Codebase list logwatch / 9d914dd
Import upstream version 7.5.4+git20201004.1.f9943bb Debian Janitor 2 years ago
36 changed file(s) with 1335 addition(s) and 0 deletion(s). Raw diff Collapse all Expand all
0 logwatch (7.1-1) unstable; urgency=low
1
2 * This version will remove untouched configuration files in
3 /etc/logwatch/conf. If you modified it, it will be renamed to
4 $file.dpkg-bak. You should read
5 /usr/share/doc/logwatch/HOWTO-Customize-LogWatch and only put
6 the required modification back in $file.
7 * This package is now maintained as alioth project "pkg-logwatch".
8 It uses an svn repository on svn.debian.org.
9
10 -- Willi Mann <willi@wm1.at> Sat, 19 Nov 2005 16:39:24 +0100
0 Sections of this file:
1
2 - Customizing the configuration
3 - More specific ranges
4 - access.log parsing - service http
5 - Getting fortunes in your language
6 - Howto modify a filter
7 - Logwatch runs daily for range yesterday by default
8
9
10
11 Customizing the configuration:
12 ==============================
13
14 Please read the documentation in
15 /usr/share/doc/logwatch/HOWTO-Customize-LogWatch.gz.
16 For modifying a filter also read the last section in this file.
17
18
19
20 More specific ranges:
21 ====================
22
23 Logwatch's range parameter supports a lot of range options if you apt-get
24 install libdate-manip-perl (Date::Manip in Perl terms). Type
25 logwatch --range Help
26 for more information.
27
28
29
30 Problems with getting logwatch messages through your MTA
31 ========================================================
32
33 Logwatch may not always produce e-mails that strictly conform to all SMTP/Mail
34 related RFCs. Some MTAs reject these messages. Many of these problems can be
35 worked around by adding the "--encode base64" option to logwatch's command line
36 (in /etc/cron.daily/00logwatch for the daily invocation by cron). Note however,
37 that base64 encoding increases the mail size by about a factor of 1.33.
38
39
40
41 access.log parsing - service http:
42 ==================================
43
44 Since 6.1.2, there is a new format for specifying the logfile format.
45 I could only test it for apache2. If it doesn't work for your webserver,
46 please submit a bugreport with some LogLines.
47
48
49
50 Getting fortunes in your language
51 =================================
52
53 If you want to see fortunes in your favourite language, you need to pass a
54 valid LC_ALL setting to logwatch. If you don't use a valid (read: enabled by
55 dpkg-reconfigure locales) value, logwatch (perl) will complain. To pass that
56 setting in the automatic daily run, you need to modify
57 /etc/cron.daily/00logwatch
58
59
60
61 Howto modify a filter:
62 ======================
63
64 Option #1:
65 ----------
66
67 copy the filterscript from /usr/share/logwatch/scripts to
68 /etc/logwatch/scripts, preserving the hierarchy. Then modfiy it. The
69 disadvantage is that you will not be able to track upstream changes. Please
70 read more in /usr/share/doc/logwatch/HOWTO-Customize-LogWatch.gz
71
72 Option #2:
73 ----------
74
75 patch the source, rebuild. This might be the better option if you have many
76 machines to maintain.
77
78 The steps required are:
79 (This is meant to be short HOWTO, just in case you've never modified the
80 source of a debian package before)
81
82 - download the source
83 $ apt-get source logwatch
84
85 - cd to source dir
86 $ cd logwatch-$version
87
88 - make the modifications
89 $ $EDITOR $filetochange
90
91 - Add your changes to debian/patches/ with dpkg-source
92 $ dpkg-source --commit
93 This asks for a patch name and opens an editor to edit the patch
94 meta-information. You are not required to change anything in order to
95 continue, though.
96
97 - Increment the version number
98 $ dch -i
99 you get an editor with debian/changelog. Modify the version number so it's
100 only slightly larger than the current debian version (e.g. 5.2.2-2 =>
101 5.2.2-2.0.0.1)
102
103 - build the package, eg:
104 $ dpkg-buildpackage -rfakeroot
105 or
106 $ debuild
107
108 - install the package (requires root privileges)
109 $ debi
110 or
111 $ dpkg -i ../logwatch_$version.deb
112
113
114
115 Logwatch runs daily for range yesterday by default
116 ==================================================
117
118 If you don't want that, simply delete /etc/cron.daily/00logwatch or modify it.
119 New versions of this package will preserve this change, thanks to dpkg's
120 configuration file handling.
0 logwatch (7.5.4-1) unstable; urgency=medium
1
2 * New upstream version 7.5.4 (closes: #970684)
3 * d/control: Update Homepage field (closes: #956666)
4 * d/control: Update Standards-Version from 4.4.1 to 4.5.0
5 * Switch to debhelper compat level 11 (from 9)
6
7 -- Willi Mann <willi@debian.org> Sun, 04 Oct 2020 20:40:40 +0200
8
9 logwatch (7.5.2-1) unstable; urgency=medium
10
11 * New upstream version 7.5.2
12 * Refresh patches, drop patches included upstream
13 * Upgrade policy 4.3.0 -> 4.4.1 (no changes)
14
15 -- Willi Mann <willi@debian.org> Sun, 12 Jan 2020 12:25:08 +0100
16
17 logwatch (7.5.0-2) unstable; urgency=high
18
19 * s/s/kernel: fix typo. closes: 917836
20
21 -- Willi Mann <willi@debian.org> Sat, 09 Mar 2019 18:14:03 +0100
22
23 logwatch (7.5.0-1) unstable; urgency=medium
24
25 * New upstream version
26 - closes: 855539 fixed unmatched entries in SSH
27 - closes: 905018 match postfix-policyd-spf-python logs
28 - closes: 915617 make regex compatible with newer perl versions
29 - closes: 824034 fixes handling of ignore_services handling in secure
30 * d/control: Remove Suggests on fortune-mod as the zz-fortune script was removed
31 * d/control: update standards version 4.1.4 -> 4.3.0 (no changes)
32 * exim: parse 'SMTP protocol error in "AUTH LOGIN"' lines, closes: 886000
33 * dovecot: adapt for newer sieve log format, closes: 906045
34 * secure: Ignore systemd "Session \d+ logged out" messages, closes: 907512
35 * dovecot: Ignore diagnostic mailbox operation logging.
36
37 -- Willi Mann <willi@debian.org> Sun, 30 Dec 2018 10:17:30 +0100
38
39 logwatch (7.4.3+git20180713-1) unstable; urgency=medium
40
41 [ Ondřej Nový ]
42 * d/changelog: Remove trailing whitespaces
43 * d/control: Remove trailing whitespaces
44 * d/rules: Remove trailing whitespaces
45 * d/watch: Use https protocol
46
47 [ Willi Mann ]
48 * New upstream version 7.4.3+git20180713
49 - Handle sshd "key negotiation failed" log messages (closes: 880595)
50 * Rebase debian patches
51 * Adapt Vcs-* fields as repo moved to salsa
52 * update standards version 3.9.8 -> 4.1.4 (no changes)
53 * Ignore ecrypt messages in cron (Closes: 862337)
54 * scripts/mdadm: Fix parsing of mdadm.conf, properly handle "<ignore>"
55 (Closes: 907319)
56 * Document workaround for non-conforming SMTP output. (Closes: 871473)
57 * Switch to debhelper compat level 9
58
59 -- Willi Mann <willi@debian.org> Tue, 02 Oct 2018 19:52:16 +0200
60
61 logwatch (7.4.3+git20161207-2) unstable; urgency=medium
62
63 * Revert upstream's change of the declared mail charset.
