From owner-freebsd-ports-bugs@FreeBSD.ORG Thu Apr 17 10:10:01 2008 Return-Path: Delivered-To: freebsd-ports-bugs@hub.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id BB3191065673 for ; Thu, 17 Apr 2008 10:10:01 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:4f8:fff6::28]) by mx1.freebsd.org (Postfix) with ESMTP id 97D6E8FC15 for ; Thu, 17 Apr 2008 10:10:01 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (gnats@localhost [127.0.0.1]) by freefall.freebsd.org (8.14.2/8.14.2) with ESMTP id m3HAA1wE098605 for ; Thu, 17 Apr 2008 10:10:01 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.14.2/8.14.1/Submit) id m3HAA1X7098604; Thu, 17 Apr 2008 10:10:01 GMT (envelope-from gnats) Resent-Date: Thu, 17 Apr 2008 10:10:01 GMT Resent-Message-Id: <200804171010.m3HAA1X7098604@freefall.freebsd.org> Resent-From: FreeBSD-gnats-submit@FreeBSD.org (GNATS Filer) Resent-To: freebsd-ports-bugs@FreeBSD.org Resent-Reply-To: FreeBSD-gnats-submit@FreeBSD.org, Cezary Morga Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 8E1C2106564A for ; Thu, 17 Apr 2008 10:08:52 +0000 (UTC) (envelope-from nobody@FreeBSD.org) Received: from www.freebsd.org (www.freebsd.org [IPv6:2001:4f8:fff6::21]) by mx1.freebsd.org (Postfix) with ESMTP id 7D7078FC24 for ; Thu, 17 Apr 2008 10:08:52 +0000 (UTC) (envelope-from nobody@FreeBSD.org) Received: from www.freebsd.org (localhost [127.0.0.1]) by www.freebsd.org (8.14.2/8.14.2) with ESMTP id m3HA8eTH090908 for ; Thu, 17 Apr 2008 10:08:40 GMT (envelope-from nobody@www.freebsd.org) Received: (from nobody@localhost) by www.freebsd.org (8.14.2/8.14.1/Submit) id m3HA8evv090897; Thu, 17 Apr 2008 10:08:40 GMT (envelope-from nobody) Message-Id: <200804171008.m3HA8evv090897@www.freebsd.org> Date: Thu, 17 Apr 2008 10:08:40 GMT From: Cezary Morga To: freebsd-gnats-submit@FreeBSD.org X-Send-Pr-Version: www-3.1 Cc: Subject: ports/122842: Update port: security/logcheck Update to version 1.2.54 by Debian team X-BeenThere: freebsd-ports-bugs@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Ports bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 17 Apr 2008 10:10:01 -0000 >Number: 122842 >Category: ports >Synopsis: Update port: security/logcheck Update to version 1.2.54 by Debian team >Confidential: no >Severity: non-critical >Priority: low >Responsible: freebsd-ports-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: change-request >Submitter-Id: current-users >Arrival-Date: Thu Apr 17 10:10:01 UTC 2008 >Closed-Date: >Last-Modified: >Originator: Cezary Morga >Release: FreeBSD 6.3-STABLE i386 >Organization: therek.net >Environment: FreeBSD magicelf.therek.net 6.3-STABLE FreeBSD 6.3-STABLE #0: Sun Jan 20 12:20:14 CET 2008 root@magicelf.therek.net:/usr/obj/usr/src/sys/MAGICELF i386 >Description: The application had been rewritten by the Debian Logcheck Team in Bash/Perl. Logcheck behaviour had been changed from the version available in ports: now it sends e-mail with the non-typical log entries (apart from available definitions user can create local rulesets for ignore lists) as well as log