[Logcheck-commits] Hannes von Haugwitz: Added rules for successful non-root login to text console.
Gerfried Fuchs
alfie at alioth.debian.org
Mon Feb 8 17:44:28 UTC 2010
Module: logcheck
Branch: lenny-backports
Commit: 060e2523937ec7efd55bba5f015f9914f491168b
URL: http://git.debian.org/?p=logcheck/logcheck.git;a=commit;h=060e2523937ec7efd55bba5f015f9914f491168b
Author: Hannes von Haugwitz <hannes at vonhaugwitz.com>
Date: Sun Jan 10 07:37:07 2010 +0100
Added rules for successful non-root login to text console.
---
debian/changelog | 1 +
rulefiles/linux/ignore.d.workstation/login | 2 ++
2 files changed, 3 insertions(+), 0 deletions(-)
diff --git a/debian/changelog b/debian/changelog
index 65ad555..8ea4f3b 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,6 +1,7 @@
logcheck (1.3.6) UNRELEASED; urgency=low
[ Hannes von Haugwitz ]
+ * Added rules for successful non-root login to text console.
* ignore.d.server/kernel:
- ignore ext4 mount message
* ignore.d.server/login
diff --git a/rulefiles/linux/ignore.d.workstation/login b/rulefiles/linux/ignore.d.workstation/login
new file mode 100644
index 0000000..1ecd7af
--- /dev/null
+++ b/rulefiles/linux/ignore.d.workstation/login
@@ -0,0 +1,2 @@
+^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ login\[[0-9]+\]: '[[:alnum:]-]+' logged in on '/dev/tty[0-9]'$
+^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ login\[[0-9]+\]: pam_krb5\(login:auth\): user [[:alnum:]-]+ authenticated as [[:alnum:]-]+@[.A-Z]+$
More information about the Logcheck-commits
mailing list