64 The declared mail charset in mails from Logwatch was recently changed from
65 iso-8859-1 to utf-8. This commit reverts this change to address concerns
66 about invalid UTF-8 encodings. (closes: 849531)
67
68 -- Willi Mann <willi@debian.org> Sat, 21 Jan 2017 17:44:03 +0100
69
70 logwatch (7.4.3+git20161207-1) unstable; urgency=medium
71
72 * Imported Upstream version 7.4.3+git20161207
73 - kernel: fix parsing of oom killer messages. closes: #833350
74 * Refresh patches, remove patches included upstream
75 * build_tar.sh: Update to work with GIT repository
76 * postfix: Fix unaligned output
77
78 -- Willi Mann <willi@debian.org> Fri, 16 Dec 2016 20:15:26 +0100
79
80 logwatch (7.4.3-2) unstable; urgency=medium
81
82 * s/s/amavis: Fix perl warning "redundant argument in sprintf".
83 closes: 819572
84 * dovecot: Ignore "Logged out" and "Debug" lines. closes: #840956, #840952
85
86 -- Willi Mann <willi@debian.org> Wed, 02 Nov 2016 19:32:35 +0100
87
88 logwatch (7.4.3-1) unstable; urgency=medium
89
90 * Imported Upstream version 7.4.3
91 * d/control: Update Standards-Version 3.9.6 -> 3.9.8
92
93 -- Willi Mann <willi@debian.org> Sat, 30 Apr 2016 14:40:57 +0200
94
95 logwatch (7.4.2-1) unstable; urgency=medium
96
97 * Imported Upstream version 7.4.2
98 * Rebase patches, drop apparmor ALLOWED patch, included upstream
99
100 -- Willi Mann <willi@debian.org> Tue, 01 Mar 2016 09:37:27 +0100
101
102 logwatch (7.4.1+svn20160106rev308-1) unstable; urgency=medium
103
104 * Imported Upstream version 7.4.1+svn20160106rev308
105 - fixes perl 5.22 warning in postfix script (sprintf), closes: #812528
106 * Refresh patches, drop perl 5.22 patches, included upstream
107
108 -- Willi Mann <willi@debian.org> Sun, 24 Jan 2016 19:17:34 +0100
109
110 logwatch (7.4.1+svn20151218rev302-1) unstable; urgency=medium
111
112 * Imported Upstream version 7.4.1+svn20151218rev302
113 - fixes perl 5.22 warnings in amavis and postfix scripts (partially fixes
114 #809756)
115 * Refresh patches
116 * Add patches for Perl 5.22 warnings in secure and http script (fully
117 closes: 809756)
118
119 -- Willi Mann <willi@debian.org> Wed, 06 Jan 2016 11:37:05 +0100
120
121 logwatch (7.4.1+svn20150731rev294-1) unstable; urgency=medium
122
123 * Imported Upstream version 7.4.1+svn20150731rev294
124 * Add script to build tarball from SVN svn_build_tar.sh
125 * d/control: Update Standards-Version 3.9.5 => 3.9.6 (no changes)
126 * d/control: Recommend libsys-meminfo-perl (closes: 761399)
127 * refresh patches, drop freshclam log path patch (solved upstream)
128 * postfix: Support openspf.net in pattern (not only openspf.org)
129 (closes: 784306)
130 * audit: support apparmor ALLOWED without parent= parameter (closes: 775111)
131 * README.Debian: Fix path to HOWTO-Customize-Logwatch.gz (closes: 790015)
132 * README.Debian: Some rewording, update on changing filters
133 * d/control: remove space after dot in description (fixes lintian warning)
134
135 -- Willi Mann <willi@debian.org> Wed, 02 Sep 2015 18:50:14 +0200
136
137 logwatch (7.4.1-2) unstable; urgency=medium
138
139 * Revert upstream change on fail2ban service config. This makes fail2ban
140 reporting work again. Closes: #766901
141
142 -- Willi Mann <willi@debian.org> Mon, 03 Nov 2014 20:02:30 +0100
143
144 logwatch (7.4.1-1) unstable; urgency=medium
145
146 * Imported Upstream version 7.4.1 (svn rev 242)
147 - patches merged upstream:
148 + Change-spamassassin-to-use-maillog-config.patch
149 + s-sshd-ignore-PAM-service-sshd-ignoring-max-retries-.patch
150 + s-s-exim-Fix-wrong-regex.patch
151 + s-s-sshd-Support-fatal-Write-failed-Connection-reset.patch
152 + s-s-dovecot-Recognize-and-report-Server-shutting-dow.patch
153 + s-s-pam_unix-Fix-two-unknown-entries.patch
154 - bugs fixed upstream:
155 + Unmatched entries for AppArmor, closes: 710146
156 * Add Recommends on libsys-cpu-perl, needed by zz-sys script (which is
157 disabled by default). Spotted in #761399. Since zz-sys would also need
158 perl module Sys::MemInfo, we do not close this bug.)
159
160 -- Willi Mann <willi@debian.org> Wed, 08 Oct 2014 19:32:13 +0200
161
162 logwatch (7.4.0+svn20140718rev203-1) unstable; urgency=medium
163
164 * Imported Upstream version 7.4.0+svn20140718rev203
165 - s/smartd: Also support Selective Self-Test
166 - s/kernel: don't report mount option "errors". Closes: #754211
167 * Refresh patches, remove 4 patches merged upstream
168 * Change spamassassin logfile config such that it works on debian
169 * logfiles/vsftpd.conf: Include year in time pattern, such that logfiles
170 from one year ago are not included in the report. Closes: #682036
171 * s/clam-update: Print full path to freshclam log in warning message.
172 Closes: #633776
173 * s/sshd: ignore "PAM service(sshd) ignoring max retries" message.
174 * s/s/exim: Fix wrong regex causing "Uninitialized variable" warning.
175 Closes: #756186
176 * d/control: Update Standards-Version 3.9.4 -> 3.9.5 (no changes)
177 * s/s/sshd: Support "fatal: Write failed: Connection reset by peer" message
178 * s/s/dovecot: Recognize and report "Server shutting down." loglines
179 * s/s/pam_unix: Fix two unknown entries ("ignoring max retries" and a too
180 strict pattern for an authentication failure line)
181 * d/control: Put Vcs-* fields pointing to newly created repository on alioth
182
183 -- Willi Mann <willi@debian.org> Fri, 08 Aug 2014 19:42:17 +0200
184
185 logwatch (7.4.0+svn20131108rev175-1) unstable; urgency=low
186
187 * Imported Upstream version 7.4.0+svn20131108rev175
188 - fixes exim script problems with IPv6 and uninitialized values
189 (closes: #708197, #712655)
190 - script to support rsyslog specific message (closes: #712681)
191 - enhancements to mdadm handling (hopefully closes: #710867)
192 * smartd: Add patch to support additional test types (closes: #636322)
193 * man-page: Fix documentation of --logdir parameter (closes: #670877)
194
195 -- Willi Mann <willi@debian.org> Thu, 28 Nov 2013 20:10:09 +0100
196
197 logwatch (7.4.0+svn20130529rev144-1) unstable; urgency=low
198
199 * Imported Upstream version 7.4.0+svn20130529rev144
200 * Refresh patches, drop dovecot and AppArmor patch - they are included
201 upstream
202 * Use my debian.org mail address in the Maintainer field
203 * Update Standards-Version 3.9.3 -> 3.9.4 (no changes)
204 * s/s/php: Accept time format with specification of time zone
205 (Closes: #705600)
206
207 -- Willi Mann <willi@debian.org> Sat, 01 Jun 2013 14:03:28 +0200
208
209 logwatch (7.4.0+svn20120502rev103-1) unstable; urgency=low
210
211 * Set VDate in logwatch.pl to svn date for svn snapshots
212 * Imported Upstream version 7.4.0+svn20120502rev103
213 * Refresh patches, remove patches applied upstream
214 * Add nginx log file location to httpd logfile specification.
