[Logcheck-commits] CVS logcheck/rulefiles/linux/violations.ignore.d

CVS User jlps-guest logcheck-devel at lists.alioth.debian.org
Sat Feb 4 18:15:00 UTC 2006


Update of /cvsroot/logcheck/logcheck/rulefiles/linux/violations.ignore.d
In directory haydn:/tmp/cvs-serv22254

Modified Files:
	logcheck-su 
Log Message:
Update rules for login 4.0.x


--- /cvsroot/logcheck/logcheck/rulefiles/linux/violations.ignore.d/logcheck-su	2005/04/02 20:36:56	1.4
+++ /cvsroot/logcheck/logcheck/rulefiles/linux/violations.ignore.d/logcheck-su	2006/02/04 18:15:00	1.5
@@ -3,3 +3,4 @@
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ su\[[0-9]+\]: \(pam_[[:alnum:]]+\) session opened for user [[:alnum:]-]+ by [[:alnum:]-]+\(uid=[0-9]+\)$
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ su\[[0-9]+\]: \(pam_[[:alnum:]]+\) session closed for user [[:alnum:]-]+$
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ su\[[0-9]+\]: \+ \?\?\? root:[_[:alnum:]-]+$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ su\[[0-9]+\]: Successful su for [[:alnum:]-]+ by [[:alnum:]-]+$



More information about the Logcheck-commits mailing list