[Logcheck-devel] Bug#463051: logcheck: ignore for cron needs to handle full paths

[Ariel]

Package: logcheck
Version: 1.2.54
Severity: normal
Tags: patch

Regarding this line (and the other 2 like it - which BTW could be merged) in ignore.d.server/cron:

^\w{3} [ :0-9]{11} [._[:alnum:]-]+ crontab\[[0-9]+\]: \([[:alnum:]-]+\) LIST \([[:alnum:]-]+\)$

If someone types /usr/bin/crontab the line will not match it and the
output will be emailed. Someone could also type ../bin/crontab, and
other similar cwd dependant things.

Especially since my install this every few hours (so it's not just when
a user does a manual listing):

Jun 13 08:00:14 www /usr/bin/crontab[14180]: (root) LIST (nobody)

I don't remember which program causes this, but anyway it should be easy
to modify the rule to ignore it with or without a path.

-- System Information:
Debian Release: 4.0
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.18
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)