215 Thanks to Clint Byrum (Closes: 624271)
216
217 -- Willi Mann <willi@wm1.at> Sat, 05 May 2012 21:20:23 +0200
218
219 logwatch (7.4.0+svn20120227rev85-1) unstable; urgency=low
220
221 * Imported Upstream version 7.4.0+svn20120227rev85
222 * Refresh patches - amavis patch removed
223 * No longer use logreporter's postfix script - included upstream now
224 * Include new {postfix,amavis}-lw manpage
225 * Update d/copyright to reflect new postfix script status
226 * Standards-Version 3.9.2 -> 3.9.3 (no changes)
227 * Support alternative OoM kernel message in kernel 2.6.32 (Closes: 656806)
228 * Another try to fix dovecot reporting (Closes: 571163)
229
230 -- Willi Mann <willi@wm1.at> Fri, 06 Apr 2012 21:11:23 +0200
231
232 logwatch (7.4.0+svn20111221rev79-1) unstable; urgency=low
233
234 * Imported Upstream version 7.4.0+svn20111221rev79
235 * scripts/services/amavis: Handle some previously unmatched entries.
236 Thanks to Patrice Le Gurun for the patch (Closes: 575866)
237 * Bug618604: Support some kerberos lines in secure.
238 Thanks to Ben Hildred for the patch (Closes: 618604)
239 * Bug649194: Handle unmatched entry in saslauthd.
240 Thanks to Kees Cook for the patch (Closes: 649194)
241 * Bug649197: Add AppArmor log processing to the audit service.
242 Thanks to Kees Cook for the patch (Closes: 649197)
243 * Bug571163: Handle changes in dovecot logging.
244 Thanks to Thorsten Kohlhepp for his assistance (Closes: 571163)
245 * debian/control: Depends: exim4 -> default-mta
246
247 -- Willi Mann <willi@wm1.at> Sat, 14 Jan 2012 20:02:05 +0100
248
249 logwatch (7.4.0+svn20111018rev68-1) unstable; urgency=low
250
251 * Imported Upstream version 7.4.0+svn20111018rev68
252 * services/dpkg: Support new remove line format (Closes: 646101)
253 * services/cron: Support more service names (Closes: 615006)
254 * Cope with .1 as first logfile rotation name (Closes: 612634)
255 * Remove final white space from logwatch text output (Closes: 642398)
256 * zz-disk_space: Support GNU/kFreeBSD.
257 Thanks to mattpays <mailing@schiznik.com> (Closes: 576735)
258
259 -- Willi Mann <willi@wm1.at> Sat, 05 Nov 2011 20:44:36 +0100
260
261 logwatch (7.4.0+svn20110808rev66-1) unstable; urgency=low
262
263 * New Upstream snapshot 7.4.0+svn20110808rev66 (closes: #644053)
264 - Use postfix-logwatch 1.39.05 as postfix script
265 * Packaging now done with git-buildpackage
266 * Update the patch for the secure script
267 * Switch to debian source format 3
268 * debian/rules: Convert to dh command sequencer
269 * debian/rules: Ensure permissions are correctly set on all scripts
270 * debian/rules: Refine Shebang inserter (for postfix script)
271 * Use postfix-logwatch 1.39.05 as postfix script
272 * debian/control: Standards-Version 3.9.2
273 * debian/control: Remove SVN VC hints, switched to git, but not yet
274 published.
275 * debian/watch: reflect upstream move to sf.net
276
277 -- Willi Mann <willi@wm1.at> Sun, 16 Oct 2011 17:26:59 +0200
278
279 logwatch (7.3.6.cvs20090906-2) unstable; urgency=high
280
281 * CVE-2011-1018: Remote code execution by combination of
282 - Logfile name by attacker's choice (e.g. samba log files) and
283 - Missing sanitization of logfile names in system() call.
284 - fix by encapsulating logfile names in ' and disallowing '.
285 Taken from upstream.
286 - closes: #615995
287
288 -- Willi Mann <willi@wm1.at> Wed, 02 Mar 2011 08:57:07 +0100
289
290 logwatch (7.3.6.cvs20090906-1) unstable; urgency=low
291
292 * New CVS snapshot + postfix-logwatch 1.38.01
293 - postfix-logwatch now supports SPF \S+ lines (closes: #507937)
294 * Support cron with -L2 loglevel (closes: #542453)
295 * Move logfiles ending with *.gz or *.bz2 to archive list, so they are
296 unpacked before being processed (closes: #536472)
297 * Include patch for imapd to support loglines from uw-imapd, submitted by
298 Marcin Szewczyk, closes: #541152
299 * scripts/services/denyhosts: Output one host per line, not one possibly
300 very long line with all hosts. closes: #507042
301 * Support "command continues" lines in sudo. closes: #505432
302 * Fix typos in exim script. LP: #425206.
303 * No longer force recipient in the cron script. (--output mail instead of
304 --mailto root)
305 * change comment concerning the Mailto parameter to no longer talk about
306 removed Print parameter. closes: #499109
307 * lintian:
308 - Standards-Version: 3.8.3 (no changes)
309 - Change path to GPL2 in debian/copyright
310
311 -- Willi Mann <willi@wm1.at> Mon, 07 Sep 2009 17:04:43 +0200
312
313 logwatch (7.3.6.cvs20080702-2) unstable; urgency=low
314
315 * add Michael Tautschnig to changelog of former version, crediting
316 him for his hard work fixing the unknown copyright holders issue.
317 * Fix manpage:
318 - --filename instead of --save to save output to a file
319 (closes: #441358)
320 - --print no longer exists, output to stdout is now the default
321 - Fix some formatting issues in the manpage (thanks again to Michael
322 Tautschnig)
323 * services/dpkg: Ignore some previously unknown lines (closes: #491972,
324 thanks Jeremie Bouttier for the report)
325
326 -- Willi Mann <willi@wm1.at> Sun, 07 Dec 2008 08:20:06 +0100
327
328 logwatch (7.3.6.cvs20080702-1) unstable; urgency=medium
329
330 * New upstream CVS snapshot
331 - Fixes issue of unknown copyright holders (thanks Michael Tautschnig)
332 - fixes postfix warnings, closes: #461227
333 - fixes a typo in services/secure script, closes: #432118
334 - print arguments in case of failure executing cat (logwatch.pl),
335 closes: #428183
336 - ignore some more pam_unix lines in proftpd-messages, closes: #480761
337 * add patch by Justin Pryzby to fix an assignment instead of an regex
338 in the services/cron script, closes: #488737
339 * update to Standards-Version 3.8.0 (no changes)
340 * remove preinst script that was used in upgrades from sarge
341 * No longer override upstream detail level to medium, closes: #441144
342 * Fix lintian warning: homepage-in-description
343 * The cron script now explicitly mails to root
344
345 -- Willi Mann <willi@wm1.at> Fri, 04 Jul 2008 16:51:36 +0200
346
347 logwatch (7.3.6-1) unstable; urgency=low
348
349 * New upstream version:
350 - closes: #317388 "Unmatched entries in Postfix section"
351 - closes: #406084 "range examples are wrong ..."
352 - closes: #406411 "bind/named SERVFAIL != Query form disallowed client"
353 * Depend on exim4 rather than exim in debian/controls (closes: #420270)
354 * Add watch file (thanks to Clint Adams, closes: #420243)
355 * Use Homepage: instead of verbosity in Description (closes: #416488)
356 * Avoid using syslog for maillog services. This fixes double reports of
357 postfix, courier and maybe some others.
358 * Add patch that allows --mailto to take no email address. This is used in
359 the cron script. Do not rely on this, the print/encode options will
360 probably be changed in the next version.
