Red Hat Bugzilla – Bug 80064
logwatch misses reporting certain things it should catch
Last modified: 2008-05-01 11:38:04 EDT
Description of problem:
Logwatch doesn't properly report certain events that it should. This is due to
a bug that causes shared scripts to be run in an undefined order.
I know this is fixed in the rawhide 4.0.3-3 package, but this should be released
as a patch to RedHat 8.0.
I rely on logwatch to give me accurate information in order that I might notice
security related problems. In particular, I've managed to get the ssh worm
removed from many machines across the Internet because I've noticed its
signature in my logs. Bugs in logging are a serious security issue.
So, no making logging actually work in RH 8.0? I don't care much as I've
installed the Rawhide version everywhere, but, it bothers me to think of all the
people relying on logs that are broken.
Based on the current priority and number of items already waiting in the errata queue, no.