gentoo.org/wiki/Project:Proxy_Maintainers if you want to take care of it
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2020-02-20 16:42 UTC by yesi
Modified: 2020-02-27 11:26 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description yesi 2020-02-20 16:42:28 UTC
Hi,

Bonjour,

Lastly, when after installing logcheck, i got these mail alerte about : 

From: "(Cron Daemon)" <logcheck@localhost>
Subject: Cron <logcheck@localhost> if [ -x /usr/sbin/logcheck ]; then nice -n10 /usr/sbin/logcheck ; fi
mkdir: cannot create directory ‘/run/lock/logcheck’: Permission denied

or
From: "(Cron Daemon)" <root@localhost>
Subject: Cron <root@localhost> run-parts /etc/cron.hourly
mkdir: cannot create directory ‘/var/lock/logcheck’: Permission denied
run-parts: /etc/cron.hourly/logcheck.cron exited with return code 1

ls -ldZ /var/lock /run /run/lock /run/lock/
drwxrwxr-x. 3 root uucp system_u:object_r:var_lock_t 60 20 févr. 16:48 /var/lock/
drwxr-xr-x. 17 root root system_u:object_r:var_run_t 740 20 févr. 11:50 /run/
lrwxrwxrwx.  1 root root system_u:object_r:var_lock_t   9 13 juin   2018 /var/lock -> /run/lock
drwxrwxr-x. 4 root uucp system_u:object_r:var_lock_t 80 20 févr. 16:59 /run/lock/


mount |egrep '/run'
tmpfs on /run type tmpfs (rw,nosuid,nodev,noexec,seclabel,mode=755)


Theres is a bug linked to Debian/Ubuntu :
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=561995
https://bugs.launchpad.net/ubuntu/+source/systemd/+bug/1541775

He proposed to do : 
chmod 1777 /var/lock

should fix that.

Portage 2.3.89 (python 3.6.9-final-0, default/linux/amd64/17.1/hardened/selinux, gcc-9.2.0, glibc-2.29-r7, 5.5.4-gentoo x86_64)
=================================================================
                         System Settings
=================================================================
System uname: Linux-5.5.4-gentoo-x86_64-Intel-R-_Core-TM-_i7-5557U_CPU_@_3.10GHz-with-gentoo-2.6
KiB Mem:    16268964 total,    770364 free
KiB Swap:    8388604 total,   8387828 free
Timestamp of repository gentoo: Thu, 20 Feb 2020 00:45:01 +0000
Head commit of repository gentoo: 192e3ff571f76f71eb59a2aebf62cb9f980641d0
sh bash 4.4_p23-r1
ld GNU ld (Gentoo 2.32 p2) 2.32.0
ccache version 3.7.7 [enabled]
app-shells/bash:          4.4_p23-r1::gentoo
dev-java/java-config:     2.2.0-r4::gentoo
dev-lang/perl:            5.30.1::gentoo
dev-lang/python:          2.7.17::gentoo, 3.6.9::gentoo, 3.7.5-r1::gentoo
dev-util/ccache:          3.7.7::gentoo
dev-util/cmake:           3.14.6::gentoo
dev-util/pkgconfig:       0.29.2::gentoo
sys-apps/baselayout:      2.6-r1::gentoo
sys-apps/openrc:          0.42.1::gentoo
sys-apps/sandbox:         2.13::gentoo
sys-devel/autoconf:       2.13-r1::gentoo, 2.69-r4::gentoo
sys-devel/automake:       1.11.6-r3::gentoo, 1.16.1-r1::gentoo
sys-devel/binutils:       2.32-r1::gentoo
sys-devel/gcc:            9.2.0-r2::gentoo
sys-devel/gcc-config:     2.2::gentoo
sys-devel/libtool:        2.4.6-r6::gentoo
sys-devel/make:           4.2.1-r4::gentoo
sys-kernel/linux-headers: 4.19::gentoo (virtual/os-headers)
sys-libs/glibc:           2.29-r7::gentoo
Repositories:

gentoo
    location: /usr/portage
    sync-type: rsync
    sync-uri: rsync://rsync.gentoo.org/gentoo-portage
    priority: -1000
    sync-rsync-verify-metamanifest: yes
    sync-rsync-extra-opts:
    sync-rsync-verify-jobs: 1
    sync-rsync-verify-max-age: 24