361 * Add XS-Vcs-Svn and XS-Vcs-Browser to debian/control.
362 * No longer set DH_COMPAT in debian/rules, use debian/compat. (thanks to
363 lintian). Set compatibility to version 5 and depend on it.
364
365
366 -- Willi Mann <willi@wm1.at> Mon, 23 Apr 2007 11:46:23 +0200
367
368 logwatch (7.3.1-5) unstable; urgency=low
369
370 * Regression: fail2ban doesn't filter by date, thanks Yaroslav Halchenko
371 for notifying me. Also, the fail2ban.log.1 was missing from the Archives
372 definition. again closes: #399864
373
374 -- Willi Mann <willi@wm1.at> Sun, 3 Dec 2006 11:38:45 +0100
375
376 logwatch (7.3.1-4) unstable; urgency=low
377
378 * fail2ban updated, (for new fail2ban upstream and the log filename was wrong)
379 thanks Yaroslav Halchenko (closes: #399864)
380 * additional infos in README.Debian.
381
382 -- Willi Mann <willi@wm1.at> Tue, 28 Nov 2006 20:53:42 +0100
383
384 logwatch (7.3.1-3) unstable; urgency=medium
385
386 * Fixes concerning postfix reported by Andreas Beckmann (thanks):
387 - missing postfix logs (closes: #390741)
388 - ignore some logs in secure, concerning postfix related authentication
389 by modifying the config file for secure. (closes: #390743). The
390 nss-libmyql issue is not fixed. See
391 http://svn.debian.org/wsvn/pkg-logwatch/trunk/?rev=55&sc=1
392
393 -- Willi Mann <willi@wm1.at> Tue, 3 Oct 2006 08:47:47 +0200
394
395 logwatch (7.3.1-2) unstable; urgency=low
396
397 * Another unmatched line for secure.
398 * Recommend libdate-manip-perl.
399 * Change the logwatch warning when Date::Manip not available.
400 * Create the same directory structure in /etc as in the logwatch install
401 script.
402
403 -- Willi Mann <willi@wm1.at> Fri, 22 Sep 2006 11:50:25 +0200
404
405 logwatch (7.3.1-1) unstable; urgency=low
406
407 * New upstream release
408 - closes: #385032: some logging changes in postfix 2.3
409 - fail2ban scripts now included upstream
410 * Add parser for dpkg.log
411 * Some updates to debian/copyright
412 * Pull in patch from upstream for issues with subdirectories in logdirs.
413 * Created patches for secure, pam_unix, cron, openvpn, named, courier to
414 support some unmatched entries.
415 * Also, remove some redundant reporting for secure. This is logged in
416 pam_unix anyway.
417 * Improve the reporting in pam_unix to replace uids with names in two
418 places.
419
420 -- Willi Mann <willi@wm1.at> Sat, 16 Sep 2006 21:04:24 +0200
421
422 logwatch (7.3-2) unstable; urgency=low
423
424 * Update fail2ban script to recognise some more messages. Patch by
425 Yaroslav Halchenko.
426 * Update standards version to 3.7.2. No changes.
427 * Update debian/copyright
428 * Fix lintian warning build-depends-indep-should-be-build-depends debhelper.
429
430 -- Willi Mann <willi@wm1.at> Thu, 25 May 2006 17:37:58 +0200
431
432 logwatch (7.3-1) unstable; urgency=low
433
434 * New upstream release
435 - this should fix the reports about exim "Unmatched Entries".
436 closes: #298275.
437 * Add another unmatched entry for imapd - thanks again to Richard Burton
438 for the report. closes: #356815
439 * Add some unmatched lines for smartd.
440 * remove no longer needed debian-specific logfile definitions. merged
441 upstream.
442 * add fail2ban scripts from Yaroslav Halchenko. closes: #359177
443 * policy version 3.7.0.0, no changes
444
445 -- Willi Mann <willi@wm1.at> Sun, 19 Mar 2006 18:29:50 +0100
446
447 logwatch (7.2.1-2) unstable; urgency=low
448
449 * Set absolute path to sendmail in logwatch.conf
450 * MailFrom set to "root". The user "logwatch" may not exist and
451 cause problems.
452 * Add Unmatched line for imapd. closes: #352333, thanks to Richard Burton
453 for the report.
454 * Handle some unmatched lines for secure. closes: #355528, thanks again to
455 Richard Burton for the report.
456 * Drop the service-exim patch, it's no longer needed.
457
458 -- Willi Mann <willi@wm1.at> Sat, 11 Feb 2006 16:49:59 +0100
459
460 logwatch (7.2.1-1) unstable; urgency=low
461
462 * New upstream release
463 - Drop dependency on gawk
464 - Drop all patches except service-exim.diff, service-secure.diff
465 * Change DH_COMPAT from 3 to 4. Put ${misc:Depends} to Depends: in
466 debian/control.
467 * Support the string " (remote reception)" as additional part in sysklogd
468 restarts. closes: #348974, thanks to Richard Antony Burton for the report.
469 (new patch z-bug-348974.diff)
470 * Document how to get fortunes in ones favourite language.
471 * Change MTA to sendmail, change dependencies to exim | mail-transport-agent
472 * The logfiles/sonicwall.conf file included messages in its LogFile setting,
473 duplicating the whole messages logfile, and much earlier filing up the
474 root partition for busy sites. closes: #349328, thanks to Graham Cobb for
475 the report.
476 * Add new unrecognized line from su in secure. We ignore it, it's handled by
477 pam_unix anyway. thanks Richard Antony Burton for the report (no bug id)
478
479 -- Willi Mann <willi@wm1.at> Sat, 21 Jan 2006 13:34:03 +0100
480
481 logwatch (7.1-2) unstable; urgency=low
482
483 * Remove part of the cron patch, it was redundant.
484 * Workaround to preserve language environment for fortunes closes: #340903,
485 thanks to Benoit Dejean <benoit@placenet.org> for the report.
486 * Openvpn logs to daemon, the server uses ovpn-[^\s]* as name. (The simpler
487 form ovpn-\S* does not work, 'cause logwatch lowercases all conf options.)
488 closes: #341863, thanks to David Anselmi <anselmi@anselmi.us> for the
489 report.
490 * logfiles/daemon.conf didn't contain the calls to the appropriate logfile
491 scripts. closes: #343331, thanks to Arne Roolfs <aroolfs@gmx.de> for the
492 report.
493
494 -- Willi Mann <willi@wm1.at> Sun, 4 Dec 2005 10:53:37 +0100
495
496 logwatch (7.1-1) unstable; urgency=low
497
498 * New upstream release
499 - new standards version 3.6.2 (no changes)
500 - Closes: #317894, frequent typo "IngnoreUnmatched" in various scripts,
501 Closes: #317913, fixes in pure-ftpd
502 both fixes by Piotr Krukowiecki (thanks)
503 - Closes: #323919, regexes for http exploits did not escape "."
504 thanks to Taco IJsselmuiden for the report
505 * Cope with the new directory layout.
506 - There is a preinst script now, the removes unneeded config files.
507 - README.Debian updated
508 - NEWS.Debian added
509 - debian/rules updated
510 * This package is now maintained as project "pkg-logwatch" on
511 alioth.debian.org. The svn repository is on svn.debian.org.
512 * Depend on gawk, and explicity use it in zz-disk_space. Seems that there is
513 some GNUism.
514
515 -- Willi Mann <willi@wm1.at> Sat, 19 Nov 2005 16:39:24 +0100
516
517 logwatch (6.1.2-1) unstable; urgency=low
518
519 * New upstream release
520 * Provide a script that removes "dead" service configuration files.
521 Located at /usr/share/doc/logwatch/examples/. closes: #310504
522 * Some updates to README.Debian.
