tags 346502 pending thanks On 8 Jan 2006, at 14:20, Lee Maguire wrote:
An upgrade of the login package to 1:4.0.14 causes the following to be sent every morning when cron.daily runs.Jan 8 06:25:03 enzo su[7896]: Successful su for nobody by root Jan 8 06:25:04 enzo su[7899]: Successful su for nobody by root Jan 8 06:25:05 enzo su[7901]: Successful su for nobody by root
I've added the following rule, which will be included in the next release:
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ su\[[0-9]+\]: Successful su for [[:alnum:]-]+ by [[:alnum:]-]+$
Thanks for your bug report, -- -Jamie L. Penman-Smithson <[EMAIL PROTECTED]> t: +44 1273 424795; f: +44 1273 424795 PGP: C0A7 955E EED6 A309 23D7 863B C76A 26A3 F0DC FCA8 never send mail to: [EMAIL PROTECTED]
PGP.sig
Description: This is a digitally signed message part
_______________________________________________ Logcheck-devel mailing list [email protected] http://lists.alioth.debian.org/mailman/listinfo/logcheck-devel
