[Logcheck-devel] logcheck reference in debians harden-doc

Gerfried Fuchs alfie at ist.org
Mon Jul 12 11:01:05 UTC 2004


* maks attems <debian at sternwelten.at> [2004-07-12 12:24]:
> --- after-install.sgml.orig	2004-07-12 12:00:06.000000000 +0200
> +++ after-install.sgml	2004-07-12 12:16:18.000000000 +0200
> @@ -1208,12 +1208,13 @@
>  
>  <sect1 id="custom-logcheck">Using and customising <prgn>logcheck</prgn>
>  
> -<p>The <prgn>logcheck</prgn> package in Debian is divided into two
> -packages <package>logcheck</package> (the main program) and
> +<p>The <prgn>logcheck</prgn> package in Debian is divided into three
                                                             ^^^^^^^^^^
> +packages <package>logcheck</package> (the main program), 
   ^^^^^^^^
>  <package>logcheck-database</package> (a database of regular
> -expressions for the program). The Debian default (in
> +expressions for the program) and <package>logtail</package> (prints
> +loglines that have not yet been read). The Debian default (in

 Please write either "into three packages: " or "into the three packages "
-- would sound much better, IMHO.  I'm no native speaker, though.

> +<p>The best way to configure <prgn>logcheck</prgn> is to edit its
> +main configuration file <file>/etc/logcheck/logcheck.conf</file> 
> +after installation. Change the default user (root) whom reports
                                                     ^
 Maybe add a "to" here?

> +should be mailed. You should set there the reportlevel.
                                    the reportlevel in there, too.
>  
>  <p>Once this is done you might want to check the mails that are sent, for the
>  first few days/weeks/months. If you find you are sent messages you do not wish 
>  to receive, just add the regular expressions (see
> +<manref name="regex" section="7"> and <manref name="egrep" section="1">) that
> +correspond to these messages to the
> +<file>/etc/logcheck/ignore.d.{reportlevel}/local</file>. Try to match the

 Uhm, I'm not sure if the {} around reportlevel here would be taken
correctly. I am not good in debiandoc but some <var> tag or such should
be better, IMHO.

> +hole logline. Details on howto write rules are explained in
> +<file>/usr/share/doc/logcheck-database/README.logcheck-database.gz</file>

 Trailing . missing from this sentence.

 So long,
Alfie
-- 
"you learned how to creep and you learned how to crawl
 but you never really learned anything at all"
                                  -- Clawfinger, "Catch Me"
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : http://lists.alioth.debian.org/pipermail/logcheck-devel/attachments/20040712/bb6cb4d6/attachment.pgp 


More information about the Logcheck-devel mailing list