523 * Update the copyright file.
524
525 -- Willi Mann <willi@wm1.at> Wed, 15 Jun 2005 16:06:55 +0200
526
527 logwatch (6.1.1-1) unstable; urgency=low
528
529 * New upstream release
530 - New format for specifying the format of http Logformat (it's possible
531 that we lose debian apache1 support)
532 * Ignore some cyrus lines (patch submitted by Tommy <mtommy@usa.net>)
533
534 -- Willi Mann <willi@wm1.at> Thu, 9 Jun 2005 21:48:56 +0200
535
536 logwatch (6.1-1) unstable; urgency=low
537
538 * New upstream release
539 * Drop Recommends on libtie-ixhash-perl, libdate-calc-perl. services/exim
540 no longer needs them.
541 * Ignore two unknown entries in services/secure.
542 (pam_authenticate, - pts). They are done in services/pam_unix.
543
544 -- Willi Mann <willi@wm1.at> Wed, 8 Jun 2005 15:18:27 +0200
545
546 logwatch (6.0.2-1) experimental; urgency=low
547
548 * New upstream release
549 - Many patches were applied upstream
550 * Remove the Makefile, do that job in debian/rules.
551
552 -- Willi Mann <willi@wm1.at> Sat, 30 Apr 2005 16:02:53 +0200
553
554 logwatch (6.0.1-1) experimental; urgency=low
555
556 * New upstream release (closes: #302423)
557 - Dropped many patches that were applied upstream.
558 - gawk is no longer needed for sendmail-largeboxes
559 (changes in README.Debian and control)
560 - some patch porting in sshd.
561 * fixes from 5.2.2-5 and 5.2.2-6:
562 - services/http:
563 + Support .html.language-ext html files. (Bug: #303345, thanks to
564 Klaus Ethgen <Klaus@Ethgen.de> for the report and the fix)
565 + Add support for "/sqwebmail".
566 - Accept more chars in usernames in services/sudo script (Bug: #302132,
567 thanks to Richard Mortimer <richm@esblimited.co.uk>)
568 * Add perl header "#!/usr/bin/perl" at the top of every executeable perl
569 script. The code is in the Makefile. Don't know why upstream removed it.
570
571 -- Willi Mann <willi@wm1.at> Mon, 21 Mar 2005 20:39:45 +0100
572
573 logwatch (5.2.2-4) unstable; urgency=medium
574
575 * Reformat README.Debian.
576 * Add info to README.Debian how to get correct http output when using
577 default apache1 configuration as LogFormat. Add the apache1 default
578 LogFormat as alternative to conf/services/http.conf. (Closes: #293115,
579 thanks to Vic Gedris <debian_bugs@gedris.org>)
580 * Make the smartd service (smartmontools) working. It's logging to
581 daemon.log, not to messages. (Closes: #295234, thanks to
582 Piotr Krukowiecki <piotrwww@krukowiecki.net>)
583 * Set LC_ALL=C in the main logwatch script. (closes: #296979, thanks to
584 Gilmar Junior <gilmar_santos_jr-geral@yahoo.com.br>
585 * Fix logfiles/http.conf. All events were logged twice.
586 * Correct logfiles/{daemon,http,maillog,secure}.conf to always include the
587 first rotated logfile. (So no need to use --archives for full accuracy for
588 reports of range "yesterday"). Otherwise some events might get lost. Some
589 other logfile configurations should also get corrected but I can't verify
590 them because I don't have the services running.
591
592 -- Willi Mann <willi@wm1.at> Wed, 16 Feb 2005 19:43:30 +0100
593
594 logwatch (5.2.2-3) unstable; urgency=medium
595
596 * Include HOWTO-Make-Filter (closes: #287165)
597 * Patches from Piotr Krukowiecki <piotrwww@krukowiecki.net>:
598 - One line to postfix ("starting TLS engine")
599 - One modification to samba ("*initially* as user") (closes: #289073)
600 * Move binary building from binary-arch to binary-indep (finally)
601 * s/_/./ in conf/logfiles/http.conf to make it work with apache1
602 * Syslogd now gets feeded by syslog logfile, not messages.
603 * Added a kernel logfile group (kern.log), and the kernel script now
604 uses this instead of messages.
605 (thanks to Petr Stehlik <pstehlik@sophics.cz> for the last three
606 suggested enhancements, closes: #287963)
607 * Added short info how to modify a filter to README.Debian
608 * Consider space in the postfix logs (closes: #289074, thanks to
609 Alex Satrapa <alex.satrapa@apf.edu.au>)
610 * Fix two lintian warnings concerning the synopsis part of the
611 package description. (Remove the "A ")
612
613 -- Willi Mann <willi@wm1.at> Sat, 25 Dec 2004 10:09:58 +0100
614
615 logwatch (5.2.2-2) unstable; urgency=high
616
617 * Enhance description, fix some typos and spelling mistakes.
618 * Fix zz-disk_space for very long device names: Use POSIX output to ensure
619 that there's always one line per mount point and the grep works correctly.
620 (closes: #278816, thanks to Kees van Vloten <kvv@chopin.demon.nl>)
621 * Small fixes to the courier script.
622 - Don't print newline if nothing else is printed.
623 - add -ssl for pop3d and imap (closes: #278680, thanks to Wayne Davison
624 <wayned@users.sourceforge.net>)
625 * Change title of courier reports to "courier mail services".
626 * Cleanups and fixes for the logfiles configuration files:
627 - fix and remove Archive lines.
628 - fix http.conf for debian
629 - consistency fixes
630 mostly reported by Simon Schoar <simon@schoar.de>, closes: #280164
631 * two minor enhancements/fixes to named reporting. (Unmatched Entries)
632 * support "not in AllowUsers" log line in sshd.
633
634 -- Willi Mann <willi@wm1.at> Sat, 23 Oct 2004 11:05:32 +0200
635
636 logwatch (5.2.2-1) unstable; urgency=low
637
638 * New upstream release (Closes: #261275)
639 * Completely remove su reporting from secure
640 + other minor changes in secure.
641 * Update copyright file.
642 * Add support for kcheckpass to pam_unix (which I've seen for
643 unlocking the screen saver)
644 * Remove the unneccessary part "first accept valid lines" from pam_unix.
645 * Other small changes to pam_unix.
646 * Make clam-update working.
647 * Big rewrite of the courier script (and courier.conf).
648 It's now under GPL.
649 * Recommend gawk, but don't print stupid error message if it doesn't exist
650 (exit the script), and add info to README.Debian about that. (The affected
651 service was sendmail-largeboxes)
652 * Get rid of some unmatched entries in cron
653 * Fix for parsing postfix 2.1.4. ("Client Host") (closes: #275051, thanks to
654 Wayne Davison <wayned@users.sourceforge.net>)
655
656 -- Willi Mann <willi@wm1.at> Fri, 3 Sep 2004 09:20:58 +0200
657
658 logwatch (5.1-6) unstable; urgency=medium
659
660 Urgency medium because of wrong copyright file currently in sarge.
661
662 * Correct copyright file.
663 * Fix the service extraction in pam_unix for woody.
664 * exim filter:
665 - Fix some problems with the exim service script and the
666 logfile config file.
667 - include information in Readme.Debian about the required packages
668 for the exim script.
669 (closes: #260056, thanks to James Clendenan for the report.)
670 * Fix reporting of samba in pam_unix.
671 * Throw out some unneeded lines in debian/rules.
672
673 -- Willi Mann <willi@wm1.at> Mon, 21 Jun 2004 22:50:52 +0200
674
675 logwatch (5.1-5) unstable; urgency=medium
676
677 Urgency medium because non-working cron-reporting should go away from
678 testing as fast as possible.
