Logcheck devel - Sep 2008 - Bug#499561: logcheck-database: typo in ssh rules

Package: logcheck-database
Version: 1.2.68
Severity: normal

Hi,

/etc/logcheck/ignore.d.paranoid/ssh contains the rules:

^\w{3} [ :0-9]{11} [._[:alnum:]-]+ sshd\[[0-9]+\]:
pam_[[:alnum:]]+\(ssh:session\): session opened for user [^[:space:]]+ by
([[:alnum:]-]+)?\(uid=[0-9]+\)$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ sshd\[[0-9]+\]:
pam_[[:alnum:]]+\(ssh:session\): session closed for user [^[:space:]]+$

However, the log lines contain (sshd:session) -- that is, sshd with a
letter d at the end.  I guess the fix is obvious. :)

Thanks,
Feri.

-- System Information:
Debian Release: 4.0
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.26-1-686
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)

Your message dated Mon, 15 Jun 2009 07:02:18 +0000
with message-id <E1MG6Cw-0003z6-8C at ries.debian.org>
and subject line Bug#499561: fixed in logcheck 1.3.2
has caused the Debian Bug report #499561,
regarding logcheck-database: typo in ssh rules
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner at bugs.debian.org
immediately.)


-- 
499561: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=499561
Debian Bug Tracking System
Contact owner at bugs.debian.org with problems
-------------- next part --------------
An embedded message was scrubbed...
From: =?utf-8?q?Ferenc_W=C3=A1gner?= <wferi at niif.hu>
Subject: logcheck-database: typo in ssh rules
Date: Fri, 19 Sep 2008 22:46:34 +0200
Size: 2616
URL:
<http://lists.alioth.debian.org/pipermail/logcheck-devel/attachments/20090615/c1aac9f8/attachment.eml>
-------------- next part --------------
An embedded message was scrubbed...
From: Hanspeter Kunz <hkunz at ifi.uzh.ch>
Subject: Bug#499561: fixed in logcheck 1.3.2
Date: Mon, 15 Jun 2009 07:02:18 +0000
Size: 6588
URL:
<http://lists.alioth.debian.org/pipermail/logcheck-devel/attachments/20090615/c1aac9f8/attachment-0001.eml>