[Logcheck-devel] [PATCH] Added libpam-mount rule "realpath of volume $FOO is $BAR"

[Frédéric Brière]

This (useless, IMO) message is issued by libpam-mount when checking whether
or not a volume is already mounted.

Since pam_mount is typically invoked by various login services (login, ssh,
xdm, etc.), it's probably best to leave this field blank instead of trying
to list them all.
---
 rulefiles/linux/ignore.d.server/libpam-mount |    1 +
 1 files changed, 1 insertions(+), 0 deletions(-)
 create mode 100644 rulefiles/linux/ignore.d.server/libpam-mount

diff --git a/rulefiles/linux/ignore.d.server/libpam-mount b/rulefiles/linux/ignore.d.server/libpam-mount
new file mode 100644
index 0000000..07d79f4
--- /dev/null
+++ b/rulefiles/linux/ignore.d.server/libpam-mount
@@ -0,0 +1 @@
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ [-[:alnum:]]+\[[0-9]+\]: pam_mount\(mount.c:[[:digit:]]+\) realpath of volume "[.[:alnum:]/_-]+" is "[.[:alnum:]/_-]+"$
-- 
1.5.3.8