Security :: Stop Particular Messages In /var/log/messages?
May 30, 2009
More than 7 G bytes were logged to the messages file last three weeks I got this message in /var/log/messages I want to stop this messaging cause it takes to much space
I have a syslog-ng running and kernel build of 2.6.34.8 I use a syslog API in my program with facility LOG_LOCAL5 and and levels debug err and crit and info. when I ran on the older syslog facility I had everything logged fine as I intended. now I have written these rules into the syslog-ng.conf:
Is there a way to stop kbuildsycoca4, and klauncher from spitting messages over all over my console windows every time I start a kde program from the console? I absolutely hate it when I'm typing a command and suddenly I get a million messages from kbuildsyscoca/klauncher and can no longer see what I was typing.For examlpe redirecting kate stderr to /dev/null, you'll still get messages from klauncher, and kbuildsyscoca4. Is there a way to silence this garbage for good?
Every now and then on my non-graphical console-orientated Debian Squeeze system, some services see it fit to spill their juices all over what I am doing.
A message about a service stopping/starting/restarting prints at the location of my cursor ontop of whatever I was doing at that moment, forcing me to either redraw ( if the currently running application supports it ), background and then foreground what I'm doing or clear the screen if at the shell.
Code: * Restarting OpenBSD Secure Shell server sshd * Restarting advanced system logger rsyslogd How can I stop these messages appearing? Even better would be to send them to /dev/tty8 where I've configured rsyslogd to write.
I'm running OpenSUSE 11.4. The problem is that I can set easily what to log (for firewall), but not where to log. And currently the same logs are written to /var/log/firewall and /var/log/messages. I still want messages be written into the first one, but not the second one — it is redundant and it is polluting regular system logs.So how to stop the firewall from writting logs to /var/log/messages?
Mandriva-2009.1 tries to install a package called Task-Printing-Server every time I power up my PSC-1401 All-In-One (multifunction) printer. This is very annoying & I want to stop these pop-up messages.This printer uses the hplip package (PSC_1400.ppd for printing & hpaio for scanning) & everything works fine except for those annoying pop-up messages.
I have my system set up to where the router(dd-wrt) will send it's syslog messages to my Linux PC system. I am using shorewall as my firewall. I have two questions: How can I configure shorewall to allow the messages from my router? If I use my router IP address to allow the messages to come through the firewall, will this be a great security risk as anything from the internet can come through on that router ipaddress?
I have a batch job which logs in to the server every 10 minutes via windows rsh. The job checks to see is there are any files that need to be send via a EDI serverto a supplier.The following logwatch report is swamped with the login messages and would like to either suppress the logging in PAM? or suppress the entry in the logwatch report?But I still want logging id the username is not username1.Connections (secure-log) Begin rshd[1754]: pam_rhosts_auth(rsh:auth): allowed to username1@10.0.0.1 as myedi
I am using ubuntu 10.04 on an iMac 7.1. What do the following log entries mean? I recently had a "sbin/init infected" alarm with chkrootkit (or rkhunter, I forget which) and reinstalled, and I thought I was rid of the problem, whatever it was (could have been a kernel panic), but now the checksecurity setuid stuff reappeared (the checksecurity.log only appears in the log file viewer after resetting it with gconftool-2 --recursive-unset /apps/gnome-system-log, which seems suspicious; why is the log hidden by default?); also there are "outbound" messages that I don't understand. I have another ubuntu install on another Mac which seems to be unaffected (and also has checksecurity installed; I just ran it manually and also got setuid stuff, but there is no "outbound" and ufw.log is empty). I can't really think I have a rootkit (I don't notice any effects except these anomalous logfiles, and my browsing habits don't include sleazy websites). And what exactly are bound sockets? There is a lot of information about sockets on the net but it's all rather technical. I continue to look of course. I ran chkrootkit and rkhunter again, and they read clean (if I can trust them).
Is it possible that the trouble is related to the Mac's BIOS emulation? (Apple does not seem to take security very seriously; Snow Leopard does not even ask for a password for Software Update - I asked my premium reseller and he confirmed it. I should not be surprised to find out that the iMac's BIOS emulation is unsafe. I'll need to get a real computer). The MacBook Pro 5.1 has a newer firmware (for instance, it will boot ubuntu from external disks which the iMac will not), and as I said that install seems to be unaffected (The setuid stuff is probably normal, but I'm not sure the "outbound" messages are). I use grub legacy, which seems to install to the Mac's EFI partition as /dev/sda (GParted shows 18.1 MB of 200MB used on both computers with ubuntu on them, whereas an HFS+ disk without ubuntu, or with GRUB in a partition, will show 3.09 MB used).
