forked from Lainports/freebsd-ports
ChangeLog: http://packages.debian.org/changelogs/pool/main/l/logcheck/logcheck_1.3.14/changelog PR: ports/162810 Submitted by: Takefu <takefu@airport.fm> Feature safe: yes
157 lines
4.6 KiB
Text
157 lines
4.6 KiB
Text
--- src/logcheck.orig 2010-07-07 15:59:57.000000000 -0400
|
|
+++ src/logcheck 2010-07-07 16:19:33.000000000 -0400
|
|
@@ -1,4 +1,4 @@
|
|
-#!/bin/bash
|
|
+#!%%LOCALBASE%%/bin/bash
|
|
#
|
|
# Copyright (C) 2004-2010 Debian Logcheck Team
|
|
# <logcheck-devel@alioth.lists.debian.org>
|
|
@@ -24,17 +24,10 @@
|
|
|
|
if [ `id -u` = 0 ]; then
|
|
echo "logcheck should not be run as root. Use su to invoke logcheck:"
|
|
- echo "su -s /bin/bash -c \"/usr/sbin/logcheck${@:+ $@}\" logcheck"
|
|
+ echo "su -m %%LOGCHECK_USER%% -c \"%%LOCALBASE%%/bin/bash %%PREFIX%%/sbin/logcheck${@:+ $@}\""
|
|
echo "Or use sudo: sudo -u logcheck logcheck${@:+ $@}."
|
|
# you may want to uncomment that hack to let logcheck invoke itself.
|
|
- # su -s /bin/bash -c "$0 $*" logcheck
|
|
- exit 1
|
|
-fi
|
|
-
|
|
-if [ ! -f /usr/bin/lockfile-create -o \
|
|
- ! -f /usr/bin/lockfile-remove -o \
|
|
- ! -f /usr/bin/lockfile-touch ]; then
|
|
- echo "fatal: lockfile-progs is a prerequisite for logcheck, and was not found."
|
|
+ # su -s %%LOCALBASE%%/bin/bash -c "$0 $*" logcheck
|
|
exit 1
|
|
fi
|
|
|
|
@@ -69,12 +62,12 @@
|
|
ADDTAG="no"
|
|
|
|
# Set the default paths
|
|
-RULEDIR="/etc/logcheck"
|
|
-CONFFILE="/etc/logcheck/logcheck.conf"
|
|
-STATEDIR="/var/lib/logcheck"
|
|
-LOGFILES_LIST="/etc/logcheck/logcheck.logfiles"
|
|
-LOGFILE_FALLBACK="/var/log/syslog"
|
|
-LOGTAIL="/usr/sbin/logtail2"
|
|
+RULEDIR="%%ETCDIR%%"
|
|
+CONFFILE="%%ETCDIR%%/logcheck.conf"
|
|
+STATEDIR="/var/db/logcheck"
|
|
+LOGFILES_LIST="%%ETCDIR%%/logcheck.logfiles"
|
|
+LOGFILE_FALLBACK="/var/log/messages"
|
|
+LOGTAIL="%%PREFIX%%/sbin/logtail2"
|
|
CAT="/bin/cat"
|
|
SYSLOG_SUMMARY="/usr/bin/syslog-summary"
|
|
|
|
@@ -89,20 +82,15 @@
|
|
SORTUNIQ=0
|
|
SUPPORT_CRACKING_IGNORE=0
|
|
SYSLOGSUMMARY=0
|
|
-LOCKDIR=/var/lock/logcheck
|
|
+LOCKDIR=/var/run/logcheck
|
|
LOCKFILE="$LOCKDIR/logcheck"
|
|
|
|
# Carry out the clean up tasks
|
|
cleanup() {
|
|
|
|
- if [ -n "$LOCK" ]; then
|
|
- debug "cleanup: Killing lockfile-touch - $LOCK"
|
|
- kill "$LOCK" && unset LOCK
|
|
- fi
|
|
-
|
|
- if [ -f "$LOCKFILE.lock" ]; then
|
|
- debug "cleanup: Removing lockfile: $LOCKFILE.lock"
|
|
- lockfile-remove "$LOCKFILE"
|
|
+ if [ -f "$LOCKFILE" ]; then
|
|
+ debug "cleanup: Removing lockfile: $LOCKFILE"
|
|
+ rm -f "$LOCKFILE"
|
|
fi
|
|
|
|
if [ -d "$TMPDIR" ]; then
|
|
@@ -144,14 +132,9 @@
|
|
if [ "$2" = "noclean" ]; then
|
|
debug "error: Not removing lockfile"
|
|
else
|
|
- if [ -n "$LOCK" ]; then
|
|
- debug "error: Killing lockfile-touch - $LOCK"
|
|
- kill "$LOCK" && unset LOCK
|
|
- fi
|
|
-
|
|
- if [ -f "$LOCKFILE.lock" ]; then
|
|
- debug "error: Removing lockfile: $LOCKFILE.lock"
|
|
- lockfile-remove "$LOCKFILE"
|
|
+ if [ -f "$LOCKFILE" ]; then
|
|
+ debug "error: Removing lockfile: $LOCKFILE"
|
|
+ rm -f "$LOCKFILE"
|
|
fi
|
|
|
|
fi
|
|
@@ -170,7 +153,7 @@
|
|
${TMPDIR:+Check temporary directory: $TMPDIR
|
|
}
|
|
Also verify that the logcheck user can read all files referenced in
|
|
-/etc/logcheck/logcheck.logfiles!
