Hide Forgot
Description of problem: The fix for BZ1310173 introduced in: * Thu Mar 10 2016 Alex Wood <awood> 0.9.49.12-1 - removing initialization of pool.entitlements (fnguyen) - Introducing batching to CRL job to workaround Postgres IN clause limit (fnguyen) - 1310173: Backport logrotate config entry (wpoteat) - Mass Pool lock (fnguyen) Causes logrotate failures under RHEL6.7 to be reported through Cron: ------- From: Anacron [root.hilti.com] Sent: Mittwoch, 20. April 2016 05:49 To: root.hilti.com Subject: Anacron job 'cron.daily' on li-lc-1578 /etc/cron.daily/logrotate: error: candlepin:2 unknown option 'su' -- ignoring line error: candlepin:2 unexpected text ------- vrempet@li-lc-1578 ~ $ cat /etc/redhat-release Red Hat Enterprise Linux Server release 6.7 (Santiago) vrempet@li-lc-1578 ~ $ rpm -qf /etc/logrotate.d/candlepin candlepin-0.9.49.12-1.el6.noarch Version-Release number of selected component (if applicable): How reproducible: Steps to Reproduce: 1. Install candlepin-0.9.49.12-1.el6.noarch on RHEL6.7 2. Exeute: $ sudo logrotate /etc/logrotate.conf error: candlepin:2 unknown option 'su' -- ignoring line error: candlepin:2 unexpected text 3. Actual results: Error Expected results: Success Additional info:
RHEL6.7 provides: vrempet@li-lc-1578 ~ $ rpm -q logrotate logrotate-3.7.8-26.el6_7.x86_64 The used 'su' command is only introduced in 3.8.0 of logrotate: 3.7.9 -> 3.8.0 - added "dateyesterday" option (see man page) - fixed crash when config file had exactly 4096*N bytes - added WITH_ACL make option to link against -lacl and preserve ACLs during rotation - added "su" option to define user/group for rotation. Logrotate now skips directories which are world writable or writable by group which is not "root" unless "su" directive is used. - fixed CVE-2011-1098: race condition by creation of new files - fixed possible shell injection when using "shred" directive (CVE-2011-1154) - fixed escaping of file names within 'write state' action (CVE-2011-1155) - better 'size' directive description - fixed possible buffer-overflow when reading config files - NetBSD/FreeBSD compilation fixes - Solaris compilation fixes
*** Bug 1343758 has been marked as a duplicate of this bug. ***
This is NOT correctly fixed yet in Sat6.2.0 Beta2. There is logic in the logrotate file, but somehow it is not working the su line is still kept active: [crash] root@li-lc-1578:~# rpm -q candlepin candlepin-0.9.54.6-1.el6.noarch [crash] root@li-lc-1578:~# cat /etc/logrotate.d/candlepin /var/log/candlepin/*.log { # logrotate 3.8 requires the su directive, # where as prior versions do not recognize it. #LOGROTATE-3.8# su tomcat tomcat su tomcat tomcat copytruncate daily rotate 52 compress missingok create 0644 tomcat tomcat }
Ehelms, my bad, I have updated the fixed in version appropriately. does this mean we need to revert the state of this bug, or is candlepin-0.9.54.7-1 in a build already?
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2016:1501