Package: cron
Version: 3.0pl1-93
Severity: wishlist
Tags: patch

I don't think it's really critical for an admin to know when a user
edits a crontab file, so please include the following patch in /etc/logcheck

=== modified file 'ignore.d.server/cron'
--- ignore.d.server/cron  
+++ ignore.d.server/cron  
@@ -1,2 +1,3 @@
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ crontab\[[0-9]+\]: \([[:alnum:]-]+\) LIST 
\([[:alnum:]-]+\)$
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ crontab\[[0-9]+\]: \([[:alnum:]-]+\) 
REPLACE \([[:alnum:]-]+\)$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ crontab\[[0-9]+\]: \([[:alnum:]-]+\) 
(BEGIN|END) EDIT \([[:alnum:]-]+\)$

-- 
 .''`.     martin f. krafft <[EMAIL PROTECTED]>
: :'  :    proud Debian developer and author: http://debiansystem.info
`. `'`
  `-  Debian - when you have better things to do than fixing a system
 
Invalid/expired PGP (sub)keys? Use subkeys.pgp.net as keyserver!
 
beware of bugs in the above code;
i have only proved it correct, not tried it.
                                                    -- donald e. knuth

Attachment: signature.asc
Description: Digital signature (GPG/PGP)

Reply via email to