[Logcheck-devel] Bug#307588: logcheck-database: Patterns in /etc/logcheck/ignore.d.workstation/udev are too strict

[Martin Schwenke]

Package: logcheck-database
Version: 1.2.39
Severity: minor


The patterns for udev are a bit too strict.  In particular, they don't
match this sort of thing:

  May  4 12:10:34 localhost udev[5851]: configured rule in '/etc/udev/rules.d/udev.rules[59]' applied, 'pcmC0D0c' becomes 'snd/%k'
  May  4 12:10:34 localhost udev[5851]: creating device node '/dev/snd/pcmC0D0c'

Problems include:

* Failure to match mixed alphanumeric device names like "pcmC0D0c".

* Failure to match subdirectory in front of %k.

I'm using these:

^\w{3} [ :0-9]{11} [._[:alnum:]-]+ udev\[[0-9]+\]: (creating|removing) device node '/dev(/[[:alpha:]][[:alnum:]]*)+'$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ udev\[[0-9]+\]: configured rule in '[\./:[:alnum:]-]+\[[0-9]+\]' applied, (added symlink '[[:alnum:]]+'|'[[:alpha:]][[:alnum:]]*' becomes '([[:alpha:]][[:alnum:]]*/)+%k')$

and they seem to match all the relevant udev output.

Thanks...

peace & happiness,
martin

-- System Information:
Debian Release: 3.1
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)
Kernel: Linux 2.6.12-rc3
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)

Versions of packages logcheck-database depends on:
ii  debconf [debconf-2.0]         1.4.48     Debian configuration management sy

-- debconf information:
* logcheck-database/rules-directories-note:
  logcheck-database/standard-rename-note:
  logcheck-database/conffile-cleanup: false