Logcheck devel - Sep 2008 - Bug#499393: logcheck-database: paranoid cron rules let session close messages through

Package: logcheck-database
Version: 1.2.54
Severity: normal

Hi,

/etc/logcheck/ignore.d.paranoid/cron contains the last line:

^\w{3} [ :0-9]{11} [._[:alnum:]-]+ CRON\[[0-9]+\]:
pam_[[:alnum:]]+\(cron:session\): session opened for user [[:alnum:]-]+( by
\(uid=[0-9]+\))?$

wouldn't it be better transformed into

^\w{3} [ :0-9]{11} [._[:alnum:]-]+ CRON\[[0-9]+\]:
pam_[[:alnum:]]+\(cron:session\): session (opened|closed) for user
[[:alnum:]-]+( by \(uid=[0-9]+\))?$

to suppress close messages, too?  I've got no experience with the
butlast line, but that also seems to miss a similar clause.

Thanks,
Feri.

-- System Information:
Debian Release: 4.0
  APT prefers stable
  APT policy: (600, 'stable'), (50, 'unstable')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.26-1-686
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)

Versions of packages logcheck-database depends on:
ii  debconf [debconf-2.0]        1.5.11etch2 Debian configuration management sy

logcheck-database recommends no packages.

-- debconf information excluded

Your message dated Mon, 15 Jun 2009 07:02:18 +0000
with message-id <E1MG6Cw-0003z2-6i at ries.debian.org>
and subject line Bug#499393: fixed in logcheck 1.3.2
has caused the Debian Bug report #499393,
regarding logcheck-database: paranoid cron rules let session close messages
through
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner at bugs.debian.org
immediately.)


-- 
499393: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=499393
Debian Bug Tracking System
Contact owner at bugs.debian.org with problems
-------------- next part --------------
An embedded message was scrubbed...
From: Ferenc Wagner <wferi at niif.hu>
Subject: logcheck-database: paranoid cron rules let session close messages
through
Date: Thu, 18 Sep 2008 11:49:39 +0200
Size: 2575
URL:
<http://lists.alioth.debian.org/pipermail/logcheck-devel/attachments/20090615/8833fbe5/attachment-0002.eml>
-------------- next part --------------
An embedded message was scrubbed...
From: Hanspeter Kunz <hkunz at ifi.uzh.ch>
Subject: Bug#499393: fixed in logcheck 1.3.2
Date: Mon, 15 Jun 2009 07:02:18 +0000
Size: 6588
URL:
<http://lists.alioth.debian.org/pipermail/logcheck-devel/attachments/20090615/8833fbe5/attachment-0003.eml>