[Logcheck-commits] r1253 - in logcheck/trunk: debian rulefiles/linux/ignore.d.server rulefiles/linux/violations.ignore.d

[madduck at users.alioth.debian.org]

Author: madduck
Date: 2006-10-18 20:03:31 +0000 (Wed, 18 Oct 2006)
New Revision: 1253

Added:
   logcheck/trunk/rulefiles/linux/violations.ignore.d/logcheck-dovecot
Modified:
   logcheck/trunk/debian/changelog
   logcheck/trunk/debian/logcheck-database.lintian-overrides
   logcheck/trunk/rulefiles/linux/ignore.d.server/dovecot
Log:
* ignore.d.server/dovecot: ignore PAM auth messages about unknown users.

Modified: logcheck/trunk/debian/changelog
===================================================================
--- logcheck/trunk/debian/changelog	2006-10-18 19:59:27 UTC (rev 1252)
+++ logcheck/trunk/debian/changelog	2006-10-18 20:03:31 UTC (rev 1253)
@@ -22,8 +22,9 @@
     a NIDS.
   * ignore.d.server/spamc: ignore warning about max message size limitation.
   * ignore.d.server/dovecot: ignore more messages about inactivity disonnects.
+  * ignore.d.server/dovecot: ignore PAM auth messages about unknown users.
 
- -- martin f. krafft <madduck at debian.org>  Wed, 18 Oct 2006 21:59:05 +0200
+ -- martin f. krafft <madduck at debian.org>  Wed, 18 Oct 2006 22:01:22 +0200
 
 logcheck (1.2.48) unstable; urgency=low
 

Modified: logcheck/trunk/debian/logcheck-database.lintian-overrides
===================================================================
--- logcheck/trunk/debian/logcheck-database.lintian-overrides	2006-10-18 19:59:27 UTC (rev 1252)
+++ logcheck/trunk/debian/logcheck-database.lintian-overrides	2006-10-18 20:03:31 UTC (rev 1253)
@@ -8,6 +8,7 @@
 logcheck-database binary: non-standard-file-perm etc/logcheck/violations.ignore.d/logcheck-courier 0640 != 0644
 logcheck-database binary: non-standard-file-perm etc/logcheck/violations.ignore.d/logcheck-cyrus 0640 != 0644
 logcheck-database binary: non-standard-file-perm etc/logcheck/violations.ignore.d/logcheck-dcc 0640 != 0644
+logcheck-database binary: non-standard-file-perm etc/logcheck/violations.ignore.d/logcheck-dovecot 0640 != 0644
 logcheck-database binary: non-standard-file-perm etc/logcheck/violations.ignore.d/logcheck-hylafax 0640 != 0644
 logcheck-database binary: non-standard-file-perm etc/logcheck/violations.ignore.d/logcheck-innd 0640 != 0644
 logcheck-database binary: non-standard-file-perm etc/logcheck/violations.ignore.d/logcheck-login 0640 != 0644

Modified: logcheck/trunk/rulefiles/linux/ignore.d.server/dovecot
===================================================================
--- logcheck/trunk/rulefiles/linux/ignore.d.server/dovecot	2006-10-18 19:59:27 UTC (rev 1252)
+++ logcheck/trunk/rulefiles/linux/ignore.d.server/dovecot	2006-10-18 20:03:31 UTC (rev 1253)
@@ -14,3 +14,4 @@
 ^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ dovecot: IMAP\([-_.@[:alnum:]]+\): Disconnected(: Logged out| for inactivity)?$
 ^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ dovecot: ssl-build-param: SSL parameters regeneration completed$
 ^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ dovecot: auth\(-_.[[:alnum:]]+\): (pg|my)sql: Connected to [-_.[:alnum:]]+$
+^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ dovecot-auth: \(pam_unix\) check pass; user unknown$

Added: logcheck/trunk/rulefiles/linux/violations.ignore.d/logcheck-dovecot
===================================================================
--- logcheck/trunk/rulefiles/linux/violations.ignore.d/logcheck-dovecot	                        (rev 0)
+++ logcheck/trunk/rulefiles/linux/violations.ignore.d/logcheck-dovecot	2006-10-18 20:03:31 UTC (rev 1253)
@@ -0,0 +1 @@
+^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ dovecot-auth: \(pam_unix\) authentication failure; logname= uid=0 euid=0 tty=dovecot ruser= rhost=$