Re: filling my logs after upgrade to woody

[Bill Wohler <wohler@newt.com>]

Keith Robinson <kar@foomonster.co.uk> writes:
> On Sat, Jun 08, 2002 at 01:42:28PM -0700, Bill Wohler wrote:
>  > Keith Robinson <kar@foomonster.co.uk> writes:
>  > > Jun  8 21:00:01 harvey PAM_unix[10392]: (cron) session closed for user root
>  > > 
>  > > This is really annoying when I'm checking the logs.  I've had a look for the problem, but came up emtpy.
>  > 
>  >   Not a problem, just PAM reporting setuid calls.
>  > 
> 
>  Cheers for the response.  Any way of redirecting this output to a different log, or is it just something that I'll have to work around when surveying the logs?

  The answer is most likely yes, although I'd have to dig through the
  syslog and PAM man pages to find the spells to throw into the witches'
  pot, namely syslog.conf.

  However, you probably really don't want to do that. That information
  might be useful in the case of a security breach. As you mention,
  ignoring the messages until you do need them is a reasonable approach.
  Indeed, this is what I do in my logcheck filters.

--
Bill Wohler <wohler@newt.com>  http://www.newt.com/wohler/  GnuPG ID:610BD9AD
Maintainer of comp.mail.mh FAQ and mh-e. Vote Libertarian!
If you're passed on the right, you're in the wrong lane.


-- 
To UNSUBSCRIBE, email to debian-user-request@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org