Ubuntu
rsyslog package

No more syslog update after the 21st of August

Bug #1363129 reported by David Barth
This bug report is a duplicate of:  Bug #1332538: No UID checks on rootfs updates. Edit Remove
14
This bug affects 2 people
Affects Status Importance Assigned to Milestone
rsyslog (Ubuntu)
Confirmed
High
Unassigned

Bug Description

Since the 21st of August, my phone doesn't have any other syslog update.

I noticed the files had started being owned by 'usermetrics'.

Some details:

$ ls /var/log/syslog
-rw-r----- 1 root adm 9076723 Aug 21 11:56 /var/log/syslog
$ ls /var
drwxrwxr-x 12 root usermetrics 4096 Aug 29 07:49 log

$ df /var/log
Filesystem 1K-blocks Used Available Use% Mounted on
/dev/mmcblk0p23 5942324 2263384 3376708 41% /var/log

Tags: rtm14
Revision history for this message
Oliver Grawert (ogra) wrote :

i think rsyslogd can only write if teh file/dir is owned by teh syslog user, it seems like the GID for syslog changed under you....

Ricardo Salveti (rsalveti)
tags: added: rtm14
Changed in rsyslog (Ubuntu):
status: New → Confirmed
importance: Undecided → High
Revision history for this message
Oliver Grawert (ogra) wrote :

can you check if there is anything more in the files in /var/lib/extrausers than the phablet user/group ? (or even attach the files)

Revision history for this message
David Barth (dbarth) wrote :

Only phablet AFAICT:

$ sudo cat /var/lib/extrausers/*
phablet:x:32011:
phablet:x:32011:32011:phablet,,,:/home/phablet:/bin/bash
phablet::16307:0:99999:7:::
phablet:XXXXXXXX1:16307:0:99999:7:::

Revision history for this message
Jamie Strandboge (jdstrand) wrote :

I saw this too on ubuntu-rtm image

$ ls -l /var/log/syslog
-rw-r----- 1 usermetrics adm 1809282 Aug 21 13:30 /var/log/syslog

'phablet' is only user in group, passwd and shadow from /var/lib/extrausers/*

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.