local
    location: /usr/local/portage
    masters: gentoo
    priority: 10

ACCEPT_KEYWORDS="amd64"
ACCEPT_LICENSE="@FREE"
CBUILD="x86_64-pc-linux-gnu"
CFLAGS="-march=native -O2 -fforce-addr -pipe"
CHOST="x86_64-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/share/gnupg/qualified.txt"
CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/dconf /etc/env.d /etc/fonts/fonts.conf /etc/gconf /etc/gentoo-release /etc/revdep-rebuild /etc/sandbox.d /etc/terminfo"
CXXFLAGS="-march=native -O2 -fforce-addr -pipe"
DISTDIR="/usr/portage/distfiles"
EMERGE_DEFAULT_OPTS="--jobs=4 --load-average=4.0 --keep-going=y --with-bdeps=y --complete-graph"
ENV_UNSET="DBUS_SESSION_BUS_ADDRESS DISPLAY GOBIN PERL5LIB PERL5OPT PERLPREFIX PERL_CORE PERL_MB_OPT PERL_MM_OPT XAUTHORITY XDG_CACHE_HOME XDG_CONFIG_HOME XDG_DATA_HOME XDG_RUNTIME_DIR"
FCFLAGS="-O2 -pipe"
FEATURES="assume-digests binpkg-docompress binpkg-dostrip binpkg-logs buildpkg ccache config-protect-if-modified distlocks ebuild-locks fixlafiles ipc-sandbox merge-sync multilib-strict network-sandbox news parallel-fetch parallel-install
preserve-libs protect-owned qa-unresolved-soname-deps sandbox selinux sesandbox sfperms strict unknown-features-warn unmerge-logs unmerge-orphans userfetch userpriv usersandbox usersync xattr"
FFLAGS="-O2 -pipe"
GENTOO_MIRRORS="http://url.local
LANG="fr_FR.utf8"
LDFLAGS="-Wl,-O1 -Wl,--as-needed"
MAKEOPTS="-j5"
PKGDIR="/usr/portage/packages"
PORTAGE_CONFIGROOT="/"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --omit-dir-times --compress --force --whole-file --delete --stats --human-readable --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages --exclude=/.git
"
PORTAGE_TMPDIR="/var/tmp"
USE="X acl amd64 branding bzip2 chroot consolekit crypt cryptsetup cxx ffmpeg gnutls hardened iconv icu ipv6 jpeg libtirpc logrotate lzma mmx modplug multilib ncurses nls nptl opengl openmp pam pax_kernel pcre perl pic pie png python readl
ine seccomp secure_delete selinux snmp split-usr sse sse2 ssl ssp symlink tcpd unicode wavpack webrsync-gpg xattr xml xtpax zlib" ABI_X86="64" ADA_TARGET="gnat_2018" ALSA_CARDS="ali5451 als4000 atiixp atiixp-modem bt87x ca0106 cmipci emu10
k1x ens1370 ens1371 es1938 es1968 fm801 hda-intel intel8x0 intel8x0m maestro3 trident usb-audio via82xx via82xx-modem ymfpci" APACHE2_MODULES="authn_core authz_core socache_shmcb unixd actions alias auth_basic authn_alias authn_anon authn_
dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache cgi cgid dav dav_fs dav_lock deflate dir disk_cache env expires ext_filter file_cache filter headers include info log_co
nfig logio mem_cache mime mime_magic negotiation rewrite setenvif speling status unique_id userdir usertrack vhost_alias" CALLIGRA_FEATURES="karbon sheets words" COLLECTD_PLUGINS="load memory syslog" CPU_FLAGS_X86="aes avx avx2 f16c fma3 m
mx mmxext pclmul popcnt sse sse2 sse3 sse4_1 sse4_2 ssse3" ELIBC="glibc" GPSD_PROTOCOLS="ashtech aivdm earthmate evermore fv18 garmin garmintxt gpsclock greis isync itrax mtk3301 nmea ntrip navcom oceanserver oldstyle oncore rtcm104v2 rtcm
104v3 sirf skytraq superstar2 timing tsip tripmate tnt ublox ubx" GRUB_PLATFORMS="efi-64" INPUT_DEVICES="evdev keyboard mouse" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LIBREOFFICE_E
XTENSIONS="presenter-console presenter-minimizer" OFFICE_IMPLEMENTATION="libreoffice" PHP_TARGETS="php7-2" POSTGRES_TARGETS="postgres10 postgres11" PYTHON_SINGLE_TARGET="python3_6" PYTHON_TARGETS="python2_7 python3_6" QEMU_SOFTMMU_TARGETS=
"arm x86_64 sparc" QEMU_USER_TARGETS="x86_64" RUBY_TARGETS="ruby24 ruby25" USERLAND="GNU" VIDEO_CARDS="intel i915" XTABLES_ADDONS="quota2 psd pknock lscan length2 ipv4options ipset ipp2p iface geoip fuzzy condition tee tarpit sysrq steal r
awnat logmark ipmark dhcpmac delude chaos account"
Unset:  CC, CPPFLAGS, CTARGET, CXX, INSTALL_MASK, LC_ALL, LINGUAS, PORTAGE_BINHOST, PORTAGE_BUNZIP2_COMMAND, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS

