[Logcheck-commits] Frédéric Brière : Removed the old PAM session syntax rules, which are covered by the new syntax

Frédéric Brière fbriere-guest at alioth.debian.org
Sat Mar 15 03:43:40 UTC 2008


Module: logcheck
Branch: master
Commit: 163a988e6698f201158937aebd1d644d12bb9abd
URL:    http://git.debian.org/?p=logcheck/logcheck.git/?a=commit;h=163a988e6698f201158937aebd1d644d12bb9abd

Author: Frédéric Brière <fbriere at fbriere.net>
Date:   Fri Jan 25 00:46:00 2008 -0500

Removed the old PAM session syntax rules, which are covered by the new syntax

---

 rulefiles/linux/ignore.d.server/logcheck |    2 --
 1 files changed, 0 insertions(+), 2 deletions(-)

diff --git a/rulefiles/linux/ignore.d.server/logcheck b/rulefiles/linux/ignore.d.server/logcheck
index 767e27f..a2272ec 100644
--- a/rulefiles/linux/ignore.d.server/logcheck
+++ b/rulefiles/linux/ignore.d.server/logcheck
@@ -1,7 +1,5 @@
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ ([[:alnum:]]+\[[0-9]+\])?: \(pam_[[:alnum:]]+\) session opened for user [.[:alnum:]-]+ by (root|LOGIN)?\(uid=0\)$
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ ([[:alnum:]]+\[[0-9]+\])?: \(pam_[[:alnum:]]+\) session closed for user [.[:alnum:]-]+$
-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ ([[:alnum:]]+\[[0-9]+\])?: pam_[[:alnum:]]+\([[:alnum:]]+:session\): session opened for user [.[:alnum:]-]+ by (root|LOGIN)?\(uid=0\)$
-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ ([[:alnum:]]+\[[0-9]+\])?: pam_[[:alnum:]]+\([[:alnum:]]+:session\): session closed for user [.[:alnum:]-]+$
 # new pam format
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ ([[:alnum:]]+\[[0-9]+\])?: pam_[[:alnum:]]+\([[:alnum:]]+:[[:alnum:]]+\): session opened for user [.[:alnum:]-]+ by (root|LOGIN)?\(uid=0\)$
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ ([[:alnum:]]+\[[0-9]+\])?: pam_[[:alnum:]]+\([[:alnum:]]+:[[:alnum:]]+\): session closed for user [.[:alnum:]-]+$




More information about the Logcheck-commits mailing list