Changeset 3612


Ignore:
Timestamp:
Feb 14, 2017, 3:05:19 PM (2 years ago)
Author:
mabarracus
Message:

Added auditd printk filters

Location:
lliurex-rsyslog-filters/trunk/fuentes
Files:
2 edited

Legend:

Unmodified
Added
Removed

  • lliurex-rsyslog-filters/trunk/fuentes/debian/changelog

    r1688 r3612  
     1lliurex-rsyslog-filters (0.2) xenial; urgency=medium
     2
     3  * Added auditd printk filters
     4
     5 -- M.Angel Juan <m.angel.juan@gmail.com>  Tue, 14 Feb 2017 15:04:50 +0100
     6
    17lliurex-rsyslog-filters (0.1-2) xenial; urgency=medium
    28

  • lliurex-rsyslog-filters/trunk/fuentes/install/etc/rsyslog.d/10-lliurex.conf

    r1688 r3612  
    66:msg, contains, "mdb_equality_candidates" ~
    77:msg, contains, "unrecognized control" ~
     8
     9# AUDITD
     10:msg, contains, "audit: type=" ~
     11:msg, contains, "audit_printk_skb:" ~
     12:msg, contains, "audit_log_lost:" ~
     13:msg, contains, "audit_panic:" ~
     14:msg, contains, "audit: printk limit exceeded" ~
     15:msg, contains, "audit_lost=" ~
     16:msg, contains, "Audit daemon rotating" ~
Note: See TracChangeset for help on using the changeset viewer.