Does it make sense to reconfigure checksecurity to check for setuid changes daily (change CHECK_WEEKLY="SETUID" in /etc/checksecurity.conf to CHECK_DAILY="SETUID")?
checksecurity.log:
messages (part):
There also was a lot of terminal output similar to the iMac's which I forgot to save, and when I ran checksecurity again it was blank. (Incidentally, the list of setuid programs on Mac OS is a lot longer)
I am now for four weeks on Wheezy KDE after turning away from PCLinuxOS.But now that Jessie KDE is out, I installed it on a free 20 GB partition to have a look.What I really like is the following:
At start up on Wheezy GRUB MENU - INIT messages - KDE welcome screen -> desktop..I am missing those INIT messages. Gives me a good feeling for system status.I understand, we now have systemd, but is there a possibility to have those reassuring messages at startup and maybe also at shut down?
I have a big problem : I have FC12 and my /var/log/messages is empty and I don't know I have tried to stop the rsyslogd then restart it -- did not solved my problem.I have also tried the "logger" command -- messages file is still empty.Does anyone has any idea what's wrong with my syslogd?
When I shut down fedora 14, no messages are displayed. I commented out "rhgb quiet" to display the startup messages. How do I configure Fedora 14 to display the shutdown messages when shutting down?
Sometimes Empathy is not sending my messages to my contacts on MSN. There are no warning messages of this, so it's really annoying. I have to disconnect and reconnect to MSN to resolve the issue. After the bug occurs no message is sent to that contact, but I can communicate with others.
In my case I see no correlation between the length of the message and the bug occurring, it seems to appear randomly.
How do I get rid of unwanted ads (lots of it in CNET's newsletter, etc.) when reading messages in Evolution?
PS- Thunderbird at the moment seems the only eMailer capable of adding some kind of adblock... I hope to see some kind of equivalent alternative towards Evolution!!?
Just started up my Log Viewer on a fresh install of Natty, and it complains there are a bunch of log files missing:
Code:
HOWEVER, this raises a number of questions.
1) Why are these files not here any more? I don't know of a single Linux distribution which doesn't have a /var/log/messages file.
2) Is the lack of these files to do with changes in Natty, or is there something badly wrong with my machine?
3) If these have been removed on purpose, where should I be looking for this information now?
4) Howcome this information wasn't broadcast to the community? One simple solution would be to retain the file /var/log/messages and fill it with the message "This file isn't used any more, please look in xxxx"
Code: <snip> Hit http://volatile.debian.org lenny/volatile/main Sources Hit http://http.us.debian.org stable/contrib Packages Ign http://packages.enlightenment.org lenny/main Packages/DiffIndex Hit http://http.us.debian.org stable/non-free Packages
[Code]...
W: Some index files failed to download, they have been ignored, or old ones used instead.W: You may want to run apt-get update to correct these problems
I was attempting to get crontab to kick off a daily job, but the job wont start. I opened /var/log/messages and noticed all the logs were from 6 months ago. I cleared the log and then did a tail -f so I could watch it for activity. I then hit my box with anunsuccessful log in attempt. Nothing happened to the log. The uptime of my box is 22 days and the logs that were in it before I cleared it were from months ago.Is there a daemon I can check or another file I can mod to get logs writing again?
I am running RHEL EL4. i have configured vsftp , everything works fine.The thing is that the FTP log messages are going into /var/log/messages . So i changed the log location by confuguring as follows
1. In the /etc/syslog.cong,
2.Change the line in /etc/logrotate.d/syslog
3. In /etc/vsftpd/vsftpd.conf
After the changes , i restarted the service for both ftp and syslog
Evenafter the above confguration , still the ftp log messages are going to the same dir /var/log/messages.
I'd like to see all messages given out by my fc12 system. So no graphical interface shows up when I shall type the bootloader-password or log-in with my user.
I was using Opensuse on Virtualbox earlier today. I issued the tail -f /var/log/messages command on Opensuse 11.3 to see the messages. Then I logged in from my Mac into Opensuse 11.3. I noticed that Opensuse was displaying realtime messages of the things happening. For eg, I entered a wrong su password and it displayed that too. But no such things were happening on my Fedora 13 installation. So is there any way if I could get some realtime messages on Fedora 13 too like the one on Opensuse..?
During boot-up and shutdown of Fedora-14-x86_64-Live-Desktop.iso live USB, I just see some graphical stuff. What needs to be done so that the screen shows text messages about what's happening during boot-up and shutdown?