On Mon, 21 Jul 2008 14:02:33 +0200
Pavlos Parissis <[EMAIL PROTECTED]> wrote:
[...snip...]
> Thanks Martin for the confirmation on the bug.
>
> I'll file the bug report against logcheck-database packages and not to
> logcheck because /etc/logcheck/violations.d/su is provided by
> logcheck-databas
On Mon, 21 Jul 2008 13:40:41 +0200
martin f krafft <[EMAIL PROTECTED]> wrote:
> also sprach Pavlos Parissis <[EMAIL PROTECTED]> [2008.07.21.1147 +0200]:
> > the issue resides in 3rd and 4th line, the - character should be
> > : for matching user:root and root:user strings.
>
> So maybe su changed
also sprach Pavlos Parissis <[EMAIL PROTECTED]> [2008.07.21.1147 +0200]:
> the issue resides in 3rd and 4th line, the - character should be
> : for matching user:root and root:user strings.
So maybe su changed the format *again*. You should file a wishlist
bug asking for [-:] to be used instead of
Hi,
Before I file a bug report I would like to verify with you guys that I have
found a bug.
As the subject suggests there is an issue with the pattern matching for su in
this file
# cat /etc/logcheck/violations.d/su
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ su\[[0-9]+\]: \(pam_[[:alnum:]]+\) .*$
^\w
4 matches
Mail list logo