=================================================================
                        Package Settings
=================================================================

app-admin/logcheck-1.3.18-r1::gentoo was built with the following:
USE="" ABI_X86="(64)"
FEATURES="assume-digests binpkg-docompress binpkg-dostrip binpkg-logs buildpkg ccache config-protect-if-modified distlocks ebuild-locks fixlafiles ipc-sandbox merge-sync multilib-strict network-sandbox news parallel-fetch parallel-install
preserve-libs protect-owned sandbox selinux sesandbox sfperms strict unknown-features-warn unmerge-logs unmerge-orphans userfetch userpriv usersandbox usersync xattr"
Comment 1 yesi 2020-02-20 16:56:07 UTC
I can not check whether there is some changes into v1.3.20.
https://packages.debian.org/sid/logcheck
Comment 2 yesi 2020-02-21 14:01:47 UTC
chmod 1777 /var/lock 
does not solved : i keep getting the alertes from Cron.

ls -ldZ /var/lock /run /run/lock /run/lock/
drwxr-xr-x. 17 root root system_u:object_r:var_run_t  740 21 févr. 11:15 /run
drwxrwxrwt.  3 root uucp system_u:object_r:var_lock_t  60 21 févr. 10:27 /run/lock
drwxrwxrwt.  3 root uucp system_u:object_r:var_lock_t  60 21 févr. 10:27 /run/lock/
lrwxrwxrwx.  1 root root system_u:object_r:var_lock_t   9 13 juin   2018 /var/lock -> /run/lock

Subject: Cron <logcheck@localhost> if [ -x /usr/sbin/logcheck ]; then nice -n10 /usr/sbin/logcheck ; fi
mkdir: cannot create directory ‘/run/lock/logcheck’: Permission denied

Subject: Cron <root@localhost> run-parts /etc/cron.hourly
mkdir: cannot create directory ‘/var/lock/logcheck’: Permission denied
run-parts: /etc/cron.hourly/logcheck.cron exited with return code 1
Comment 3 yesi 2020-02-21 14:43:22 UTC
I got also a another alerte :

From: added by portage for logcheck <logcheck@localhost>
Subject: Logcheck: localhost 2020-02-21 15:02 +0100 exiting due to errors

Warning: If you are seeing this message, your log files may not have been
checked!

Details:
Could not run logtail or save output

Check temporary directory: /tmp/logcheck.jlAm3G

Also verify that the logcheck user can read all files referenced in
/etc/logcheck/logcheck.logfiles!

declare -x HOME="/tmp"
declare -x LANG="fr_FR.utf8"
declare -x LC_COLLATE="C"
declare -x LC_MESSAGES="en_US.UTF-8"
declare -x LOGNAME="logcheck"
declare -x MAILTO="root"
declare -x OLDPWD
declare -x PATH="/sbin:/bin:/usr/sbin:/usr/bin"
declare -x PWD="/tmp"
declare -x SHELL="/bin/sh"
declare -x SHLVL="2"
declare -x USER="logcheck"

cat /etc/logcheck/logcheck.logfiles

/var/log/auth.log
/var/log/messages
/var/log/cron.log
/var/log/daemon.log
/var/log/debug.log
/var/log/kern.log
/var/log/user.log