679
680 * Fix cron-script /usr/bin -> /usr/sbin. (closes: #253859, thanks to
681 Ian MacDonald). Forgot to list that change in previous changelog.
682 * Fix (the first really upstream?) bug in logwatch: A small mistake
683 in sshd-reporting. (thanks to Manabu Matsui, closes: #254968)
684 * Don't report pam_unix in SSHD.
685 * Fix a pam_unix -line for su.
686 * Don't report pam_limits in secure.
687
688 -- Willi Mann <willi@wm1.at> Sat, 12 Jun 2004 12:07:42 +0200
689
690 logwatch (5.1-4) unstable; urgency=low
691
692 * Fix typo in Description, thanks to Gustavo Franco (closes: #247497)
693 * Fix pam_unix reporting. It seems that pam has changed. Maybe I need
694 script that warns me when the log-format of pam_unix-entries changes...
695 thanks for reporting Klaus Ethgen. (closes: #247257)
696 * Handle some previously unmatched lines in secure. Added temporary hack
697 to have a nice output until I can fix #239626.
698 * Add syslog.0 as logfile to syslog.conf because syslog is rotated daily,
699 so I would never see cron-reporting if I use logwatch from
700 command-line (helps development).
701 + Move symlink to main script from /usr/bin -> /usr/sbin. Fixes a lintian
702 warning. (This changelog entry was added after the package has been
703 uploaded.)
704
705 -- Willi Mann <willi@wm1.at> Wed, 5 May 2004 19:47:35 +0200
706
707 logwatch (5.1-3) unstable; urgency=low
708
709 * I'm not from marketing: proper upstream homepage url:
710 www... -> http://www...
711 * Don't report PAM_unix lines in secure: support for woody. thanks to
712 Michael Stovenour for the report (closes: #239626)
713 * Added fortune-mod to Suggests.
714 * Removed some lines which were already commented out.
715
716 -- Willi Mann <willi@wm1.at> Mon, 15 Mar 2004 21:31:39 +0100
717
718 logwatch (5.1-2) unstable; urgency=low
719
720 * Verify in the cron script that logwatch is really installed
721 (not removed-but-not-purged)
722 * Set standards-version to 3.6.1.0 instead of 3.6.1 to exactly match
723 the current version.
724 * Make reporting of syslogd - restarts working again
725 * Force permissions of all *.confs to 0644 using find
726 * logfile-group maillog now uses mail.log instead of mail.err, mail.info,
727 mail.warn to avoid possible double-reporting
728 * Avoid calling the target install of Makefile twice
729
730 -- Willi Mann <willi@wm1.at> Wed, 11 Feb 2004 23:29:08 +0100
731
732 logwatch (5.1-1) unstable; urgency=low
733
734 * New upstream release 5.1
735 * Make cron reporting working again. It's the only service that
736 only logs to the syslog logfile.
737
738 -- Willi Mann <willi@wm1.at> Wed, 4 Feb 2004 20:18:37 +0100
739
740 logwatch (5.0+5.1pre1-2) unstable; urgency=low
741
742 * Force permissions of all scripts to 0755
743
744 -- Willi Mann <willi@wm1.at> Mon, 2 Feb 2004 11:36:38 +0100
745
746 logwatch (5.0+5.1pre1-1) unstable; urgency=low
747
748 * Bump to pre5.1
749 * Revert some changes, that turned out not to be neccessary.
750 * Changed description
751
752 -- Willi Mann <willi@wm1.at> Sun, 1 Feb 2004 23:44:03 +0100
753
754 logwatch (5.0-2) unstable; urgency=low
755
756 * Fix permission of /etc/logwatch/conf/services/pureftpd.conf by chmod in
757 Makefile.
758 * Make more services work (see state_of_debianizing).
759
760
761 -- Willi Mann <willi@wm1.at> Wed, 14 Jan 2004 17:30:12 +0100
762
763 logwatch (5.0-1) unstable; urgency=low
764
765 * Initial Release.
766 * Reporting for many services should work, including cron, ssh, courier,
767 exim.
768 * Please report bugs. If a particular service has no output, I need the path
769 to the logfile(s). That's most likely the problem.
770
771 -- Willi Mann <willi@wm1.at> Wed, 12 Nov 2003 20:14:15 +0100
0 Source: logwatch
1 Section: admin
2 Priority: optional
3 Maintainer: Willi Mann <willi@debian.org>
4 Build-Depends: debhelper (>> 11.0.0~)
5 Standards-Version: 4.5.0
6 Homepage: https://sourceforge.net/projects/logwatch/
7 Vcs-Browser: https://salsa.debian.org/debian/logwatch
8 Vcs-Git: https://salsa.debian.org/debian/logwatch.git
9
10 Package: logwatch
11 Architecture: all
12 Depends: ${perl:Depends}, ${misc:Depends}, default-mta | mail-transport-agent
13 Recommends: libdate-manip-perl, libsys-cpu-perl, libsys-meminfo-perl
14 Description: log analyser with nice output written in Perl
15 Logwatch is a modular log analyser that runs every night
16 and mails you the results. It can also be run from command line.
17 .
18 The output is by service and you can limit the output to one particular
19 service. The subscripts which are responsible for the output, mostly
20 convert the raw log lines in structured format.
21 .
22 Logwatch generally ignores the time component in the output, that means,
23 you will know that the reported event was logged in the requested range of
24 time, but you will have to go to the raw log files to get the exact details.
25
0 This package was debianized by Willi Mann <willi@wm1.at> on
1 Wed, 12 Nov 2003 20:14:15 +0100.
2
3 The last released version was downloaded from
4 ftp://ftp.kaybee.org/pub/linux/logwatch-7.3.6.tar.gz
5
6 Logwatch consists of many individual scripts. Many of them were written by
7 Kirk Bauer <kirk@kaybee.org>, who is also one of the maintainers of logwatch
8 and deserves the credit for initiating this project.
9
10 copyright holders
11 -----------------
12
13 Copyright © 2004, Sparta, Inc
14 Copyright © 2005-2006 Mike Tremaine
15 Copyright © 2008 Anders Blomdell
16 Copyright © 2008 Andy Bolstridge
17 Copyright © 2008 Benjamin Baudoux
18 Copyright © 2008 Bob Hendry
19 Copyright © 2008 Bob Hutchinson
20 Copyright © 2008 Chris Smith
21 Copyright © 2008 Colin Smith
22 Copyright © 2008 Daniel Barrett
23 Copyright © 2008 David Baldwin
24 Copyright © 2008 Eric Moret
25 Copyright © 2008 Gary Allen Vollink
26 Copyright © 2008 Hugo van der Kooij
27 Copyright © 2008 Jaco Botha
28 Copyright © 2008 Jeff Frost
29 Copyright © 2008 Jim Richardson
30 Copyright © 2008 Kenneth Porter
31 Copyright © 2008 Kirk Bauer
32 Copyright © 2008 Lars Skjærlund
33 Copyright © 2008 Laurent Dufour
34 Copyright © 2008 Laurent DUFOUR
35 Copyright © 2008 Michael Romeo
36 Copyright © 2008 Mike Tremaine
37 Copyright © 2008 Orion Poplawski
38 Copyright © 2008 Osma Ahvenlampi
39 Copyright © 2008 Patrick Vande Walle
40 Copyright © 2008 Paweł Gołaszewski
41 Copyright © 2008 Pawel Jarosz
42 Copyright © 2008 Simon Liddington
43 Copyright © 2008 S. Schimkat
44 Copyright © 2008 Sven Conrad
45 Copyright © 2008 Sy Beamont
46 Copyright © 2008 William Roumier
47 Copyright © 2008 Willi Mann
48 Copyright © 2008 Win Bent
49 Copyright © 2008 Yaroslav Halchenko
50 Copyright © 2006,2007 Mike Cappella
51
52 Licenses:
53 ---------
54
55 Except for a few scripts, logwatch is distributed under the permissive
56 X11 license.
57
58 The exceptions:
59
60 scripts/services/dnssec: 3-clause BSD (Sparta)
61 scripts/services/resolver: 3-clause BSD (Sparta)
62 scripts/shared/applybinddate: 3-clause BSD (Sparta)
63
64 Text of the licenses:
65 ---------------------
66
67 X11 license:
68
69 -BEGIN LICENSE --
70 Permission is hereby granted, free of charge, to any person obtaining a copy of
71 this software and associated documentation files (the "Software"), to deal in
72 the Software without restriction, including without limitation the rights to
73 use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies
74 of the Software, and to permit persons to whom the Software is furnished to do
75 so, subject to the following conditions:
76
77 The above copyright notice and this permission notice shall be included in all
78 copies or substantial portions of the Software.
