Frédéric Brière
2008-Feb-06 07:06 UTC
[Logcheck-devel] [PATCH] Added libpam-mount rule "realpath of volume $FOO is $BAR"
This (useless, IMO) message is issued by libpam-mount when checking whether or not a volume is already mounted. Since pam_mount is typically invoked by various login services (login, ssh, xdm, etc.), it's probably best to leave this field blank instead of trying to list them all. --- rulefiles/linux/ignore.d.server/libpam-mount | 1 + 1 files changed, 1 insertions(+), 0 deletions(-) create mode 100644 rulefiles/linux/ignore.d.server/libpam-mount diff --git a/rulefiles/linux/ignore.d.server/libpam-mount b/rulefiles/linux/ignore.d.server/libpam-mount new file mode 100644 index 0000000..07d79f4 --- /dev/null +++ b/rulefiles/linux/ignore.d.server/libpam-mount @@ -0,0 +1 @@ +^\w{3} [ :0-9]{11} [._[:alnum:]-]+ [-[:alnum:]]+\[[0-9]+\]: pam_mount\(mount.c:[[:digit:]]+\) realpath of volume "[.[:alnum:]/_-]+" is "[.[:alnum:]/_-]+"$ -- 1.5.3.8