[Logwatch-devel] SF.net SVN: logwatch:[13] scripts/services/kernel

[<mtr...@us...>]

Revision: 13
          http://logwatch.svn.sourceforge.net/logwatch/?rev=13&view=rev
Author:   mtremaine
Date:     2010-11-19 17:26:45 +0000 (Fri, 19 Nov 2010)

Log Message:
-----------
Updated audit filter as per Orion Poplawski suggestion -mgt

Modified Paths:
--------------
    scripts/services/kernel

Modified: scripts/services/kernel
===================================================================
--- scripts/services/kernel	2010-09-19 15:06:09 UTC (rev 12)
+++ scripts/services/kernel	2010-11-19 17:26:45 UTC (rev 13)
@@ -70,7 +70,7 @@
    if (
       # filter out audit messages - these should be parsed by the audit
       # service
-      ($ThisLine =~ /^\s*audit\(/)
+      ($ThisLine =~ /^\s*(type=\d+\s+)?audit\(/)
       # following now in iptables service
       or ($ThisLine =~ /^Packet log: .*PROTO=/)
       or ($ThisLine =~ /IN=.*OUT=.*SRC=.*DST=.*PROTO=/)


This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.