From owner-freebsd-questions@FreeBSD.ORG Mon Sep 8 21:08:36 2008 Return-Path: Delivered-To: questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 563A61065675 for ; Mon, 8 Sep 2008 21:08:36 +0000 (UTC) (envelope-from glarkin@FreeBSD.org) Received: from mail1.sourcehosting.net (113901-app1.sourcehosting.net [72.32.213.11]) by mx1.freebsd.org (Postfix) with ESMTP id 362638FC12 for ; Mon, 8 Sep 2008 21:08:36 +0000 (UTC) (envelope-from glarkin@FreeBSD.org) Received: from 68-189-244-97.dhcp.oxfr.ma.charter.com ([68.189.244.97] helo=Gregory-Larkins-Computer.local) by mail1.sourcehosting.net with esmtp (Exim 4.69 (FreeBSD)) (envelope-from ) id 1KcnyL-000IrP-99; Mon, 08 Sep 2008 17:08:34 -0400 Received: from [127.0.0.1] (fireball.entropy.prv [192.168.1.12]) by Gregory-Larkins-Computer.local (Postfix) with ESMTP id 32E50248B11D; Mon, 8 Sep 2008 17:08:33 -0400 (EDT) Message-ID: <48C59453.3090604@FreeBSD.org> Date: Mon, 08 Sep 2008 17:08:35 -0400 From: Greg Larkin Organization: The FreeBSD Project User-Agent: Thunderbird 2.0.0.16 (Windows/20080708) MIME-Version: 1.0 To: Marco Beishuizen References: <20080908222921.4daba36a@yokozuna.lan> In-Reply-To: <20080908222921.4daba36a@yokozuna.lan> X-Enigmail-Version: 0.95.7 OpenPGP: id=1C940290 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit X-Spam-Score: -1.2 (-) Cc: FreeBSD-Questions Subject: Re: logcheck doesn't work anymore X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: glarkin@FreeBSD.org List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 08 Sep 2008 21:08:36 -0000 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Marco Beishuizen wrote: > Hi, > > After upgrading logcheck from 1.1.1 to 1.2.54 I suddenly get errors of > logcheck not working correctly: > > ... > Warning: If you are seeing this message, your log files may not have > been checked! > > Details: > Could not run logtail or save output > > Check temporary directory: /tmp/logcheck.6IZZmq > > Also verify that the logcheck user can read all files referenced in > /etc/logcheck/logcheck.logfiles! > > declare -x HOME="/var/lib/logcheck" > declare -x LOGNAME="logcheck" > declare -x MAILTO="root" > declare -x OLDPWD > declare -x > PATH="/sbin:/bin:/usr/sbin:/usr/bin:/usr/local/sbin:/usr/local/bin" > declare -x PWD="/var/lib/logcheck" declare -x SHELL="/bin/sh" > declare -x SHLVL="1" > declare -x USER="logcheck" > ... > > In version 1.1.1 there was a script logcheck.sh in cron that ran every > hour but that doesn't seem to exist anymore. Trying to run logcheck > manually results in: > > ... > logcheck should not be run as root. Use su to invoke logcheck: > su logcheck -c "/usr/local/bin/bash /usr/local/sbin/logcheck" > Or use sudo: sudo -u logcheck logcheck. > ... > > But this doesn't seem to do anything. > > How can I use logcheck again? > > Thanks, > > Marco > Hi Marco, I recently committed the upgrade to logcheck, and I am looking into your problem now. I'll post back here with details once I've figured it out. Regards, Greg - -- Greg Larkin http://www.FreeBSD.org/ - The Power To Serve http://www.sourcehosting.net/ - Ready. Set. Code. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFIxZRT0sRouByUApARAvMHAJ9329VDm8MF+6jK+3X1eRZuiuoHaQCePUyg BgkTBztxSWYkH2zozSfTiPI= =ipnk -----END PGP SIGNATURE-----