Frédéric Brière
2008-Feb-06  07:06 UTC
[Logcheck-devel] [PATCH] Added libpam-mount rule "realpath of volume $FOO is $BAR"
This (useless, IMO) message is issued by libpam-mount when checking whether
or not a volume is already mounted.
Since pam_mount is typically invoked by various login services (login, ssh,
xdm, etc.), it's probably best to leave this field blank instead of trying
to list them all.
---
 rulefiles/linux/ignore.d.server/libpam-mount |    1 +
 1 files changed, 1 insertions(+), 0 deletions(-)
 create mode 100644 rulefiles/linux/ignore.d.server/libpam-mount
diff --git a/rulefiles/linux/ignore.d.server/libpam-mount
b/rulefiles/linux/ignore.d.server/libpam-mount
new file mode 100644
index 0000000..07d79f4
--- /dev/null
+++ b/rulefiles/linux/ignore.d.server/libpam-mount
@@ -0,0 +1 @@
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ [-[:alnum:]]+\[[0-9]+\]:
pam_mount\(mount.c:[[:digit:]]+\) realpath of volume
"[.[:alnum:]/_-]+" is "[.[:alnum:]/_-]+"$
-- 
1.5.3.8