-rw-r-----. 1 root logcheck system_u:object_r:var_log_t       17468 21 févr. 15:02 /var/log/auth.log
-rw-r-----. 1 root logcheck system_u:object_r:cron_log_t     283639 21 févr. 15:41 /var/log/cron.log
-rw-r-----. 1 root logcheck system_u:object_r:var_log_t       35544 21 févr. 15:33 /var/log/daemon.log
-rw-r-----. 1 root logcheck system_u:object_r:var_log_t       36094 21 févr. 10:27 /var/log/debug.log
-rw-r-----. 1 root logcheck system_u:object_r:var_log_t      446565 21 févr. 14:41 /var/log/kern.log
-rw-r-----. 1 root logcheck system_u:object_r:var_log_t  1346819591 21 févr. 15:41 /var/log/messages
-rw-r-----. 1 root logcheck system_u:object_r:var_log_t       33352 21 févr. 14:41 /var/log/user.log

cat /var/log/cron.log |egrep 'Permission denied'
(CRON) This directory or file can't be watched (/var/spool/cron/crontabs): Permission denied
(CRON) This directory or file can't be watched (/etc/cron.d): Permission denied
(CRON) This directory or file can't be watched (/etc/crontab): Permission denied
Comment 4 yesi 2020-02-21 14:54:53 UTC
drwxr-xr-x. 1 root root    system_u:object_r:system_cron_spool_t 144 30 janv. 18:42 /etc/cron.d
-rw-r--r--. 1 root root    system_u:object_r:system_cron_spool_t 476 12 nov.  15:14 /etc/crontab
drwx-wx--T. 1 root crontab system_u:object_r:cron_spool_t         52 12 nov.  15:14 /var/spool/cron/crontabs
Comment 5 yesi 2020-02-21 15:06:23 UTC
su -s /bin/bash -c "/usr/sbin/logcheck -d" logcheck
D: [1582297218] Turning debug mode on
D: [1582297218] Sourcing - /etc/logcheck/logcheck.conf
D: [1582297218] Finished getopts c:dhH:l:L:m:opr:RsS:tTuvw
D: [1582297218] Trying to get lockfile: /run/lock/logcheck/logcheck.lock
D: [1582297218] Running lockfile-touch /run/lock/logcheck/logcheck.lock
D: [1582297218] cleanrules: /etc/logcheck/cracking.d/kernel
D: [1582297218] cleanrules: /etc/logcheck/cracking.d/rlogind
D: [1582297218] cleanrules: /etc/logcheck/cracking.d/rsh
D: [1582297218] cleanrules: /etc/logcheck/cracking.d/smartd
D: [1582297218] cleanrules: /etc/logcheck/cracking.d/tftpd
D: [1582297218] cleanrules: /etc/logcheck/cracking.d/uucico
D: [1582297218] cleanrules: /etc/logcheck/violations.d/kernel
D: [1582297218] cleanrules: /etc/logcheck/violations.d/logcheck
D: [1582297218] cleanrules: /etc/logcheck/violations.d/smartd
D: [1582297218] cleanrules: /etc/logcheck/violations.d/su
D: [1582297218] cleanrules: /etc/logcheck/violations.d/sudo
D: [1582297218] cleanrules: /etc/logcheck/violations.ignore.d/logcheck-su
D: [1582297218] cleanrules: /etc/logcheck/violations.ignore.d/logcheck-sudo
D: [1582297218] cleanrules: /etc/logcheck/ignore.d.server/acpid
D: [1582297218] cleanrules: /etc/logcheck/ignore.d.server/amandad
D: [1582297218] cleanrules: /etc/logcheck/ignore.d.server/amavisd-new
D: [1582297218] cleanrules: /etc/logcheck/ignore.d.server/anacron
D: [1582297218] cleanrules: /etc/logcheck/ignore.d.server/anon-proxy
D: [1582297218] cleanrules: /etc/logcheck/ignore.d.server/apache
D: [1582297218] cleanrules: /etc/logcheck/ignore.d.server/apcupsd
D: [1582297218] cleanrules: /etc/logcheck/ignore.d.server/arpwatch
D: [1582297218] cleanrules: /etc/logcheck/ignore.d.server/asterisk
D: [1582297218] cleanrules: /etc/logcheck/ignore.d.server/automount
D: [1582297218] cleanrules: /etc/logcheck/ignore.d.server/bind
D: [1582297218] cleanrules: /etc/logcheck/ignore.d.server/bluez-utils
D: [1582297218] cleanrules: /etc/logcheck/ignore.d.server/courier
D: [1582297218] cleanrules: /etc/logcheck/ignore.d.server/cpqarrayd
D: [1582297218] cleanrules: /etc/logcheck/ignore.d.server/cpufreqd
D: [1582297218] cleanrules: /etc/logcheck/ignore.d.server/cron
D: [1582297218] cleanrules: /etc/logcheck/ignore.d.server/cron-apt
D: [1582297218] cleanrules: /etc/logcheck/ignore.d.server/cups-lpd
D: [1582297218] cleanrules: /etc/logcheck/ignore.d.server/cvs-pserver
D: [1582297218] cleanrules: /etc/logcheck/ignore.d.server/cvsd
D: [1582297218] cleanrules: /etc/logcheck/ignore.d.server/cyrus
D: [1582297218] cleanrules: /etc/logcheck/ignore.d.server/dcc
D: [1582297218] cleanrules: /etc/logcheck/ignore.d.server/ddclient
D: [1582297218] cleanrules: /etc/logcheck/ignore.d.server/dhclient
D: [1582297218] cleanrules: /etc/logcheck/ignore.d.server/dhcp
D: [1582297218] cleanrules: /etc/logcheck/ignore.d.server/dictd
D: [1582297218] cleanrules: /etc/logcheck/ignore.d.server/dkfilter
D: [1582297218] cleanrules: /etc/logcheck/ignore.d.server/dnsmasq
D: [1582297218] cleanrules: /etc/logcheck/ignore.d.server/dovecot
D: [1582297219] cleanrules: /etc/logcheck/ignore.d.server/dropbear
D: [1582297219] cleanrules: /etc/logcheck/ignore.d.server/dspam
D: [1582297219] cleanrules: /etc/logcheck/ignore.d.server/epmd
D: [1582297219] cleanrules: /etc/logcheck/ignore.d.server/exim4