|
|
+%%ETCDIR%%/logcheck.logfiles!
|
|
|
|
$(export)
|
|
EOF
|
|
@@ -215,7 +198,7 @@
|
|
mkdir "$cleaned" \
|
|
|| error "Could not make dir $cleaned for cleaned rulefiles."
|
|
fi
|
|
- for rulefile in $(run-parts --list "$dir"); do
|
|
+ for rulefile in $(ls -1R "$dir"); do
|
|
rulefile="$(basename "$rulefile")"
|
|
if [ -f "${dir}/${rulefile}" ]; then
|
|
debug "cleanrules: ${dir}/${rulefile}"
|
|
@@ -529,9 +512,9 @@
|
|
|
|
# Hostname either fully qualified or not.
|
|
if [ "$FQDN" -eq 1 ]; then
|
|
- HOSTNAME="$(hostname --fqdn 2>/dev/null)"
|
|
+ HOSTNAME="$(hostname -f 2>/dev/null)"
|
|
else
|
|
- HOSTNAME="$(hostname --short 2>/dev/null)"
|
|
+ HOSTNAME="$(hostname -s 2>/dev/null)"
|
|
fi
|
|
|
|
# Now check for the other options
|
|
@@ -610,30 +593,25 @@
|
|
|
|
trap 'cleanup' 0
|
|
|
|
-debug "Trying to get lockfile: $LOCKFILE.lock"
|
|
+debug "Trying to get lockfile: $LOCKFILE"
|
|
if [ ! -d "$LOCKDIR" ]; then
|
|
mkdir -m 0755 "$LOCKDIR"
|
|
fi
|
|
-lockfile-create --retry 1 "$LOCKFILE" > /dev/null 2>&1
|
|
+lockfile -r 1 "$LOCKFILE" > /dev/null 2>&1
|
|
|
|
|
|
if [ $? -eq 1 ]; then
|
|
trap 0
|
|
- if [ -e "${LOCKFILE}.lock" ]; then
|
|
+ if [ -e "${LOCKFILE}" ]; then
|
|
error "Another logcheck process is still running" "noclean"
|
|
else
|
|
- error "Failed to get lockfile: $LOCKFILE.lock" "noclean"
|
|
+ error "Failed to get lockfile: $LOCKFILE" "noclean"
|
|
fi
|
|
-
|
|
-else
|
|
- debug "Running lockfile-touch $LOCKFILE.lock"
|
|
- lockfile-touch "$LOCKFILE" &
|
|
- LOCK="$!"
|
|
fi
|
|
|
|
# Create the secure temporary directory or exit
|
|
-TMPDIR="$(mktemp -d -p "${TMP:-/tmp}" logcheck.XXXXXX)" \
|
|
- || TMPDIR="$(mktemp -d -p /var/tmp logcheck.XXXXXX)" \
|
|
+TMPDIR="$(mktemp -d ${TMP:-/tmp}/logcheck.XXXXXX)" \
|
|
+ || TMPDIR="$(mktemp -d /var/tmp/logcheck.XXXXXX)" \
|
|
|| error "Could not create temporary directory"
|
|
|
|
# Now clean the rulefiles in the directories
|