[Logcheck-devel] Bug#508335: logcheck-database: xdm rules don't match

[Frédéric Brière]

On Wed, Dec 10, 2008 at 11:21:53AM +0100, Ferenc Wagner wrote:
> ^\w{3} [ :0-9]{11} [._[:alnum:]-]+[[:space:]]+: \(pam_[[:alnum:]]+\) session opened for user [[:alnum:]-]+ by \(uid=[0-9]+\)$
> ^\w{3} [ :0-9]{11} [._[:alnum:]-]+[[:space:]]+: \(pam_[[:alnum:]]+\) session closed for user [[:alnum:]-]+$
> 
> Of these, the first two haven't got anything to do with xdm and should be removed.

I think they still apply to etch's old libpam, so I'm reluctant to
remove them at the moment.

> The last two on the other hand never matches, as current log lines are formatted like:

Thanks.  I had already applied a similar fix before seeing this bug
report, so I'll add a closing statement in the changelog.


-- 
<sangr> home is where the highest bandwidth is