[Logcheck-devel] Bug#443171: Bug#443171: Bug#443171: Bug#443171: rules to ignore acpid messages
maximilian attems
max at stro.at
Fri Sep 21 13:39:38 UTC 2007
On Fri, Sep 21, 2007 at 07:18:35AM -0400, Justin Pryzby wrote:
> .*$ makes sense to me as a form of self-documentation. When it's
> present, it's easy to tell that the line is not just some partial
> copy+paste gone wrong.
sorry for having jumped in without reading previous posts,
but .*$ and .+$ is pretty stupid,
back in the days i reviewed the rules we never allowed such.
but in these days i'd like to more focus on proactive security like
selinux. (big item on debian TODO ;)
--
maks
More information about the Logcheck-devel
mailing list