On Thu, Apr 21, 2005 at 12:08:29AM +0200, Jochen Schulz wrote: > - You should always add your rules to a file not owned by a package. I > always use /etc/logcheck/ignore.d.$LEVEL/local. That way you make sure > your changes persist upon upgrade. When upgrading you get the chance to install the new config file, keep your old or manually merge them, so the changes you make can still persist. But indeed: making a local file seems like a good tip. I'll do that. > - Always distinguish between "Security Events" and "System Events". I > see you using the latter term above, but that might be coincidence. > Exceptions for security events have to go into violations.ignore.d/. Ah, I must have overlooked that. You are right: the cyrus event is actually a Security Event. I'll put a line in violations.ignore.d/local now and see what happens. I'll report the result later. Thanks! -- Maurits van Rees | http://maurits.vanrees.org/ [Dutch/Nederlands] Public GnuPG key: keyserver.net ID 0x1735C5C2 "Let your advance worrying become advance thinking and planning." - Winston Churchill
Attachment:
signature.asc
Description: Digital signature