From sec@wg.camelot.de  Tue Oct  8 14:19:54 1996
Received: from who.cdrom.com (who.cdrom.com [204.216.27.3])
          by freefall.freebsd.org (8.7.5/8.7.3) with ESMTP id OAA27069
          for <FreeBSD-gnats-submit@freebsd.org>; Tue, 8 Oct 1996 14:19:54 -0700 (PDT)
Received: from robin.camelot.de (root@robin.camelot.de [194.97.87.3])
          by who.cdrom.com (8.7.5/8.6.11) with SMTP id OAA08913
          for <FreeBSD-gnats-submit@freebsd.org>; Tue, 8 Oct 1996 14:19:51 -0700 (PDT)
Received: from matrix.wg.camelot.de(really [195.30.3.17]) by robin.camelot.de
	via sendmail with esmtp
	id <m0vAjXW-000380C@robin.camelot.de>
	for <FreeBSD-gnats-submit@freebsd.org>; Tue, 8 Oct 1996 23:18:10 +0200 (MET DST)
	(Smail-3.2 1996-Jul-4 #1 built DST-Jul-28)
Received: (from sec@localhost) by matrix.wg.camelot.de (8.6.12/8.6.12) id XAA02870; Tue, 8 Oct 1996 23:17:02 +0200
Message-Id: <199610082117.XAA02870@matrix.wg.camelot.de>
Date: Tue, 8 Oct 1996 23:17:02 +0200
From: Stefan Zehl <sec@wg.camelot.de>
Reply-To: sec@wg.camelot.de
To: FreeBSD-gnats-submit@freebsd.org
Subject: syslog may log false timestamps
X-Send-Pr-Version: 3.2

>Number:         1739
>Category:       bin
>Synopsis:       syslog may log false timestamps
>Confidential:   no
>Severity:       non-critical
>Priority:       low
>Responsible:    freebsd-bugs
>State:          closed
>Quarter:
>Keywords:
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Tue Oct  8 14:20:00 PDT 1996
>Closed-Date:    Mon Oct 21 12:51:41 PDT 1996
>Last-Modified:  Mon Oct 21 12:52:04 PDT 1996
>Originator:     Stefan Zehl
>Release:        FreeBSD 2.1-STABLE i386
>Organization:
>Environment:

FreeBSD matrix 2.1.0-RELEASE FreeBSD 2.1.0-RELEASE #0: Sat Jun 29 18:37:23 MET DST 1996     sec@matrix:/usr/src/sys/compile/MATRIX  i386

>Description:

syslog pays attention to the Timezone, so any user may log entrys
with wrong timestamps... especially in non-GMT-countrys 
the kernel logs in GMT 
Oct  8 21:27:55 robin /kernel: sio4: 1 more silo overflow (total 24)
Oct  8 22:28:08 robin comsat[3926]: connect from localhost.camelot.de
Oct  8 21:28:12 robin /kernel: sio12: 1 more silo overflow (total 255)

>How-To-Repeat:

in ksh type:
TZ=GMT+9 logger "Test @ `date`"

>Fix:
	
none known
>Release-Note:
>Audit-Trail:
State-Changed-From-To: open->closed 
State-Changed-By: phk 
State-Changed-When: Mon Oct 21 12:51:41 PDT 1996 
State-Changed-Why:  
fixed. 
>Unformatted:
