Bug#249474: [Logcheck-devel] Bug#249474: logcheck-database: more "session opened" and "session closed" lines getting through

[maks attems]

On Mon, 17 May 2004, Dan Christensen wrote:

> logcheck e-mails me the following lines when I log in and out of xdm:
> 
>   May 17 12:54:07 jdc    : (pam_unix) session closed for user jdc
>   May 17 12:55:23 jdc    : (pam_unix) session opened for user jdc by root(uid=0)
> 
> And this line when I log in on the console:
> 
>   May 17 12:54:14 jdc login[26025]: (pam_unix) session opened for user root by LOGIN(uid=0)

ok we don't have rules for the above,
we will add rules for aboves line for next release.
 
> And this line when I log in via ssh:
> 
>   May 16 14:27:55 jdc sshd[26584]: (pam_unix) session opened for user root by root(uid=0)

this one is already catched in cvs.
 
> Also, reportbug generated the information at the bottom of this
> message, but it isn't all correct.  I have
> 
>   REPORTLEVEL="server"
> 
> in my logcheck.conf file.

you might want to use workstation for a machine that is running xdm?
anyways thanks for your bugreport.
a++ maks

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : http://lists.alioth.debian.org/pipermail/logcheck-devel/attachments/20040517/d18cd510/attachment.pgp