D: [1582297219] cleanrules: /etc/logcheck/ignore.d.server/fcron
D: [1582297219] cleanrules: /etc/logcheck/ignore.d.server/ftpd
D: [1582297219] cleanrules: /etc/logcheck/ignore.d.server/git-daemon
D: [1582297219] cleanrules: /etc/logcheck/ignore.d.server/gnu-imap4d
D: [1582297219] cleanrules: /etc/logcheck/ignore.d.server/gps
D: [1582297219] cleanrules: /etc/logcheck/ignore.d.server/grinch
D: [1582297219] cleanrules: /etc/logcheck/ignore.d.server/horde3
D: [1582297219] cleanrules: /etc/logcheck/ignore.d.server/hplip
D: [1582297219] cleanrules: /etc/logcheck/ignore.d.server/hylafax
D: [1582297219] cleanrules: /etc/logcheck/ignore.d.server/ikiwiki
D: [1582297219] cleanrules: /etc/logcheck/ignore.d.server/imap
D: [1582297219] cleanrules: /etc/logcheck/ignore.d.server/imapproxy
D: [1582297219] cleanrules: /etc/logcheck/ignore.d.server/imp
D: [1582297219] cleanrules: /etc/logcheck/ignore.d.server/imp4
D: [1582297219] cleanrules: /etc/logcheck/ignore.d.server/innd
D: [1582297219] cleanrules: /etc/logcheck/ignore.d.server/ipppd
D: [1582297219] cleanrules: /etc/logcheck/ignore.d.server/isdnlog
D: [1582297219] cleanrules: /etc/logcheck/ignore.d.server/isdnutils
D: [1582297219] cleanrules: /etc/logcheck/ignore.d.server/jabberd
D: [1582297219] cleanrules: /etc/logcheck/ignore.d.server/kernel
D: [1582297219] cleanrules: /etc/logcheck/ignore.d.server/klogind
D: [1582297219] cleanrules: /etc/logcheck/ignore.d.server/krb5-kdc
D: [1582297219] cleanrules: /etc/logcheck/ignore.d.server/libpam-krb5
D: [1582297219] cleanrules: /etc/logcheck/ignore.d.server/libpam-mount
D: [1582297219] cleanrules: /etc/logcheck/ignore.d.server/logcheck
D: [1582297219] cleanrules: /etc/logcheck/ignore.d.server/login
D: [1582297219] cleanrules: /etc/logcheck/ignore.d.server/maradns
D: [1582297219] cleanrules: /etc/logcheck/ignore.d.server/mldonkey-server
D: [1582297219] cleanrules: /etc/logcheck/ignore.d.server/mon
D: [1582297219] cleanrules: /etc/logcheck/ignore.d.server/mountd
D: [1582297219] cleanrules: /etc/logcheck/ignore.d.server/nagios
D: [1582297219] cleanrules: /etc/logcheck/ignore.d.server/netconsole
D: [1582297219] cleanrules: /etc/logcheck/ignore.d.server/nfs
D: [1582297219] cleanrules: /etc/logcheck/ignore.d.server/nntpcache
D: [1582297219] cleanrules: /etc/logcheck/ignore.d.server/nscd
D: [1582297219] cleanrules: /etc/logcheck/ignore.d.server/nslcd
D: [1582297219] cleanrules: /etc/logcheck/ignore.d.server/openvpn
D: [1582297219] cleanrules: /etc/logcheck/ignore.d.server/otrs
D: [1582297219] cleanrules: /etc/logcheck/ignore.d.server/passwd
D: [1582297219] cleanrules: /etc/logcheck/ignore.d.server/pdns
D: [1582297219] cleanrules: /etc/logcheck/ignore.d.server/perdition
D: [1582297219] cleanrules: /etc/logcheck/ignore.d.server/policyd
D: [1582297219] cleanrules: /etc/logcheck/ignore.d.server/popa3d
D: [1582297219] cleanrules: /etc/logcheck/ignore.d.server/postfix
D: [1582297219] cleanrules: /etc/logcheck/ignore.d.server/postfix-policyd
D: [1582297219] cleanrules: /etc/logcheck/ignore.d.server/ppp
D: [1582297219] cleanrules: /etc/logcheck/ignore.d.server/pptpd
D: [1582297219] cleanrules: /etc/logcheck/ignore.d.server/procmail
D: [1582297219] cleanrules: /etc/logcheck/ignore.d.server/proftpd
D: [1582297219] cleanrules: /etc/logcheck/ignore.d.server/pure-ftpd
D: [1582297219] cleanrules: /etc/logcheck/ignore.d.server/pureftp
D: [1582297219] cleanrules: /etc/logcheck/ignore.d.server/qpopper
D: [1582297219] cleanrules: /etc/logcheck/ignore.d.server/rbldnsd
D: [1582297219] cleanrules: /etc/logcheck/ignore.d.server/rpc_statd
D: [1582297219] cleanrules: /etc/logcheck/ignore.d.server/rsnapshot
D: [1582297219] cleanrules: /etc/logcheck/ignore.d.server/rsync
D: [1582297219] cleanrules: /etc/logcheck/ignore.d.server/sa-exim
D: [1582297219] cleanrules: /etc/logcheck/ignore.d.server/samba
D: [1582297219] cleanrules: /etc/logcheck/ignore.d.server/saned
D: [1582297219] cleanrules: /etc/logcheck/ignore.d.server/sasl2-bin
D: [1582297219] cleanrules: /etc/logcheck/ignore.d.server/saslauthd
D: [1582297219] cleanrules: /etc/logcheck/ignore.d.server/schroot
D: [1582297219] cleanrules: /etc/logcheck/ignore.d.server/scponly
D: [1582297219] cleanrules: /etc/logcheck/ignore.d.server/slapd
D: [1582297219] cleanrules: /etc/logcheck/ignore.d.server/smartd
D: [1582297219] cleanrules: /etc/logcheck/ignore.d.server/smbd_audit
D: [1582297219] cleanrules: /etc/logcheck/ignore.d.server/smokeping
D: [1582297219] cleanrules: /etc/logcheck/ignore.d.server/snmpd
D: [1582297219] cleanrules: /etc/logcheck/ignore.d.server/snort
D: [1582297219] cleanrules: /etc/logcheck/ignore.d.server/spamc
D: [1582297219] cleanrules: /etc/logcheck/ignore.d.server/spamd
D: [1582297219] cleanrules: /etc/logcheck/ignore.d.server/squid
