Package: logcheck
Version: 1.2.39


logcheck contains the line:

TMPDIR=$(mktemp -d -p /tmp logcheck.XXXXXX

and is storing tons of data there.

On linux-vserver (e.g.) "/tmp" defaults to just 16MB!

So, sometimes, an empty email is generated and the user "nobody" 
on localhost got this error message:

-------------------

cat: write error: No space left on device
/usr/sbin/logcheck: line 161: cannot create temp file for here document: 
No space left on device
mail: /tmp/mail.RsXXXXaK2dAQ: No space left on device
Null message body; hope that's ok

-------------------


Increasing /tmp was no solution:

/etc/logcheck# df
Filesystem           1K-blocks      Used Available Use% Mounted on
/dev/hdv1            225179116  97931996 115808632  46% /
none                     49152         0     49152   0% /tmp

/etc/logcheck# mount
/dev/hdv1 on / type ufs (defaults)
none on /proc type proc (0)
none on /tmp type tmpfs (size=48m,mode=1777)
none on /dev/pts type devpts (gid=5,mode=620)



Problem of the admin?
I don't think so, because the admin sees: "logcheck is running,
i get emails".
Only in an attack state he wouldn't get the email...
The logcheck script seems to use the first unix programmers paradigma:
"All resources are unlimited" ;-)







-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to