[Logcheck-commits] r1297 - in logcheck/trunk: debian rulefiles/linux/violations.ignore.d

madduck at users.alioth.debian.org madduck at users.alioth.debian.org
Fri Nov 3 18:45:26 CET 2006


Author: madduck
Date: 2006-11-03 18:45:26 +0100 (Fri, 03 Nov 2006)
New Revision: 1297

Modified:
   logcheck/trunk/debian/changelog
   logcheck/trunk/rulefiles/linux/violations.ignore.d/logcheck-su
Log:
* violations.ignore.d/logcheck-su: ignore redundant message about
  authentication failure, which provides no additional information.

Modified: logcheck/trunk/debian/changelog
===================================================================
--- logcheck/trunk/debian/changelog	2006-11-03 17:44:30 UTC (rev 1296)
+++ logcheck/trunk/debian/changelog	2006-11-03 17:45:26 UTC (rev 1297)
@@ -3,8 +3,10 @@
   * ignore.d.server/kernel: ignore message about device-mapper loading.
   * ignore.d.workstation/kernel: ignore messages related to pmount and USB
     hotplugged storage devices.
+  * violations.ignore.d/logcheck-su: ignore redundant message about
+    authentication failure, which provides no additional information.
 
- -- martin f. krafft <madduck at debian.org>  Fri,  3 Nov 2006 18:44:03 +0100
+ -- martin f. krafft <madduck at debian.org>  Fri,  3 Nov 2006 18:44:55 +0100
 
 logcheck (1.2.50) unstable; urgency=low
 

Modified: logcheck/trunk/rulefiles/linux/violations.ignore.d/logcheck-su
===================================================================
--- logcheck/trunk/rulefiles/linux/violations.ignore.d/logcheck-su	2006-11-03 17:44:30 UTC (rev 1296)
+++ logcheck/trunk/rulefiles/linux/violations.ignore.d/logcheck-su	2006-11-03 17:45:26 UTC (rev 1297)
@@ -4,3 +4,4 @@
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ su\[[0-9]+\]: \(pam_[[:alnum:]]+\) session closed for user [[:alnum:]-]+$
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ su\[[0-9]+\]: \+ \?\?\? root:[_[:alnum:]-]+$
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ su\[[0-9]+\]: Successful su for [[:alnum:]-]+ by [[:alnum:]-]+$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ su\[[0-9]+\]: pam_authenticate: Authentication failure$




More information about the Logcheck-commits mailing list