D: [1582297219] cleanrules: /etc/logcheck/ignore.d.server/ssh
D: [1582297219] cleanrules: /etc/logcheck/ignore.d.server/stunnel
D: [1582297219] cleanrules: /etc/logcheck/ignore.d.server/su
D: [1582297219] cleanrules: /etc/logcheck/ignore.d.server/sudo
D: [1582297219] cleanrules: /etc/logcheck/ignore.d.server/sympa
D: [1582297219] cleanrules: /etc/logcheck/ignore.d.server/syslogd
D: [1582297219] cleanrules: /etc/logcheck/ignore.d.server/systemd
D: [1582297219] cleanrules: /etc/logcheck/ignore.d.server/systemd-timesyncd
D: [1582297219] cleanrules: /etc/logcheck/ignore.d.server/teapop
D: [1582297219] cleanrules: /etc/logcheck/ignore.d.server/telnetd
D: [1582297219] cleanrules: /etc/logcheck/ignore.d.server/tftpd
D: [1582297219] cleanrules: /etc/logcheck/ignore.d.server/thy
D: [1582297219] cleanrules: /etc/logcheck/ignore.d.server/ucd-snmp
D: [1582297219] cleanrules: /etc/logcheck/ignore.d.server/upsd
D: [1582297219] cleanrules: /etc/logcheck/ignore.d.server/uptimed
D: [1582297219] cleanrules: /etc/logcheck/ignore.d.server/userv
D: [1582297219] cleanrules: /etc/logcheck/ignore.d.server/vsftpd
D: [1582297219] cleanrules: /etc/logcheck/ignore.d.server/watchdog
D: [1582297219] cleanrules: /etc/logcheck/ignore.d.server/wu-ftpd
D: [1582297219] cleanrules: /etc/logcheck/ignore.d.server/xinetd
D: [1582297219] cleanrules: /etc/logcheck/ignore.d.paranoid/bind
D: [1582297219] cleanrules: /etc/logcheck/ignore.d.paranoid/cron
D: [1582297219] cleanrules: /etc/logcheck/ignore.d.paranoid/incron
D: [1582297219] cleanrules: /etc/logcheck/ignore.d.paranoid/logcheck
D: [1582297219] cleanrules: /etc/logcheck/ignore.d.paranoid/postfix
D: [1582297219] cleanrules: /etc/logcheck/ignore.d.paranoid/ppp
D: [1582297219] cleanrules: /etc/logcheck/ignore.d.paranoid/pureftp
D: [1582297219] cleanrules: /etc/logcheck/ignore.d.paranoid/qpopper
D: [1582297219] cleanrules: /etc/logcheck/ignore.d.paranoid/squid
D: [1582297219] cleanrules: /etc/logcheck/ignore.d.paranoid/ssh
D: [1582297219] cleanrules: /etc/logcheck/ignore.d.paranoid/stunnel
D: [1582297219] cleanrules: /etc/logcheck/ignore.d.paranoid/sysklogd
D: [1582297219] cleanrules: /etc/logcheck/ignore.d.paranoid/telnetd
D: [1582297219] cleanrules: /etc/logcheck/ignore.d.paranoid/tripwire
D: [1582297219] cleanrules: /etc/logcheck/ignore.d.paranoid/usb
D: [1582297219] logoutput called with file: /var/log/auth.log
D: [1582297219] Running /usr/sbin/logtail2 on /var/log/auth.log
D: [1582297219] logoutput called with file: /var/log/messages
D: [1582297219] Running /usr/sbin/logtail2 on /var/log/messages
D: [1582297245] logoutput called with file: /var/log/cron.log
D: [1582297245] Running /usr/sbin/logtail2 on /var/log/cron.log
D: [1582297245] logoutput called with file: /var/log/daemon.log
D: [1582297245] Running /usr/sbin/logtail2 on /var/log/daemon.log
D: [1582297245] logoutput called with file: /var/log/debug.log
D: [1582297245] Running /usr/sbin/logtail2 on /var/log/debug.log
D: [1582297245] logoutput called with file: /var/log/kern.log
D: [1582297245] Running /usr/sbin/logtail2 on /var/log/kern.log
D: [1582297245] logoutput called with file: /var/log/user.log
D: [1582297245] Running /usr/sbin/logtail2 on /var/log/user.log
D: [1582297245] Sorting logs
D: [1582297283] Setting the Intro
D: [1582297283] Checking for security alerts
D: [1582297283] greplogoutput: kernel
D: [1582297284] greplogoutput: rlogind
D: [1582297285] greplogoutput: rsh
D: [1582297286] greplogoutput: smartd
D: [1582297287] greplogoutput: tftpd
D: [1582297288] greplogoutput: uucico
D: [1582297289] greplogoutput: returning 1
D: [1582297289] Checking for security events
D: [1582297289] greplogoutput: kernel
D: [1582297290] greplogoutput: logcheck
D: [1582297290] greplogoutput: smartd
D: [1582297290] greplogoutput: su
D: [1582297290] greplogoutput: Entries in checked
D: [1582297290] cleanchecked - file: /tmp/logcheck.EcXEoe/violations-ignore/logcheck-su
D: [1582297291] greplogoutput: sudo
D: [1582297291] greplogoutput: Entries in checked
D: [1582297291] cleanchecked - file: /tmp/logcheck.EcXEoe/violations-ignore/logcheck-sudo
D: [1582297291] report: cat'ing - Security Events for sudo
D: [1582297291] greplogoutput: returning 0
D: [1582297291] Checking for system events
D: [1582297292] cleanchecked - dir - /tmp/logcheck.EcXEoe/ignore
D: [1582297292] cleanchecked - dir - /tmp/logcheck.EcXEoe/ignore/acpid
cat: write error: No space left on device
D: [1582297292] error: Killing lockfile-touch - 25887
D: [1582297292] error: Removing lockfile: /run/lock/logcheck/logcheck.lock
D: [1582297292] Error: Could not output to TMPDIR/checked.1.
/usr/sbin/logcheck: line 164: cannot create temp file for here-document: No space left on device
D: [1582297292] cleanup: Removing - /tmp/logcheck.EcXEoe

