[Logcheck-commits] Frédéric Brière : ignore.d.server/scponly: added missing process name before PID

Frédéric Brière fbriere-guest at alioth.debian.org
Tue Aug 18 22:07:40 UTC 2009


Module: logcheck
Branch: master
Commit: 6026bc80ed85a5910ce2a7b8c767587b9969ec64
URL:    http://git.debian.org/?p=logcheck/logcheck.git;a=commit;h=6026bc80ed85a5910ce2a7b8c767587b9969ec64

Author: Frédéric Brière <fbriere at fbriere.net>
Date:   Tue Aug 18 18:00:31 2009 -0400

ignore.d.server/scponly: added missing process name before PID

---

 debian/changelog                        |    2 ++
 rulefiles/linux/ignore.d.server/scponly |    2 +-
 2 files changed, 3 insertions(+), 1 deletions(-)

diff --git a/debian/changelog b/debian/changelog
index 3f8573c..cc08720 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -22,6 +22,8 @@ logcheck (1.3.4) experimental; urgency=low
     - added "authentication succeeded' rule
   * ignore.d.server/dhcp:
     - interface names can have underscore in them (closes: #518422)
+  * ignore.d.server/scponly:
+    - added missing process name before PID
 
  -- Frédéric Brière <fbriere at fbriere.net>  Mon, 17 Aug 2009 11:48:08 -0400
 
diff --git a/rulefiles/linux/ignore.d.server/scponly b/rulefiles/linux/ignore.d.server/scponly
index cf9400e..d547bef 100644
--- a/rulefiles/linux/ignore.d.server/scponly
+++ b/rulefiles/linux/ignore.d.server/scponly
@@ -1 +1 @@
-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ \[[0-9]+\]: running: /(usr/)?bin/(groups|ls|mkdir|mv|pwd|rm|rsync|scp).* \(username: [._[:alnum:]-]+\([0-9]+\), IP/port: [.:[:alnum:]]+ [0-9]+ 22\)$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ scponly\[[0-9]+\]: running: /(usr/)?bin/(groups|ls|mkdir|mv|pwd|rm|rsync|scp).* \(username: [._[:alnum:]-]+\([0-9]+\), IP/port: [.:[:alnum:]]+ [0-9]+ 22\)$




More information about the Logcheck-commits mailing list