This (useless, IMO) message is issued by libpam-mount when checking whether
or not a volume is already mounted.
Since pam_mount is typically invoked by various login services (login, ssh,
xdm, etc.), it's probably best to leave this field blank instead of trying
to list them all.
---
rulefiles/linux/ignore.d.server/libpam-mount | 1 +
1 files changed, 1 insertions(+), 0 deletions(-)
create mode 100644 rulefiles/linux/ignore.d.server/libpam-mount
diff --git a/rulefiles/linux/ignore.d.server/libpam-mount
b/rulefiles/linux/ignore.d.server/libpam-mount
new file mode 100644
index 0000000..07d79f4
--- /dev/null
+++ b/rulefiles/linux/ignore.d.server/libpam-mount
@@ -0,0 +1 @@
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ [-[:alnum:]]+\[[0-9]+\]:
pam_mount\(mount.c:[[:digit:]]+\) realpath of volume "[.[:alnum:]/_-]+" is
"[.[:alnum:]/_-]+"$
--
1.5.3.8
_______________________________________________
Logcheck-devel mailing list
[email protected]
http://lists.alioth.debian.org/mailman/listinfo/logcheck-devel
