Package: sysklogd
Version: 1.5-5
Justification: causes serious data loss
Severity: critical
Tags: security patch
*** Please type your report below this line ***
Messages are not being sent to /var/log/messages and /var/log/debug.
I believe this is due to syntax problems in the config file (patch
attached), and that messages are not getting to /dev/xconsole as well.
From experimenting with the config file, it seems that the problem is
with the continuation lines.
Apparently the escaped EOL does not skip the whitespace at the beginning
of the next line, which might cause it to recognize the tab there as a
field separator. Removing these tabs makes the daemon work properly (see
patch).
-- System Information:
Debian Release: squeeze/sid
APT prefers unstable
APT policy: (990, 'unstable')
Architecture: amd64 (x86_64)
Kernel: Linux 2.6.32-5-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=he_IL.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash
Versions of packages sysklogd depends on:
ii klogd [linux-kernel-log-daemo 1.5-5 Kernel Logging Daemon
ii libc6 2.11.1-3 Embedded GNU C Library:
Shared lib
sysklogd recommends no packages.
sysklogd suggests no packages.
-- Configuration Files:
/etc/syslog.conf changed [not included]
-- no debconf information
--- /etc/syslog.conf.old 2010-06-10 11:10:56.112206467 +0300
+++ /etc/syslog.conf 2010-06-10 12:06:57.955082453 +0300
@@ -34,12 +34,12 @@
# Some `catch-all' logfiles.
#
*.=debug;\
- auth,authpriv.none;\
- news.none;mail.none -/var/log/debug
+auth,authpriv.none;\
+news.none;mail.none -/var/log/debug
*.=info;*.=notice;*.=warn;\
- auth,authpriv.none;\
- cron,daemon.none;\
- mail,news.none -/var/log/messages
+auth,authpriv.none;\
+cron,daemon.none;\
+mail,news.none -/var/log/messages
#
# Emergencies are sent to everybody logged in.
@@ -64,7 +64,7 @@
# busy site..
#
daemon.*;mail.*;\
- news.err;\
- *.=debug;*.=info;\
- *.=notice;*.=warn |/dev/xconsole
+news.err;\
+*.=debug;*.=info;\
+*.=notice;*.=warn |/dev/xconsole