entries matching typical cracking/violations attempts. >How-To-Repeat: >Fix: Patch attached with submission follows: # This is a shell archive. Save it in a file, remove anything before # this line, and then unpack it by entering "sh file". Note, it may # create directories; files and directories will be owned by you and # have default permissions. # # This archive contains: # # logcheck # logcheck/Makefile # logcheck/distinfo # logcheck/files # logcheck/files/patch-logcheck # logcheck/files/patch-logcheck.conf # logcheck/files/patch-logcheck.cron.d # logcheck/files/pkg-message.in # logcheck/files/pkg-install.in # logcheck/files/pkg-deinstall.in # logcheck/pkg-descr # logcheck/pkg-plist # echo c - logcheck mkdir -p logcheck > /dev/null 2>&1 echo x - logcheck/Makefile sed 's/^X//' >logcheck/Makefile << 'END-of-logcheck/Makefile' X# Ports collection makefile for: logcheck X# Date created: 9 December 1999 X# Whom: Dan Langille X# X# $FreeBSD: ports/security/logcheck/Makefile,v 1.19 2006/05/13 04:15:06 edwin Exp $ X# X XPORTNAME= logcheck XPORTVERSION= 1.2.54 XPORTREVISION= 1 XCATEGORIES= security XMASTER_SITES= ftp://ftp.debian.org/debian/pool/main/l/logcheck/ \ X http://ftp.de.debian.org/debian/pool/main/l/logcheck/ XDISTNAME= ${PORTNAME}_${PORTVERSION} X XMAINTAINER= cm@therek.net XCOMMENT= Auditing tool for system logs on Unix boxes X XBUILD_DEPENDS= docbook-to-man:${PORTSDIR}/textproc/docbook-to-man XRUN_DEPENDS= lockfile:${PORTSDIR}/mail/procmail \ X bash:${PORTSDIR}/shells/bash \ X perl:${PORTSDIR}/lang/perl5 X XWRKSRC= ${WRKDIR}/${PORTNAME}-${PORTVERSION} XBINMODE= 755 XSHAREMODE= 640 XSUB_FILES= pkg-install pkg-deinstall pkg-message XCONFIG_DIRS= cracking.d ignore.d.paranoid ignore.d.server \ X ignore.d.workstation violations.d violations.ignore.d XDOCS= AUTHORS CHANGES CREDITS LICENSE TODO XMAN8= logcheck.8 logtail.8 X Xdo-build: X ${REINPLACE_CMD} -e 's!/var/log/syslog!/var/log/messages!' \ X ${WRKSRC}/etc/logcheck.logfiles X ${REINPLACE_CMD} -e 's!/etc/logcheck!/usr/local/etc/logcheck!' \ X -e 's!/usr/share/doc/logcheck-database/README.logcheck-database.gz!${DOCSDIR}/README.logcheck-database!' \ X ${WRKSRC}/docs/logcheck.sgml X docbook-to-man ${WRKSRC}/docs/logcheck.sgml > ${WRKSRC}/docs/logcheck.8 X Xdo-install: X ${INSTALL_SCRIPT} ${WRKSRC}/src/logcheck ${PREFIX}/sbin X ${INSTALL_SCRIPT} ${WRKSRC}/src/logtail ${PREFIX}/sbin X @PREFIX=${PREFIX} ${SH} ${PKGINSTALL} ${PKGNAME} PRE-INSTALL X @${MKDIR} /var/lib/logcheck X @${MKDIR} /var/run/logcheck X ${CHOWN} logcheck:logcheck /var/lib/logcheck X ${CHOWN} logcheck:logcheck /var/run/logcheck X @${MKDIR} ${ETCDIR} X @${INSTALL_DATA} ${WRKSRC}/etc/logcheck.conf ${ETCDIR}/logcheck.conf.sample X @${INSTALL_DATA} ${WRKSRC}/etc/logcheck.logfiles ${ETCDIR}/logcheck.logfiles.sample X.for i in ${CONFIG_DIRS} X @${MKDIR} ${ETCDIR}/${i} X @${INSTALL_DATA} ${WRKSRC}/rulefiles/linux/${i}/* ${ETCDIR}/${i} X.endfor X ${CHOWN} -R root:logcheck ${ETCDIR} X @${MKDIR} ${DOCSDIR} X.for d in ${DOCS} X @${INSTALL_DATA} ${WRKSRC}/${d} ${DOCSDIR} X.endfor X @${INSTALL_DATA} ${WRKSRC}/docs/README* ${DOCSDIR} X @${INSTALL_DATA} ${WRKSRC}/debian/logcheck.cron.d ${DOCSDIR}/crontab.in X @PREFIX=${PREFIX} ${SH} ${PKGINSTALL} ${PKGNAME} POST-INSTALL X ${CHMOD} 644 ${DOCSDIR}/* X @${INSTALL_MAN} ${WRKSRC}/docs/*.8 ${MAN8PREFIX}/man/man8 Xpost-install: X @${CAT} ${PKGMESSAGE} X X.include END-of-logcheck/Makefile echo x - logcheck/distinfo sed 's/^X//' >logcheck/distinfo << 'END-of-logcheck/distinfo' XMD5 (logcheck_1.2.54.tar.gz) = bbb6fce8987503d7677441d7154fb598 XSHA256 (logcheck_1.2.54.tar.gz) = a15c177211bbd12cef482a0b8fbdd6d32bc6ff7172f0ec54257ca1c68f921b3a XSIZE (logcheck_1.2.54.tar.gz) = 141094 END-of-logcheck/distinfo echo c - logcheck/files mkdir -p logcheck/files > /dev/null 2>&1 echo x - logcheck/files/patch-logcheck sed 's/^X//' >logcheck/files/patch-logcheck << 'END-of-logcheck/files/patch-logcheck' X--- src/logcheck.orig 2007-01-16 07:13:27.000000000 +0100 X+++ src/logcheck 2008-04-16 14:05:01.000000000 +0200 X@@ -1,4 +1,4 @@ X-#!/bin/bash X+#!/usr/local/bin/bash X # X # Copyright (C) 2004-2006 Debian Logcheck Team X # X@@ -26,17 +26,10 @@ X X if [ $UID == 0 ]; then X echo "logcheck should not be run as root. Use su to invoke logcheck:" X- echo "su -s /bin/bash -c \"/usr/sbin/logcheck${@:+ $@}\" logcheck" X+ echo "su logcheck -c \"/usr/local/bin/bash /usr/local/sbin/logcheck${@:+ $@}\"" X echo "Or use sudo: sudo -u logcheck logcheck${@:+ $@}." X # you may want to uncomment that hack to let logcheck invoke itself. X- # su -s /bin/bash -c "$0 $*" logcheck X- exit 1 X-fi X- X-if [ ! -f /usr/bin/lockfile-create -o \ X- ! -f /usr/bin/lockfile-remove -o \ X- ! -f /usr/bin/lockfile-touch ]; then X- echo "fatal: lockfile-progs is a prerequisite for logcheck, and was not found." X+ # su -s /usr/local/bin/bash -c "$0 $*" logcheck X exit 1 X fi X X@@ -68,12 +61,12 @@ X ADDTAG="no" X X # Set the default paths X-RULEDIR="/etc/logcheck" X-CONFFILE="/etc/logcheck/logcheck.conf" X+RULEDIR="/usr/local/etc/logcheck" X+CONFFILE="/usr/local/etc/logcheck/logcheck.conf" X STATEDIR="/var/lib/logcheck" X-LOGFILES_LIST="/etc/logcheck/logcheck.logfiles" X-LOGFILE_FALLBACK="/var/log/syslog" X-LOGTAIL="/usr/sbin/logtail" X+LOGFILES_LIST="/usr/local/etc/logcheck/logcheck.logfiles" X+LOGFILE_FALLBACK="/var/log/messages" X+LOGTAIL="/usr/local/sbin/logtail" X CAT="/bin/cat" X SYSLOG_SUMMARY="/usr/bin/syslog-summary" X X@@ -87,20 +80,15 @@ X SORTUNIQ=0 X SUPPORT_CRACKING_IGNORE=0 X SYSLOGSUMMARY=0 X-LOCKDIR=/var/lock/logcheck X+LOCKDIR=/var/run/logcheck X LOCKFILE="$LOCKDIR/logcheck" X X # Carry out the clean up tasks X cleanup() { X X- if [ -n "$LOCK" ]; then X- debug "cleanup: Killing lockfile-touch - $LOCK" X- kill $LOCK && unset LOCK X- fi X- X- if [ -f "$LOCKFILE.lock" ]; then X- debug "cleanup: Removing lockfile: $LOCKFILE.lock" X- lockfile-remove $LOCKFILE X+ if [ -f "$LOCKFILE" ]; then X+ debug "cleanup: Removing lockfile: $LOCKFILE" X+ rm -f $LOCKFILE X fi X X if [ -d $TMPDIR ]; then X@@ -142,14 +130,9 @@ X if [ "$2" = "noclean" ]; then X debug "error: Not removing lockfile" X else X- if [ -n "$LOCK" ]; then X- debug "error: Killing lockfile-touch - $LOCK" X- kill $LOCK && unset LOCK X- fi X- X- if [ -f "$LOCKFILE.lock" ]; then X- debug "error: Removing lockfile: $LOCKFILE.lock" X- lockfile-remove $LOCKFILE X+ if [ -f "$LOCKFILE" ]; then X+ debug "error: Removing lockfile: $LOCKFILE" X+ rm -f $LOCKFILE X fi X X fi X@@ -212,8 +195,7 @@ X mkdir $cleaned \ X || error "Could not make dir $cleaned for cleaned rulefiles." X fi X- for rulefile in $(run-parts --list $dir); do X- rulefile=$(basename $rulefile) X+ for rulefile in $(ls -1R $dir); do X if [ -f ${dir}/${rulefile} ]; then X debug "cleanrules: ${dir}/${rulefile}" X if [ -r ${dir}/${rulefile} ]; then X@@ -544,9 +526,9 @@ X X # Hostname either fully qualified or not. X if [ $FQDN -eq 1 ]; then X- HOSTNAME="$(hostname --fqdn)" > /dev/null 2>&1 X+ HOSTNAME="$(hostname -f)" > /dev/null 2>&1 X else X- HOSTNAME="$(hostname --short)" > /dev/null 2>&1 X+ HOSTNAME="$(hostname -s)" > /dev/null 2>&1 X fi X X # Now check for the other options X@@ -625,25 +607,21 @@ X X trap 'cleanup' 0 X X-debug "Trying to get lockfile: $LOCKFILE.lock" X+debug "Trying to get lockfile: $LOCKFILE" X if [ ! -d $LOCKDIR ]; then X mkdir -m 0755 $LOCKDIR X fi X-lockfile-create --retry 1 $LOCKFILE > /dev/null 2>&1 X+lockfile -r 1 $LOCKFILE > /dev/null 2>&1 X X X if [ $? -eq 1 ]; then X trap 0 X- error "Failed to get lockfile: $LOCKFILE.lock" "noclean" X-else X- debug "Running lockfile-touch $LOCKFILE.lock" X- lockfile-touch $LOCKFILE & X- LOCK="$!" X+ error "Failed to get lockfile: $LOCKFILE" "noclean" X fi X X # Create the secure temporary directory or exit X-TMPDIR=$(mktemp -d -p /tmp logcheck.XXXXXX) \ X- || TMPDIR=$(mktemp -d -p /var/tmp logcheck.XXXXXX) \ X+TMPDIR=$(mktemp -d /tmp/logcheck.XXXXXX) \ X+ || TMPDIR=$(mktemp -d /var/tmp/logcheck.XXXXXX) \ X || error "Could not create temporary directory" X X # Now clean the rulefiles in the directories END-of-logcheck/files/patch-logcheck echo x - logcheck/files/patch-logcheck.conf sed 's/^X//' >logcheck/files/patch-logcheck.conf << 'END-of-logcheck/files/patch-logcheck.conf' X--- etc/logcheck.conf.orig 2008-04-14 09:01:35.000000000 +0200 X+++ etc/logcheck.conf 2008-04-14 09:02:04.000000000 +0200 X@@ -47,12 +47,7 @@ X # Controls the base directory for rules file location X # This must be an absolute path X X-#RULEDIR="/etc/logcheck" X- X-# Controls if syslog-summary is run over each section. X-# Alternatively, set to "1" to enable extra summary. X- X-#SYSLOGSUMMARY=0 X+#RULEDIR="/usr/local/etc/logcheck" X X # Controls Subject: lines on logcheck reports: X END-of-logcheck/files/patch-logcheck.conf echo x - logcheck/files/patch-logcheck.cron.d sed 's/^X//' >logcheck/files/patch-logcheck.cron.d << 'END-of-logcheck/files/patch-logcheck.cron.d' X--- debian/logcheck.cron.d.orig 2008-04-14 09:33:40.000000000 +0200 X+++ debian/logcheck.cron.d 2008-04-14 09:36:16.000000000 +0200 X@@ -1,9 +1,5 @@ X-# /etc/cron.d/logcheck: crontab entries for the logcheck package X- X-PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin X+# crontab entries