[Logcheck-devel] Bug#440123: ignore.d.server/logcheck: please update for pam 0.99+

Aaron M. Ucko ucko at debian.org
Thu Aug 30 00:27:44 UTC 2007


Package: logcheck-database
Version: 1.2.60
Severity: normal
File: /etc/logcheck/ignore.d.server/logcheck

The recent pam upgrade in unstable introduced a new message format;
could you please update the patterns in ignore.d.server/logcheck
accordingly?  Specifically, could you please add the following two
lines (modeled after the current first two lines)?

^\w{3} [ :0-9]{11} [._[:alnum:]-]+ ([[:alnum:]]+\[[0-9]+\])?: pam_[[:alnum:]]+\([[:alnum:]]+:[[:alnum:]]+\): session opened for user [.[:alnum:]-]+ by (root|LOGIN)?\(uid=0\)$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ ([[:alnum:]]+\[[0-9]+\])?: pam_[[:alnum:]]+\([[:alnum:]]+:[[:alnum:]]+\): session closed for user [.[:alnum:]-]+$

Thanks!

-- System Information:
Debian Release: lenny/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'testing'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.22.1 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

-- debconf information:
  logcheck-database/rules-directories-note:
  logcheck-database/standard-rename-note:
  logcheck-database/conffile-cleanup: false





More information about the Logcheck-devel mailing list