[Logcheck-commits] CVS logcheck/rulefiles/linux/violations.ignore.d
CVS User jlps-guest
logcheck-devel at lists.alioth.debian.org
Sat Feb 4 18:15:00 UTC 2006
Update of /cvsroot/logcheck/logcheck/rulefiles/linux/violations.ignore.d
In directory haydn:/tmp/cvs-serv22254
Modified Files:
logcheck-su
Log Message:
Update rules for login 4.0.x
--- /cvsroot/logcheck/logcheck/rulefiles/linux/violations.ignore.d/logcheck-su 2005/04/02 20:36:56 1.4
+++ /cvsroot/logcheck/logcheck/rulefiles/linux/violations.ignore.d/logcheck-su 2006/02/04 18:15:00 1.5
@@ -3,3 +3,4 @@
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ su\[[0-9]+\]: \(pam_[[:alnum:]]+\) session opened for user [[:alnum:]-]+ by [[:alnum:]-]+\(uid=[0-9]+\)$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ su\[[0-9]+\]: \(pam_[[:alnum:]]+\) session closed for user [[:alnum:]-]+$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ su\[[0-9]+\]: \+ \?\?\? root:[_[:alnum:]-]+$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ su\[[0-9]+\]: Successful su for [[:alnum:]-]+ by [[:alnum:]-]+$
More information about the Logcheck-commits
mailing list