for the logcheck package X+PATH=/sbin:/bin:/usr/sbin:/usr/bin:/usr/local/sbin:/usr/local/bin X MAILTO=root X- X-@reboot logcheck if [ -x /usr/sbin/logcheck ]; then nice -n10 /usr/sbin/logcheck -R; fi X-2 * * * * logcheck if [ -x /usr/sbin/logcheck ]; then nice -n10 /usr/sbin/logcheck; fi X- X-# EOF X+@reboot if [ -x /usr/local/sbin/logcheck ]; then nice -n10 /usr/local/sbin/logcheck -R; fi X+2 * * * * if [ -x /usr/local/sbin/logcheck ]; then nice -n10 /usr/local/sbin/logcheck; fi END-of-logcheck/files/patch-logcheck.cron.d echo x - logcheck/files/pkg-message.in sed 's/^X//' >logcheck/files/pkg-message.in << 'END-of-logcheck/files/pkg-message.in' X---------------------------------------------------------------------------- XPlease make sure that all files listed in X X %%PREFIX%%/etc/logcheck/logcheck.logfiles X Xare readable to 'wheel' group (see also /etc/newsyslog.conf), or remove Xthem from the aforementioned logcheck configuration file. X XFor information on how to write local rulesets see X X %%PREFIX%%/share/doc/logcheck/README.logcheck-database X X---------------------------------------------------------------------------- END-of-logcheck/files/pkg-message.in echo x - logcheck/files/pkg-install.in sed 's/^X//' >logcheck/files/pkg-install.in << 'END-of-logcheck/files/pkg-install.in' X#!/bin/sh X Xuser="logcheck" Xgroup="logcheck" Xdescr="Logcheck system account" Xhomedir="/var/lib/logcheck" Xshell="/usr/bin/false" Xconfigfiles="logcheck.conf logcheck.logfiles" X Xcase $2 in XPRE-INSTALL) X if pw group show ${group} > /dev/null 2>&1; then X echo "---> You already have a group \"${group}\", so I will use it." X else X pw group add "${group}" X echo "---> Created group \"${group}\"." X fi X if pw user show ${user} > /dev/null 2>&1; then X echo "---> You already have a user \"${user}\", so I will use it." X else X pw user add -n logcheck -c "${descr}" -d "${homedir}" -s "${shell}" -g logcheck -G wheel X echo "---> Created user \"${user}\"." X fi X;; XPOST-INSTALL) X if /usr/bin/crontab -u "${user}" -l >/tmp/logchecktab$$ 2>&1 ; then X if test -s /tmp/logchecktab$$; then X echo "---> \"${user}\" already has a crontab. Not overwriting it" X echo "---> Please merge any changes from the standard crontab file" X echo "---> %%DOCSDIR%%/crontab.in" X else X /usr/bin/crontab -u "${user}" "%%DOCSDIR%%/crontab.in" || exit 1 X echo "---> Installed crontab(5) file for user \"${user}\"" X fi X else X /usr/bin/crontab -u "${user}" "%%DOCSDIR%%/crontab.in" || exit 1 X echo "---> Created crontab(5) file for user \"${user}\"" X fi X rm -f /tmp/logchecktab$$ X X for f in ${configfiles}; do X if [ ! -e %%PREFIX%%/etc/logcheck/${f} ]; then X echo "---> It seems you have no previous version of %%PREFIX%%/etc/logcheck/${f}" X cp %%PREFIX%%/etc/logcheck/${f}.sample %%PREFIX%%/etc/logcheck/${f} X echo "---> Created one from ${f}.sample" X fi X done X;; Xesac END-of-logcheck/files/pkg-install.in echo x - logcheck/files/pkg-deinstall.in sed 's/^X//' >logcheck/files/pkg-deinstall.in << 'END-of-logcheck/files/pkg-deinstall.in' X#!