575736 – /var/log/nscd.log grows rapidly

Bug 575736 - /var/log/nscd.log grows rapidly

Summary: /var/log/nscd.log grows rapidly

Status:	RESOLVED FIXED

Alias:	None

Product:	openSUSE 11.2
Classification:	openSUSE
Component:	Basesystem (show other bugs)
Version:	Final
Hardware:	x86-64 openSUSE 11.2

Priority:	P5 - None Severity: Major with 1 vote (vote)
Target Milestone:	---
Assignee:	Petr Baudis
QA Contact:	E-mail List

URL:
Whiteboard:	.
Keywords:

Depends on:
Blocks:

Clone This Bug

Reported:	2010-02-01 15:12 UTC by Kang-Jin Lee
Modified:	2010-05-03 11:14 UTC (History)
CC List:	4 users (show)

See Also:
Found By:	---
Services Priority:
Business Priority:
Blocker:	---
Marketing QA Status:	---
IT Deployment:	---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Kang-Jin Lee 2010-02-01 15:12:17 UTC

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.9.2) Gecko/20100115 Firefox/3.6 (.NET CLR 3.5.30729)

After installing unscd-0.45-0.1.1.x86_64 nscd.log file contains more verbose debugging info than the earlier version.

It seems that the new version was compiled with different default values.

Reproducible: Always

Steps to Reproduce:
1.
2.
3.

Comment 1 Kang-Jin Lee 2010-02-02 14:33:45 UTC

Setting

debug-level 0

in /etc/nscd.conf doesn't stop nscd dumping debug messages in /var/log/nscd.log

Addtionally, the entries in the log file uses UTC instead of local time.

Comment 2 Ludwig Nussel 2010-02-22 13:30:16 UTC

my filesystem was full because of that log file. The default logging level is too high and debug-level handling in nscd.conf is broken (handle_debuglvl() only adds the value there so no way to decrease built-in level).
Moreover, since /var/log/nscd.log is world readable everyone in the system can see e.g. all dns queries of other users.

This issue justifies an update for 11.2 IMHO.

Comment 3 Christian Dengler 2010-02-23 13:42:15 UTC

For an update. +1

Comment 4 Marcus Meissner 2010-02-24 12:52:00 UTC

aölso for an update +1

Comment 5 Swamp Workflow Management 2010-02-24 12:57:09 UTC

The SWAMPID for this issue is 31446.
Please submit the patch and patchinfo file using this ID.
(https://swamp.suse.de/webswamp/wf/31446)

Comment 6 Christian Dengler 2010-02-24 12:57:59 UTC

Be so kind and prepare an update for it.

Comment 7 Petr Baudis 2010-03-03 11:55:25 UTC

Sorry for the delay, I will try to prepare it ASAP.

Comment 8 Tvrtko Ursulin 2010-03-15 09:01:00 UTC

Same problem here, fills the whole /var after some time because it seems to be logging things very verbosely. Apart from the direct issues (DOS & security), should it have a logrotate configuration which would alleviate this a bit (for one part at least)?

Comment 9 Markus Gaugusch 2010-04-01 11:30:28 UTC

Any news on this one? Also, the permissions of the file are wrong (0666 instead of 0644 or even 0600)

Comment 10 Christian Dengler 2010-04-06 10:52:51 UTC

(In reply to comment #9)
> Any news on this one? Also, the permissions of the file are wrong (0666 instead
> of 0644 or even 0600)

No news, sorry.

Petr, be so kind and submit it contemporary. :-)

Comment 11 Petr Baudis 2010-04-27 11:30:21 UTC

Update submitted, sorry for all the delays. :-(

Comment 12 Swamp Workflow Management 2010-05-03 11:14:11 UTC

Update released for: unscd, unscd-debuginfo, unscd-debugsource
Products:
openSUSE 11.2 (debug, i586, x86_64)