FILESYSTEM             (=) USED      FREE (-)  %USED AVAILABLE  TOTAL MOUNTED ON
devtmpfs               [--------------------]   0,0%     10,0M  10,0M /dev
tmpfs                  [=-------------------]   1,0%      7,7G   7,8G /dev/shm
tmpfs                  [=-------------------]   0,0%      7,8G   7,8G /run
/dev/mapper/gnu-rootfs [=======-------------]  33,6%    303,8G 457,8G /
cgroup_root            [--------------------]   0,0%     10,0M  10,0M /sys/fs/cgroup
/dev/mapper/gnu-rootfs [=======-------------]  33,6%    303,8G 457,8G /home
/dev/mapper/gnu-rootfs [=======-------------]  33,6%    303,8G 457,8G /boot
/dev/mapper/gnu-rootfs [=======-------------]  33,6%    303,8G 457,8G /opt
/dev/mapper/gnu-rootfs [=======-------------]  33,6%    303,8G 457,8G /var
/dev/mapper/gnu-rootfs [=======-------------]  33,6%    303,8G 457,8G /var/log
/dev/mapper/gnu-rootfs [=======-------------]  33,6%    303,8G 457,8G /var/tmp
tmpfs                  [=-------------------]   0,0%      4,0G   4,0G /tmp
none                   [=-------------------]   0,0%      7,8G   7,8G /run/user/1000
Comment 6 yesi 2020-02-24 17:08:33 UTC
Changelog : 
https://metadata.ftp-master.debian.org/changelogs//main/l/logcheck/logcheck_1.3.20_changelog