/bin/sh X Xuser="logcheck" Xgroup="logcheck" Xconfigfiles="logcheck.conf logcheck.logfiles" X Xcase $2 in XDEINSTALL) X for f in ${configfiles}; do X if diff %%PREFIX%%/etc/logcheck/${f} %%PREFIX%%/etc/logcheck/${f}.sample > /dev/null; then X echo "---> ${f} configuration file is the same as ${f}.sample" X rm -f %%PREFIX%%/etc/logcheck/${f} X echo "---> Deleted %%PREFIX%%/etc/logcheck/${f}" X else X echo "---> %%PREFIX%%/etc/logcheck/${f} differs from sample file; not deleted" X fi X done X;; XPOST-DEINSTALL) X if /usr/bin/crontab -u "${user}" -l > /dev/null 2>&1; then X rm -f /var/cron/tabs/${user} X echo "---> Removed crontab for \"${user}\"." X fi X X if pw user show ${user} > /dev/null 2>&1; then X pw user del ${user} X echo "---> Removed user \"${user}\" and group \"${group}\"." X fi X if pw group show ${group} > /dev/null 2>&1; then X pw group del ${group} X fi X;; Xesac END-of-logcheck/files/pkg-deinstall.in echo x - logcheck/pkg-descr sed 's/^X//' >logcheck/pkg-descr << 'END-of-logcheck/pkg-descr' XMails anomalies in the system logfiles to the administrator. X XLogcheck helps spot problems, anomalies and security violations Xin your logfiles automatically and will send the summaries to you Xvia e-mail. Logcheck is run as a cron job. X XWWW: http://alioth.debian.org/projects/logcheck/ END-of-logcheck/pkg-descr echo x - logcheck/pkg-plist sed 's/^X//' >logcheck/pkg-plist << 'END-of-logcheck/pkg-plist' Xetc/logcheck/cracking.d/logcheck Xetc/logcheck/cracking.d/smartd Xetc/logcheck/ignore.d.paranoid/bind Xetc/logcheck/ignore.d.paranoid/cron Xetc/logcheck/ignore.d.paranoid/logcheck Xetc/logcheck/ignore.d.paranoid/postfix Xetc/logcheck/ignore.d.paranoid/ppp Xetc/logcheck/ignore.d.paranoid/qpopper Xetc/logcheck/ignore.d.paranoid/squid Xetc/logcheck/ignore.d.paranoid/ssh Xetc/logcheck/ignore.d.paranoid/stunnel Xetc/logcheck/ignore.d.paranoid/sysklogd Xetc/logcheck/ignore.d.paranoid/telnetd Xetc/logcheck/ignore.d.paranoid/tripwire Xetc/logcheck/ignore.d.server/amandad Xetc/logcheck/ignore.d.server/anacron Xetc/logcheck/ignore.d.server/anon-proxy Xetc/logcheck/ignore.d.server/apache Xetc/logcheck/ignore.d.server/arpwatch Xetc/logcheck/ignore.d.server/automount Xetc/logcheck/ignore.d.server/bind Xetc/logcheck/ignore.d.server/bluez-utils Xetc/logcheck/ignore.d.server/courier Xetc/logcheck/ignore.d.server/cpqarrayd Xetc/logcheck/ignore.d.server/cpufreqd Xetc/logcheck/ignore.d.server/cracklib Xetc/logcheck/ignore.d.server/cron Xetc/logcheck/ignore.d.server/cron-apt Xetc/logcheck/ignore.d.server/cups-lpd Xetc/logcheck/ignore.d.server/cvs-pserver Xetc/logcheck/ignore.d.server/cvsd Xetc/logcheck/ignore.d.server/cyrus Xetc/logcheck/ignore.d.server/dcc Xetc/logcheck/ignore.d.server/dhclient Xetc/logcheck/ignore.d.server/dhcp Xetc/logcheck/ignore.d.server/dictd Xetc/logcheck/ignore.d.server/dkfilter Xetc/logcheck/ignore.d.server/dnsmasq Xetc/logcheck/ignore.d.server/dovecot Xetc/logcheck/ignore.d.server/dspam Xetc/logcheck/ignore.d.server/epmd Xetc/logcheck/ignore.d.server/exim4 Xetc/logcheck/ignore.d.server/gps