Contuinous logcheck problems

[Andreas Tille <tillea@rki.de>]

Hi,

I suspect that I'll become crazy with logcheck sooner or later. One box works fine
now but the other box which has the same logcheck exclusion rules is just continuing
"mail bombing". :-(

Lock at my comments between the logcheck message:


Subject: sputnik 2003/03/31 07:25 Security Violations

This mail is sent by logcheck. If you do not want to receive it any more,
please modify the configuration files in /etc/logcheck or deinstall logcheck.

Security Violations
=-=-=-=-=-=-=-=-=-=
Mar 30 23:07:00 sputnik pam_limits[2813]: setrlimit limit #6 to soft=-1, hard=-1 failed: Operation not permitted; uid=1454 euid=1454
Mar 30 23:07:00 sputnik pam_limits[2813]: setrlimit limit #7 to soft=-1, hard=-1 failed: Operation not permitted; uid=1454 euid=1454
 # cat /etc/logcheck/violations.ignore.d/logcheck-pam
 pam_limits\[.*\]: setrlimit limit #[67] to soft=-1, hard=-1 failed: Operation not permitted; uid=1454 euid=1454
 # Exactly the same line supresses messages on an other box of mine

Mar 30 23:13:56 sputnik sudo:   tillea : TTY=pts/0 ; PWD=/home/tillea ; USER=root ; COMMAND=/sbin/halt
 # grep halt /etc/logcheck/violations.ignore.d/logcheck-sudo
 sudo:   tillea : TTY=pts/[0-9][0-9]* ; .* ; COMMAND=/sbin/halt
 # Any visible reason why I get this?

Mar 30 23:14:17 sputnik postgres[397]: [1] DEBUG:  smart shutdown request
Mar 30 23:14:17 sputnik postgres[3245]: [2] DEBUG:  shutting down
 # This should be suppressed by the default config file which is shipped with
 # postgresql package
 # grep DEBUG /etc/logcheck/violations.ignore.d/logcheck-postgresql
 postgres.*: .*DEBUG:
 # But it is not :-(((((


Any final hints before I get a new white strait jacket??

Kind regards

       Andreas.

--
Mankind must put an end to war before war puts an end to mankind.
John F. Kennedy