[Logcheck-commits] CVS logcheck/rulefiles/linux/ignore.d.workstation
CVS User maks-guest
logcheck-devel@lists.alioth.debian.org
Fri, 27 Aug 2004 16:54:53 -0600
Update of /cvsroot/logcheck/logcheck/rulefiles/linux/ignore.d.workstation
In directory haydn:/tmp/cvs-serv16962/rulefiles/linux/ignore.d.workstation
Modified Files:
winbind
Log Message:
one of the winbind rule was infact a security event.
--- /cvsroot/logcheck/logcheck/rulefiles/linux/ignore.d.workstation/winbind 2004/08/27 16:14:10 1.1
+++ /cvsroot/logcheck/logcheck/rulefiles/linux/ignore.d.workstation/winbind 2004/08/27 22:54:53 1.2
@@ -1,2 +1 @@
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ pam_winbind\[[0-9]+\]: user '[._[:alnum:]-]+' granted acces$
-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ pam_winbind\[[0-9]+\]: request failed: No such user, PAM error was [0-9]+, NT error was [_[:alpha:]]+$