79
80 THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
81 IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
82 FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
83 AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
84 LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
85 OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
86 SOFTWARE.
87 --END LICENSE--
88
89 3-clause BSD (Sparta):
90
91 --BEGIN LICENSE--
92 Redistribution and use in source and binary forms, with or without
93 modification, are permitted provided that the following conditions are met:
94
95 * Redistributions of source code must retain the above copyright notice,
96 this list of conditions and the following disclaimer.
97
98 * Redistributions in binary form must reproduce the above copyright
99 notice, this list of conditions and the following disclaimer in the
100 documentation and/or other materials provided with the distribution.
101
102 * Neither the name of Sparta, Inc nor the names of its contributors may
103 be used to endorse or promote products derived from this software
104 without specific prior written permission.
105
106 THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS ``AS
107 IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
108 THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
109 PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDERS OR
110 CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,
111 EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO,
112 PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS;
113 OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
114 WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR
115 OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF
116 ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
117 --END LICENSE--
0 usr/sbin
0 LogFile = cron.log
1 Archive =
2 Archive = cron.log.*
0 # Debian bug #612634: new rotation uses .1 as first uncompressed extension
1 # should be added to default daemon.conf
2 LogFile = daemon.log.1
0 # Debian bug #612634: new rotation uses .1 as first uncompressed extension
1 # should be added to default kernel.conf
2 LogFile = kern.log.1
0 # Note that we have to override the default logwatch configuration,
1 # because in Debian, syslog receives the same messages as mail.log,
2 # so we would otherwise report each event twice
3 LogFile =
4 LogFile = mail.log
5 LogFile = mail.log.0
6 LogFile = mail.log.1
7
8 Archive =
9 Archive = mail.log.*.gz
0 # Debian bug #612634: new rotation uses .1 as first uncompressed extension
1 # should be added to default secure.conf
2 # This could also be changing the Archive auth.log.*.gz > auth.log.*
3 LogFile = auth.log.1
0 # Debian bug #612634: new rotation uses .1 as first uncompressed extension
1 # should be added to default syslog.conf
2 LogFile = syslog.1
0 mailer = "/usr/sbin/sendmail -t"
1 TmpDir = /tmp
2 MailFrom = root
0 LogFile = syslog
1 *OnlyService = (CRON|cron|CROND|\/USR\/SBIN\/CRON|\/usr\/sbin\/cron)
2
0 LogFile =
1 LogFile = kernel
0 LogFile =
1 LogFile = daemon
0 LogFile =
1 LogFile = daemon
2 *MultiService = openvpn,ovpn-[^\s]*
3 *RemoveHeaders
0 LogFile =
1 LogFile = secure
0 LogFile =
1 LogFile = daemon
0 LogFile =
1 LogFile = daemon
0 Logfile =
1 LogFile = syslog
2 *OnlyService = syslogd
3 *RemoveHeaders
4 #TODO: fix onlyservice
0 README
1 HOWTO-Customize-LogWatch
0 #!/bin/bash
1 set -e
2 set -o pipefail
3
4 # call as ./build_tar.sh $path_to_local_git_repo $last_upstream_version_number
5
6 UPSDIR=$1
7 VERSION=$2
8
9 test -d "$UPSDIR" || ( echo "No upstream directory"; exit 1 )
10 test -z "$VERSION" && ( echo "No Version"; exit 1 )
11
12 CURDIR=$PWD
13
14 #Determine GIT repositories' state
15 cd $UPSDIR
16 DATE=$( git log --pretty="%ci" HEAD^..HEAD | awk '{print $1}' | sed -e 's/-//g' )
17 cd $CURDIR
18
19 tmpdir=$(mktemp --tmpdir -d logwatch.XXXXXXX)
20 logwatch_dir=logwatch-$VERSION+git${DATE}
21 target_dir=$tmpdir/$logwatch_dir
22
23 mkdir -p $target_dir
24
25 rsync -av --exclude=.svn --exclude=.git $UPSDIR/ $target_dir
26
27 tar -C $tmpdir -cavf $logwatch_dir.tar.xz $logwatch_dir
28
29
30
31
32
33
34
0 #!/bin/bash
1
2 #Check if removed-but-not-purged
3 test -x /usr/share/logwatch/scripts/logwatch.pl || exit 0
4
5 #execute
6 /usr/sbin/logwatch --output mail
7
8 #Note: It's possible to force the recipient in above command
9 #Just pass --mailto address@a.com instead of --output mail
0 usr/share/logwatch/scripts/logwatch.pl usr/sbin/logwatch
0 logwatch.8
1 logwatch.conf.5
2 postfix-logwatch.1
3 amavis-logwatch.1
0 From: Willi Mann <willi@wm1.at>
1 Date: Sat, 13 Aug 2011 14:26:39 +0200
2 Subject: 00-debspecific-disable-su-reporting-in-secure.diff
3
4 ---
5 scripts/services/secure | 6 +++---
6 1 file changed, 3 insertions(+), 3 deletions(-)
7
8 diff --git a/scripts/services/secure b/scripts/services/secure
9 index 769356a..079f0d4 100644
10 --- a/scripts/services/secure
11 +++ b/scripts/services/secure
12 @@ -353,11 +353,11 @@ while (defined($ThisLine = <STDIN>)) {
13 } elsif ($ThisLine =~ /^pam_pwdfile\[\d+\]: password too short or NULL/) {
14 $pwd_file_too_short++;
15 } elsif ( ($User,$Su) = ($ThisLine =~ /^su: ([^ ]+) to ([^ ]+) on \/dev\/ttyp([0-9a-z]+)/) ) {
16 - $Su_User{$User}{$Su}++;
17 + #$Su_User{$User}{$Su}++; #disabled for debian: reported in pam_unix
18 } elsif ( ($Su,$User) = ($ThisLine =~ /^su: \(to ([^ ]+)\) ([^ ]+) on (?:none|\/dev\/(pts\/|ttyp)([0-9]+))/) ) {
19 - $Su_User{$User}{$Su}++;
20 + #$Su_User{$User}{$Su}++; # -|-
21 } elsif ( ($Su,$User) = ($ThisLine =~ /^su\[\d+\]: Successful su for (\S+) by (\S+)/) ) {
22 - $Su_User{$User}{$Su}++;
23 + #$Su_User{$User}{$Su}++; # -|-
24 } elsif ($ThisLine =~ /^userhelper\[\d+\]: running '([^']+)' with ([^']+) privileges on behalf of '([^']+)'/) {
25 $Executed_app{"$1,$2,$3"}++;
26 } elsif ($ThisLine =~ /^polkitd\[\d+\]: Operator of unix-process:\d+:\d+ successfully authenticated as unix-user:([^ ]+) to gain ONE-SHOT authorization for action org\.freedesktop\..* for system-bus-name::[\d.]+ \[([^\]]*)\] \(owned by unix-user:(\w+)\)/) {
0 From: Willi Mann <willi@wm1.at>
1 Date: Sat, 26 Jul 2014 19:23:44 +0200
2 Subject: logfiles/vsftpd.conf: Use custom pattern for applystddate
3
4 This fixes a problem where old logfiles from one year ago where included in
5 the report again.
