Bug 575736

Summary:	/var/log/nscd.log grows rapidly
Product:	[openSUSE] openSUSE 11.2	Reporter:	Kang-Jin Lee <lee>
Component:	Basesystem	Assignee:	Petr Baudis <pbaudis>
Status:	RESOLVED FIXED	QA Contact:	E-mail List <qa-bugs>
Severity:	Major
Priority:	P5 - None	CC:	lnussel, markus, meissner, tvrtko
Version:	Final
Target Milestone:	---
Hardware:	x86-64
OS:	openSUSE 11.2
Whiteboard:	.
Found By:	---	Services Priority:
Business Priority:		Blocker:	---
Marketing QA Status:	---	IT Deployment:	---

Description Kang-Jin Lee 2010-02-01 15:12:17 UTC

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.9.2) Gecko/20100115 Firefox/3.6 (.NET CLR 3.5.30729)

After installing unscd-0.45-0.1.1.x86_64 nscd.log file contains more verbose debugging info than the earlier version.

It seems that the new version was compiled with different default values.

Reproducible: Always

Steps to Reproduce:
1.
2.
3.

Comment 1 Kang-Jin Lee 2010-02-02 14:33:45 UTC

Setting

debug-level 0

in /etc/nscd.conf doesn't stop nscd dumping debug messages in /var/log/nscd.log

Addtionally, the entries in the log file uses UTC instead of local time.

Comment 2 Ludwig Nussel 2010-02-22 13:30:16 UTC

my filesystem was full because of that log file. The default logging level is too high and debug-level handling in nscd.conf is broken (handle_debuglvl() only adds the value there so no way to decrease built-in level).
Moreover, since /var/log/nscd.log is world readable everyone in the system can see e.g. all dns queries of other users.

This issue justifies an update for 11.2 IMHO.

Comment 3 Christian Dengler 2010-02-23 13:42:15 UTC

For an update. +1

Comment 4 Marcus Meissner 2010-02-24 12:52:00 UTC

aölso for an update +1

Comment 5 Swamp Workflow Management 2010-02-24 12:57:09 UTC

The SWAMPID for this issue is 31446.
Please submit the patch and patchinfo file using this ID.
(https://swamp.suse.de/webswamp/wf/31446)

Comment 6 Christian Dengler 2010-02-24 12:57:59 UTC

Be so kind and prepare an update for it.

Comment 7 Petr Baudis 2010-03-03 11:55:25 UTC

Sorry for the delay, I will try to prepare it ASAP.

Comment 8 Tvrtko Ursulin 2010-03-15 09:01:00 UTC

Same problem here, fills the whole /var after some time because it seems to be logging things very verbosely. Apart from the direct issues (DOS & security), should it have a logrotate configuration which would alleviate this a bit (for one part at least)?

Comment 9 Markus Gaugusch 2010-04-01 11:30:28 UTC

Any news on this one? Also, the permissions of the file are wrong (0666 instead of 0644 or even 0600)

Comment 10 Christian Dengler 2010-04-06 10:52:51 UTC

(In reply to comment #9)
> Any news on this one? Also, the permissions of the file are wrong (0666 instead
> of 0644 or even 0600)

No news, sorry.

Petr, be so kind and submit it contemporary. :-)

Comment 11 Petr Baudis 2010-04-27 11:30:21 UTC

Update submitted, sorry for all the delays. :-(

Comment 12 Swamp Workflow Management 2010-05-03 11:14:11 UTC

Update released for: unscd, unscd-debuginfo, unscd-debugsource
Products:
openSUSE 11.2 (debug, i586, x86_64)