Xetc/logcheck/ignore.d.server/grinch Xetc/logcheck/ignore.d.server/horde3 Xetc/logcheck/ignore.d.server/hplip Xetc/logcheck/ignore.d.server/hylafax Xetc/logcheck/ignore.d.server/imap Xetc/logcheck/ignore.d.server/imapproxy Xetc/logcheck/ignore.d.server/imp Xetc/logcheck/ignore.d.server/imp4 Xetc/logcheck/ignore.d.server/innd Xetc/logcheck/ignore.d.server/ipppd Xetc/logcheck/ignore.d.server/isdnlog Xetc/logcheck/ignore.d.server/isdnutils Xetc/logcheck/ignore.d.server/jabberd Xetc/logcheck/ignore.d.server/kernel Xetc/logcheck/ignore.d.server/logcheck Xetc/logcheck/ignore.d.server/lpr Xetc/logcheck/ignore.d.server/maradns Xetc/logcheck/ignore.d.server/mldonkey-server Xetc/logcheck/ignore.d.server/mon Xetc/logcheck/ignore.d.server/nagios Xetc/logcheck/ignore.d.server/netconsole Xetc/logcheck/ignore.d.server/nfs Xetc/logcheck/ignore.d.server/nntpcache Xetc/logcheck/ignore.d.server/nscd Xetc/logcheck/ignore.d.server/ntp Xetc/logcheck/ignore.d.server/oidentd Xetc/logcheck/ignore.d.server/openvpn Xetc/logcheck/ignore.d.server/pdns Xetc/logcheck/ignore.d.server/perdition Xetc/logcheck/ignore.d.server/policyd Xetc/logcheck/ignore.d.server/popa3d Xetc/logcheck/ignore.d.server/postfix Xetc/logcheck/ignore.d.server/postfix-policyd Xetc/logcheck/ignore.d.server/ppp Xetc/logcheck/ignore.d.server/pptpd Xetc/logcheck/ignore.d.server/proftpd Xetc/logcheck/ignore.d.server/pure-ftpd Xetc/logcheck/ignore.d.server/qpopper Xetc/logcheck/ignore.d.server/rbldnsd Xetc/logcheck/ignore.d.server/rpc_statd Xetc/logcheck/ignore.d.server/rsnapshot Xetc/logcheck/ignore.d.server/rsync Xetc/logcheck/ignore.d.server/sa-exim Xetc/logcheck/ignore.d.server/samba Xetc/logcheck/ignore.d.server/saned Xetc/logcheck/ignore.d.server/saslauthd Xetc/logcheck/ignore.d.server/scponly Xetc/logcheck/ignore.d.server/slapd Xetc/logcheck/ignore.d.server/smartd Xetc/logcheck/ignore.d.server/smokeping Xetc/logcheck/ignore.d.server/snmpd Xetc/logcheck/ignore.d.server/snort Xetc/logcheck/ignore.d.server/spamc Xetc/logcheck/ignore.d.server/spamd Xetc/logcheck/ignore.d.server/squid Xetc/logcheck/ignore.d.server/ssh Xetc/logcheck/ignore.d.server/stunnel Xetc/logcheck/ignore.d.server/sympa Xetc/logcheck/ignore.d.server/syslogd Xetc/logcheck/ignore.d.server/tftpd Xetc/logcheck/ignore.d.server/thy Xetc/logcheck/ignore.d.server/ucd-snmp Xetc/logcheck/ignore.d.server/uptimed Xetc/logcheck/ignore.d.server/userv Xetc/logcheck/ignore.d.server/watchdog Xetc/logcheck/ignore.d.server/webmin Xetc/logcheck/ignore.d.server/xinetd Xetc/logcheck/ignore.d.workstation/automount Xetc/logcheck/ignore.d.workstation/bind Xetc/logcheck/ignore.d.workstation/bluez-utils Xetc/logcheck/ignore.d.workstation/bonobo Xetc/logcheck/ignore.d.workstation/francine Xetc/logcheck/ignore.d.workstation/gconf Xetc/logcheck/ignore.d.workstation/gdm Xetc/logcheck/ignore.d.workstation/hald Xetc/logcheck/ignore.d.workstation/hcid Xetc/logcheck/ignore.d.workstation/ifplugd Xetc/logcheck/ignore.d.workstation/ippl Xetc/logcheck/ignore.d.workstation/kdm Xetc/logcheck/ignore.d.workstation/kernel Xetc/logcheck/ignore.d.workstation/logcheck