Re: Logcheck entries
From: Stephen E. Hargrove (stephen@virtual-attorney.com)Date: 12/18/01
- Previous message: Kerberus: "Re: aide or tripwire"
- In reply to: Steven Clark: "Re: Logcheck entries"
- Next in thread: Patrick Morris: "Re: Logcheck entries"
- Next in thread: David Chin: "Re: Logcheck entries"
- Reply: Patrick Morris: "Re: Logcheck entries"
- Reply: Ross Vandegrift: "Re: Logcheck entries"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Tue, 18 Dec 2001 15:16:17 -0600 From: "Stephen E. Hargrove" <stephen@virtual-attorney.com> To: focus-linux@securityfocus.com
* Steven Clark (sclark@unixkb.org) spake thusly:
> I'll cover how to customize logcheck just to
> include/exclude specific messages from its report in
> this email. If you want to go further as in creating
> various other "sections" email me and I'll help ya out.
This is great information, Steven. Thanks.
My logcheck.violations.ignore file contains only one line:
stat=Deferred
I can't seem to locate what this means. However, I have one particular
line that continually appears in my Security Violations section that I'd
love to ignore. Any advice you can offer as to the above and what
changes I need to make to ignore a given violation would be appreciated.
(I'm assuming the format will be the same as the other .ignore file.)
Thanks again.
-- ____) ,_) (-(__ -|- _ _ ____) | (/_\/(/_ ( _______________________________________________ | http://www.exitwound.org : hard to find | _______________________________________________ | The universe is an island, surrounded by | | whatever it is that surrounds universes. | _______________________________________________ -------------BEGIN GEEK CODE BLOCK------------- | Version: 3.1 | | GJ/IT d- s: a C+++>$ UL++++ P+++ L+++ E--- W++| | N+@ o K- w O- M- V PS+ PE Y+ PGP++ t+@ 5@ X++ | | R tv+@ b+ DI++++ D+ G++ e++++ h---- r+++ y+++ | --------------END GEEK CODE BLOCK--------------
- Previous message: Kerberus: "Re: aide or tripwire"
- In reply to: Steven Clark: "Re: Logcheck entries"
- Next in thread: Patrick Morris: "Re: Logcheck entries"
- Next in thread: David Chin: "Re: Logcheck entries"
- Reply: Patrick Morris: "Re: Logcheck entries"
- Reply: Ross Vandegrift: "Re: Logcheck entries"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]