It seems that hhere is no changes into v1.3.20 that could correct with the Gentoo version 1.3.18-r1.
Comment 7 yesi 2020-02-27 11:26:56 UTC
I've solved some alertes with SELinux :

allow system_cronjob_t var_lock_t:dir create;
allow system_cronjob_t var_lib_t:file { read write open };
allow system_cronjob_t var_lock_t:dir setattr;
allow system_cronjob_t self:cap_userns sys_ptrace;
allow system_cronjob_t self:capability sys_ptrace;

But, it seems that  this one has nothing with SELinux :

From: "(Cron Daemon)" <logcheck@localhost>
Subject: Cron <logcheck@localhost> if [ -x /usr/sbin/logcheck ]; then nice -n10 /usr/sbin/logcheck -R; fi
mkdir: cannot create directory ‘/run/lock/logcheck’: Permission denied


ll /var/lock/
drwxr-xr-x. 2 logcheck logcheck 40 27 févr. 12:02 logcheck
drwx------. 2 root     root     40 27 févr. 10:34 lvm

ll /var/lock/ -dZ
drwxrwxr-x. 4 root uucp system_u:object_r:var_lock_t 80 27 févr. 11:01 /var/lock/

ll /var/lock
lrwxrwxrwx. 1 root root 9 13 juin   2018 /var/lock -> /run/lock

ll /run/lock/ -dZ
drwxrwxr-x. 4 root uucp system_u:object_r:var_lock_t 80 27 févr. 11:01 /run/lock/


/run is mounted in tmpfs filsystem.