control: severity -1 serious thanks On Mon, Jun 30, 2025 at 07:26:37PM +0100, Richard Lewis wrote: > I have 2 thoughts, one is that we set ProtectSystem=strict so /tmp is > read-only when the unit runs: However, we set > Environment=TMPDIR=/run/chkrootkit which should mean things dont write > to /tmp --- maybe your email sending setup ignores TMPDIR? are you > using something non-standard?
I can send mail on these machines using this command:
$ date| mail -s test root
> Either way you probably shouldn't ignore these lines with logcheck: it
> looks like it is trying to email you and failing
indeed, hence I'm raising the severity. (Because I believe that warning about
probs is chkrootkit's basic function. Feel free to downgrade, I don't mind.)
Also because I'm seeing this on systems running postfix and (others) running
ssmtp.
--
cheers,
Holger
⢀⣴⠾⠻⢶⣦⠀
⣾⠁⢠⠒⠀⣿⡁ holger@(debian|reproducible-builds|layer-acht).org
⢿⡄⠘⠷⠚⠋⠀ OpenPGP: B8BF54137B09D35CF026FE9D 091AB856069AAA1C
⠈⠳⣄
Alles weird gut.
signature.asc
Description: PGP signature