Xetc/logcheck/ignore.d.workstation/net-acct Xetc/logcheck/ignore.d.workstation/nntpcache Xetc/logcheck/ignore.d.workstation/polypaudio Xetc/logcheck/ignore.d.workstation/postfix Xetc/logcheck/ignore.d.workstation/ppp Xetc/logcheck/ignore.d.workstation/proftpd Xetc/logcheck/ignore.d.workstation/pump Xetc/logcheck/ignore.d.workstation/sendfile Xetc/logcheck/ignore.d.workstation/squid Xetc/logcheck/ignore.d.workstation/udev Xetc/logcheck/ignore.d.workstation/wdm Xetc/logcheck/ignore.d.workstation/winbind Xetc/logcheck/ignore.d.workstation/xdm Xetc/logcheck/logcheck.conf.sample Xetc/logcheck/logcheck.logfiles.sample Xetc/logcheck/violations.d/kernel Xetc/logcheck/violations.d/logcheck Xetc/logcheck/violations.d/smartd Xetc/logcheck/violations.d/su Xetc/logcheck/violations.d/sudo Xetc/logcheck/violations.ignore.d/logcheck-bind Xetc/logcheck/violations.ignore.d/logcheck-bluez-utils Xetc/logcheck/violations.ignore.d/logcheck-courier Xetc/logcheck/violations.ignore.d/logcheck-cron-apt Xetc/logcheck/violations.ignore.d/logcheck-cyrus Xetc/logcheck/violations.ignore.d/logcheck-dcc Xetc/logcheck/violations.ignore.d/logcheck-dovecot Xetc/logcheck/violations.ignore.d/logcheck-hylafax Xetc/logcheck/violations.ignore.d/logcheck-innd Xetc/logcheck/violations.ignore.d/logcheck-kernel Xetc/logcheck/violations.ignore.d/logcheck-login Xetc/logcheck/violations.ignore.d/logcheck-mon Xetc/logcheck/violations.ignore.d/logcheck-nagios Xetc/logcheck/violations.ignore.d/logcheck-openvpn Xetc/logcheck/violations.ignore.d/logcheck-pdns Xetc/logcheck/violations.ignore.d/logcheck-postfix Xetc/logcheck/violations.ignore.d/logcheck-proftpd Xetc/logcheck/violations.ignore.d/logcheck-pureftp Xetc/logcheck/violations.ignore.d/logcheck-samba Xetc/logcheck/violations.ignore.d/logcheck-saslauthd Xetc/logcheck/violations.ignore.d/logcheck-sendmail_tmp Xetc/logcheck/violations.ignore.d/logcheck-smartd Xetc/logcheck/violations.ignore.d/logcheck-spamd Xetc/logcheck/violations.ignore.d/logcheck-squid Xetc/logcheck/violations.ignore.d/logcheck-ssh Xetc/logcheck/violations.ignore.d/logcheck-su Xetc/logcheck/violations.ignore.d/logcheck-sudo Xetc/logcheck/violations.ignore.d/logcheck-usb Xetc/logcheck/violations.ignore.d/logcheck-winbind Xsbin/logcheck Xsbin/logtail Xshare/doc/logcheck/AUTHORS Xshare/doc/logcheck/CHANGES Xshare/doc/logcheck/CREDITS Xshare/doc/logcheck/LICENSE Xshare/doc/logcheck/TODO Xshare/doc/logcheck/README-psionic Xshare/doc/logcheck/README.Maintainer Xshare/doc/logcheck/README.how.to.interpret Xshare/doc/logcheck/README.keywords Xshare/doc/logcheck/README.logcheck Xshare/doc/logcheck/README.logcheck-database Xshare/doc/logcheck/README.logtail Xshare/doc/logcheck/crontab.in X@dirrm share/doc/logcheck X@dirrm etc/logcheck/violations.ignore.d X@dirrm etc/logcheck/violations.d X@dirrm etc/logcheck/ignore.d.workstation X@dirrm etc/logcheck/ignore.d.server X@dirrm etc/logcheck/ignore.d.paranoid X@dirrm etc/logcheck/cracking.d X@dirrm etc/logcheck END-of-logcheck/pkg-plist exit >Release-Note: >Audit-Trail: >Unformatted: