[Logcheck-commits] r1203 - in logcheck/trunk: debian rulefiles/linux/violations.ignore.d

[maks-guest at users.alioth.debian.org]

Author: maks-guest
Date: 2006-07-25 07:20:36 +0000 (Tue, 25 Jul 2006)
New Revision: 1203

Added:
   logcheck/trunk/rulefiles/linux/violations.ignore.d/logcheck-login
Modified:
   logcheck/trunk/debian/changelog
Log:
ignore root logins on tty's:
Jul 25 08:52:12 nancy login[5956]: ROOT LOGIN  on 'tty2'


Modified: logcheck/trunk/debian/changelog
===================================================================
--- logcheck/trunk/debian/changelog	2006-07-25 07:03:55 UTC (rev 1202)
+++ logcheck/trunk/debian/changelog	2006-07-25 07:20:36 UTC (rev 1203)
@@ -20,6 +20,7 @@
   * ignore.d.workstation/kernel: Ignore oprofile loading.
   * ignore.d.workstation/kernel: Ignore removable device plugging.
   * ignore.d.server/dhclient: Ignore recorded leas output and bound renewal.
+  * violations.ignore.d/logcheck-login: Ignore successful root logins on tty's.
 
   [ martin f. krafft ]
   * ignore.d.server/pdns: ignore failure to get SOA serial from supermasters
@@ -27,7 +28,7 @@
   * ignore.d.server/cron-apt: fixed several rules for corner cases.
   * ignore.d.server/postfix: added rule for server greeting timeout.
 
- -- maximilian attems <maks at sternwelten.at>  Mon, 24 Jul 2006 22:28:29 +0200
+ -- maximilian attems <maks at sternwelten.at>  Tue, 25 Jul 2006 09:18:40 +0200
 
 logcheck (1.2.47) unstable; urgency=low
 

Added: logcheck/trunk/rulefiles/linux/violations.ignore.d/logcheck-login
===================================================================
--- logcheck/trunk/rulefiles/linux/violations.ignore.d/logcheck-login	2006-07-25 07:03:55 UTC (rev 1202)
+++ logcheck/trunk/rulefiles/linux/violations.ignore.d/logcheck-login	2006-07-25 07:20:36 UTC (rev 1203)
@@ -0,0 +1 @@
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ login\[[0-9]+\]: ROOT LOGIN  on 'tty[0-9]'$