[Logcheck-commits] Hannes von Haugwitz: Added rules for successful non-root login to text console.

Hannes von Haugwitz hvh-guest at alioth.debian.org
Sun Jan 10 06:45:27 UTC 2010


Module: logcheck
Branch: master
Commit: 060e2523937ec7efd55bba5f015f9914f491168b
URL:    http://git.debian.org/?p=logcheck/logcheck.git;a=commit;h=060e2523937ec7efd55bba5f015f9914f491168b

Author: Hannes von Haugwitz <hannes at vonhaugwitz.com>
Date:   Sun Jan 10 07:37:07 2010 +0100

Added rules for successful non-root login to text console.

---

 debian/changelog                           |    1 +
 rulefiles/linux/ignore.d.workstation/login |    2 ++
 2 files changed, 3 insertions(+), 0 deletions(-)

diff --git a/debian/changelog b/debian/changelog
index 65ad555..8ea4f3b 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,6 +1,7 @@
 logcheck (1.3.6) UNRELEASED; urgency=low
 
   [ Hannes von Haugwitz ]
+  * Added rules for successful non-root login to text console.
   * ignore.d.server/kernel:
     - ignore ext4 mount message
   * ignore.d.server/login
diff --git a/rulefiles/linux/ignore.d.workstation/login b/rulefiles/linux/ignore.d.workstation/login
new file mode 100644
index 0000000..1ecd7af
--- /dev/null
+++ b/rulefiles/linux/ignore.d.workstation/login
@@ -0,0 +1,2 @@
+^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ login\[[0-9]+\]: '[[:alnum:]-]+' logged in  on '/dev/tty[0-9]'$
+^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ login\[[0-9]+\]: pam_krb5\(login:auth\): user [[:alnum:]-]+ authenticated as [[:alnum:]-]+@[.A-Z]+$




More information about the Logcheck-commits mailing list