also sprach Pavlos Parissis <p_pavlos@freemail.gr> [2008.07.21.1147 +0200]:
> the issue resides in 3rd and 4th line, the - character should be
> : for matching user:root and root:user strings.
So maybe su changed the format *again*. You should file a wishlist
bug asking for [-:] to be used instead of plain -, ideally providing
a patch against the git HEAD, along with sample log output.
Instructions and additional information are here:
http://wiki.logcheck.org/index.cgi/RuleSubmission
http://logcheck.org/git.html
--
.''`. martin f. krafft <madduck@debian.org>
: :' : proud Debian developer, author, administrator, and user
`. `'` http://people.debian.org/~madduck - http://debiansystem.info
`- Debian - when you have better things to do than fixing systems
"never eat more than you can lift."
-- miss piggy
Attachment:
digital_signature_gpg.asc
Description: Digital signature (see http://martin-krafft.net/gpg/)