6
7 Closes: #682036
8 ---
9 conf/logfiles/vsftpd.conf | 2 +-
10 1 file changed, 1 insertion(+), 1 deletion(-)
11
12 diff --git a/conf/logfiles/vsftpd.conf b/conf/logfiles/vsftpd.conf
13 index 56cde60..f32f373 100644
14 --- a/conf/logfiles/vsftpd.conf
15 +++ b/conf/logfiles/vsftpd.conf
16 @@ -22,5 +22,5 @@ Archive = archiv/vsftpd.log.*
17 Archive = vsftpd.log-*
18 Archive = archiv/vsftpd.log-*
19
20 -*ApplyStdDate =
21 +*ApplyStdDate = "... %b %d %H:%M:%S %Y"
22 # vi: shiftwidth=3 tabstop=3 et
0 From: Willi Mann <willi@debian.org>
1 Date: Tue, 2 Oct 2018 09:50:35 +0200
2 Subject: Ignore ecryptfs automounting messages in cron
3
4 Bug-Debian: https://bugs.debian.org/862337
5 ---
6 scripts/services/cron | 3 ++-
7 1 file changed, 2 insertions(+), 1 deletion(-)
8
9 diff --git a/scripts/services/cron b/scripts/services/cron
10 index 869b515..7b04ffc 100644
11 --- a/scripts/services/cron
12 +++ b/scripts/services/cron
13 @@ -50,7 +50,8 @@ while (defined($ThisLine = <STDIN>)) {
14 ($ThisLine =~ /void Inotify::Remove\(InotifyWatch\*\): removing watch failed/) or
15 ($ThisLine =~ /error: \(22\) Invalid argument/) or
16 ($ThisLine =~ /pam_unix\(crond:session\): session (?:opened|closed) for user/) or
17 - ($ThisLine =~ /PAM pam_end: NULL pam handle passed/)
18 + ($ThisLine =~ /PAM pam_end: NULL pam handle passed/) or
19 + ($ThisLine =~ /Signature not found in user keyring|Perhaps try the interactive/)
20 ) {
21 # Ignore
22 } elsif (
0 From: Willi Mann <willi@debian.org>
1 Date: Tue, 2 Oct 2018 10:36:31 +0200
2 Subject: scripts/mdadm: Fix parsing of mdadm.conf, handle "<ignore>"
3
4 Bug-Debian: https://bugs.debian.org/907319
5 ---
6 scripts/services/mdadm | 7 +++++--
7 1 file changed, 5 insertions(+), 2 deletions(-)
8
9 diff --git a/scripts/services/mdadm b/scripts/services/mdadm
10 index d4a348c..6ac5cfc 100644
11 --- a/scripts/services/mdadm
12 +++ b/scripts/services/mdadm
13 @@ -38,8 +38,11 @@ if ( -f "/etc/mdadm.conf" ) {
14 open(MDADM,"mdadm --detail --scan 2>/dev/null|");
15 }
16 while (<MDADM>) {
17 - if (/^ARRAY/) {
18 - push(@devices,(split())[1]);
19 + if (/^ARRAY\s/) {
20 + my $dev = (split())[1];
21 + unless($dev =~ /^<ignore>$/i) {
22 + push(@devices, $dev);
23 + }
24 }
25 }
26 close(MDADM);
0 0001-00-debspecific-disable-su-reporting-in-secure.diff.patch
1 0002-logfiles-vsftpd.conf-Use-custom-pattern-for-applystd.patch
2 0003-Ignore-ecryptfs-automounting-messages-in-cron.patch
3 0004-scripts-mdadm-Fix-parsing-of-mdadm.conf-handle-ignor.patch
0 #!/usr/bin/make -f
1 # Sample debian/rules that uses debhelper.
2 # GNU copyright 1997 to 1999 by Joey Hess.
3
4 # Uncomment this to turn on verbose mode.
5 #export DH_VERBOSE=1
6
7 export DESTDIR=$(CURDIR)/debian/logwatch
8
9 SHELL=/bin/bash
10 LOGDIR=$(DESTDIR)/etc/logwatch
11 SHAREDIR=$(DESTDIR)/usr/share/logwatch
12 LOGWATCHPL=$(SHAREDIR)/scripts/logwatch.pl
13
14 %:
15 dh $@
16
17 override_dh_install:
18
19 # Add here commands to install the package into debian/logwatch.
20 mkdir -p $(LOGDIR)
21 mkdir -p $(LOGDIR)/conf
22 mkdir -p $(LOGDIR)/conf/logfiles
23 mkdir -p $(LOGDIR)/conf/services
24 mkdir -p $(LOGDIR)/scripts
25 mkdir -p $(LOGDIR)/scripts/services
26
27 # Remove "update" files
28 # find $(LOGDIR) -name "*.orig" -or -name "*.rej" -exec rm -f {} \;
29
30 mkdir -p $(SHAREDIR)
31 cp -a scripts/ $(SHAREDIR)
32 cp -a lib/ $(SHAREDIR)
33
34 mkdir -p $(SHAREDIR)/default.conf
35 cp -a conf/* $(SHAREDIR)/default.conf
36
37 mkdir -p $(SHAREDIR)/dist.conf
38 cp -a debian/dist.conf/* $(SHAREDIR)/dist.conf
39
40 # Move dist.conf files to default.conf in case they are missing there
41 for i in `find $(SHAREDIR)/dist.conf/ -type f`; do \
42 if [ ! -f $(SHAREDIR)/default.conf/$${i##$(SHAREDIR)/dist.conf/} ]; then \
43 mv $$i $(SHAREDIR)/default.conf/$${i##$(SHAREDIR)/dist.conf/}; \
44 fi \
45 done
46
47 # Fix permissions of scripts
48 chmod -R 0755 $(SHAREDIR)/scripts
49
50 mkdir -p $(DESTDIR)/usr/sbin
51
52 #Ensure all configuration files have 0644
53 find $(SHAREDIR)/ -name "*.conf" -type f -exec chmod 0644 {} \;
54
55 # Add #!/usr/bin/perl at the top of the scripts (mainly for debugging and avoiding lintian warnings)
56 for i in `find $(SHAREDIR)/scripts -type f `; do head -n1 $$i | grep -q '^#!/usr/bin/perl$$' || sed -e '1i #!/usr/bin/perl' -e '/#!\/usr\/bin\/perl -T/d' --in-place $$i;done
57
58 VERSION=$$(dpkg-parsechangelog -c1 -ldebian/changelog | grep "^Version" | grep git); \
59 if [ ! -z "$$VERSION" ]; then \
60 VERSION=$$( echo $$VERSION | perl -pe 's|.*git20(\d{2})(\d{2})(\d{2}).*|$$2/$$3/$$1|'); \
61 perl -pi -e "s|^(my .VDate = .)\d{2}/\d{2}/\d{2}(.;.*)|\$${1}$$VERSION\$$2|" $(LOGWATCHPL); \
62 fi
63
64
65 # Remove empty directories
66 find $(SHAREDIR) -depth -type d -empty -exec rmdir {} \;
67
68 override_dh_installcron:
69 dh_installcron --name=00logwatch
70
0 3.0 (quilt)
0 # Watch file by Clint Adams
1 version=3
2 https://sf.net/logwatch/logwatch-(.+)\.tar\.gz debian uupdate
3
4