logcheck 1.2.64 source package in Ubuntu

Changelog

logcheck (1.2.64) unstable; urgency=low

  [ martin f. krafft ]
  * Fix spelling error in configuration file; thanks to Frans "I am bored"
    Pop (closes: #445537).

  * Remove version from cron dependency to allow e.g. bcron-run to satisfy the
    requirement.
  * Clean up accidental duplication in Makefile; hardcoded /usr/sbin is now
    $(BINDIR) (Ed Santiago)

  * ignore.d.server/postfix:
    - ignore Postfix bad address syntax errors from postfix/error
      (closes: #464896) (Russ Allbery)
    - ignore additional "(0 bytes)" on lost connnections (closes: #470102)
      (Russ Allbery)

  * ignore.d.server/spamd
    - deal with socket connections by e.g. evolution (closes: #448510, #473619).

  * ignore.d.workstation/kernel
    - also ignore loading of R300 microcode (closes: #474606).

  * ignore.d.server/spamd
    - fix spamd processing message pattern when msgid is unknown; thanks to
      Michal Čihař for the patch (closes: #471936).

  * ignore.d.server/bind
    - Fix up rules to match when views are in use; thanks Shawn Heisey
      (closes: #477932).

  * ignore.d.server/dkim-filter
    - ignore warnings about bad signature data; thanks to Clint Adams
      (closes: #478334).

  * Set permissions on /var/lib/logcheck to 0770 to prevent disclosure of
    information (see #481347).

  * If nail is not installed and MAILASATTACH is set, fall back to regular
    method (closes: #479278).

  [ maximilian attems ]
  * Clean up linux/violations.d/logcheck, all the "Attack" rules look
    pretty much dubious. Nobody should serisouly run rshd or rlogind.
  * control: s/XS-Vcs/Vcs/ git lines are official.
  * Add myself to Uploaders.
  * debian/rules, debian/logcheck-database.linda-overrides: Nuke old
    dup overrides, lintian rules.

  [ Frédéric Brière ]
  * ignore.d.server/bind:
    - moved "[bind] query $FOO denied" rule to violations.ignore.d
      (closes: #443881).
    - added bind's "AXFR ended" rule alongside "AXFR started"
      (closes: #445046).
    - added "adding an RR"/"deleting rrset" bind rules for dynamic DNS.
    - added "connection reset" rule for bind.
    - added "journal file does not exist" rule for bind.

  * ignore.d.server/sasl2-bin:
    - added DB_NOTFOUND and "user not found" rules for sasl2-bin.

  * ignore.d.workstation/kernel:
    - ignore bttv PLL messages
    - ignore (un)register messages from zaurus module (closes: #444096).

  * ignore.d.server/ddclient:
    - added two basic rules for ddclient (closes: #444097).

  * ignore.d.server/telnetd:
    - added basic rules for telnetd (closes: #444100).

  * ignore.d.server/ssh:
    - ignore "Nasty PTR record" messages from openssh (closes: #445074).

  * violations.ignore.d/logcheck-ssh:
    - adjused ssh "Failed password" rule to allow omitting "illegal/invalid
      user" (closes: #445072).
    - updated ssh "reverse mapping" rule to include IP address
      (closes: #445073).

  * ignore.d.server/tftpd:
    - added tftpd "serving file from ..." rule (closes: #445069).

  * ignore.d.server/dspam:
    - corrected illegal regex in ignore.d.server/dspam.

  * violations.ignore.d/logcheck-sudo:
    - ignore PAM session messages triggered by sudo.

  * ignore.d.server/postfix:
    - Postfix considers that "-" can be part of a numeric hostname.

  * violations.ignore.d/logcheck-postfix:
    - allow any error message following "SASL authentication failure" in
      postfix.

  * ignore.d.server/libpam-mount:
    - added libpam-mount rule "realpath of volume $FOO is $BAR".

  * ignore.d.server/proftpd:
    - adapted rules for SystemLog syntax.
    - added "FTP login|session timed out" rule.
    - added "Incorrect password" proftpd rule.
    - adjusted proftpd rules to catch unresolved IPv6 hosts.
    - added "@" to proftpd "no such user" rules, to catch <email address hidden>.
    - adjusted proftpd "Data connection closed" rule to allow arbitrary
      usernames.

  * ignore.d.server/openvpn:
    - added "Re-using pre-shared static key" openvpn rule.
    - re-enabled :port portion of "UDPv4 link" openvpn rule.

  * ignore.d.workstation/bluetooth-alsa
    - adding rules for headsetd (bluetooth-alsa).

  * ignore.d.server/dhcp
    - Adding dhcp rules for DNS updates by ddns_remove_a()
      (closes: #459875, #472368)
    - Added dhcp "removed reverse map" rule, which occurs on DHCPRELEASE.

  [ Gerfried Fuchs ]
  * Bumped Standards-Version to 3.7.3, no further changes required anymore.
  * Added Homepage source control field.
  * debian/logtail.NEWS: Fix date format in trailer lines.
  * Updated my email address in debian/control and debian/copyright.

 -- Ubuntu Archive Auto-Sync <email address hidden>   Wed,  04 Jun 2008 21:38:34 +0100