logcheck отказывается фильтровать (Сообщения безопасности проходят мимо фильтров)

Обсуждение настройки и работы сервисов, резервирования, сетевых настроек и вопросов безопасности ОС.

Модераторы: SLEDopit, Модераторы разделов

Аватара пользователя
KonishchevDmitry
Сообщения: 92
ОС: Ubuntu

logcheck отказывается фильтровать

Сообщение KonishchevDmitry »

Никак не хотят фильтроваться сообщения безопасности.

/etc/logcheck/logcheck.conf:

Код: Выделить всё

REPORTLEVEL="server"
SENDMAILTO="root"
MAILASATTACH=0
FQDN=1
SUPPORT_CRACKING_IGNORE=1
TMP="/tmp"

Маски для игнорирования задал такими, чтобы не было сомнений в том, что я составил неправильные регулярные выражения:

/etc/logcheck/cracking.ignore.d/my_cracking:

Код: Выделить всё

.+

/etc/logcheck/violations.ignore.d/my_violations:

Код: Выделить всё

.+

После запуска

Код: Выделить всё

sudo -u logcheck logcheck -od > out 2>&1
файл out получается следующего содержания (разбил на два блока, чтобы лучше было видно):

Код:

D: [1210401348] Turning debug mode on D: [1210401348] Sourcing - /etc/logcheck/logcheck.conf D: [1210401348] Setting MAILOUT to 1 D: [1210401348] Finished getopts c:dhH:l:L:m:opr:RsS:tTuvw D: [1210401348] Trying to get lockfile: /var/lock/logcheck/logcheck.lock D: [1210401348] Running lockfile-touch /var/lock/logcheck/logcheck.lock D: [1210401348] cleanrules: /etc/logcheck/cracking.d/logcheck D: [1210401348] cleanrules: /etc/logcheck/cracking.d/smartd D: [1210401348] cleanrules: /etc/logcheck/violations.d/kernel D: [1210401348] cleanrules: /etc/logcheck/violations.d/logcheck D: [1210401349] cleanrules: /etc/logcheck/violations.d/smartd D: [1210401349] cleanrules: /etc/logcheck/violations.d/su D: [1210401349] cleanrules: /etc/logcheck/violations.d/sudo D: [1210401349] cleanrules: /etc/logcheck/violations.ignore.d/logcheck-bind D: [1210401349] cleanrules: /etc/logcheck/violations.ignore.d/logcheck-bluez-utils D: [1210401349] cleanrules: /etc/logcheck/violations.ignore.d/logcheck-courier D: [1210401349] cleanrules: /etc/logcheck/violations.ignore.d/logcheck-cron-apt D: [1210401349] cleanrules: /etc/logcheck/violations.ignore.d/logcheck-cyrus D: [1210401349] cleanrules: /etc/logcheck/violations.ignore.d/logcheck-dcc D: [1210401349] cleanrules: /etc/logcheck/violations.ignore.d/logcheck-dovecot D: [1210401349] cleanrules: /etc/logcheck/violations.ignore.d/logcheck-hylafax D: [1210401349] cleanrules: /etc/logcheck/violations.ignore.d/logcheck-innd D: [1210401349] cleanrules: /etc/logcheck/violations.ignore.d/logcheck-kernel D: [1210401349] cleanrules: /etc/logcheck/violations.ignore.d/logcheck-login D: [1210401349] cleanrules: /etc/logcheck/violations.ignore.d/logcheck-mon D: [1210401349] cleanrules: /etc/logcheck/violations.ignore.d/logcheck-nagios D: [1210401349] cleanrules: /etc/logcheck/violations.ignore.d/logcheck-openvpn D: [1210401349] cleanrules: /etc/logcheck/violations.ignore.d/logcheck-passwd D: [1210401349] cleanrules: /etc/logcheck/violations.ignore.d/logcheck-pdns D: [1210401349] cleanrules: /etc/logcheck/violations.ignore.d/logcheck-postfix D: [1210401349] cleanrules: /etc/logcheck/violations.ignore.d/logcheck-proftpd D: [1210401349] cleanrules: /etc/logcheck/violations.ignore.d/logcheck-pureftp D: [1210401349] cleanrules: /etc/logcheck/violations.ignore.d/logcheck-samba D: [1210401349] cleanrules: /etc/logcheck/violations.ignore.d/logcheck-saslauthd D: [1210401349] cleanrules: /etc/logcheck/violations.ignore.d/logcheck-sendmail D: [1210401349] cleanrules: /etc/logcheck/violations.ignore.d/logcheck-sendmail_tmp D: [1210401350] cleanrules: /etc/logcheck/violations.ignore.d/logcheck-smartd D: [1210401350] cleanrules: /etc/logcheck/violations.ignore.d/logcheck-spamd D: [1210401350] cleanrules: /etc/logcheck/violations.ignore.d/logcheck-squid D: [1210401350] cleanrules: /etc/logcheck/violations.ignore.d/logcheck-ssh D: [1210401350] cleanrules: /etc/logcheck/violations.ignore.d/logcheck-su D: [1210401350] cleanrules: /etc/logcheck/violations.ignore.d/logcheck-sudo D: [1210401350] cleanrules: /etc/logcheck/violations.ignore.d/logcheck-usb D: [1210401350] cleanrules: /etc/logcheck/violations.ignore.d/logcheck-winbind D: [1210401350] cleanrules: /etc/logcheck/violations.ignore.d/my_violations D: [1210401350] cleanrules: /etc/logcheck/violations.ignore.d/sendmail D: [1210401350] cleanrules: /etc/logcheck/ignore.d.server/acpid D: [1210401350] cleanrules: /etc/logcheck/ignore.d.server/amandad D: [1210401350] cleanrules: /etc/logcheck/ignore.d.server/anacron D: [1210401350] cleanrules: /etc/logcheck/ignore.d.server/anon-proxy D: [1210401350] cleanrules: /etc/logcheck/ignore.d.server/apache D: [1210401350] cleanrules: /etc/logcheck/ignore.d.server/arpwatch D: [1210401350] cleanrules: /etc/logcheck/ignore.d.server/automount D: [1210401350] cleanrules: /etc/logcheck/ignore.d.server/bind D: [1210401350] cleanrules: /etc/logcheck/ignore.d.server/bluez-utils D: [1210401350] cleanrules: /etc/logcheck/ignore.d.server/courier D: [1210401350] cleanrules: /etc/logcheck/ignore.d.server/cpqarrayd D: [1210401350] cleanrules: /etc/logcheck/ignore.d.server/cpufreqd D: [1210401350] cleanrules: /etc/logcheck/ignore.d.server/cracklib D: [1210401350] cleanrules: /etc/logcheck/ignore.d.server/cron D: [1210401350] cleanrules: /etc/logcheck/ignore.d.server/cron-apt D: [1210401350] cleanrules: /etc/logcheck/ignore.d.server/cups-lpd D: [1210401350] cleanrules: /etc/logcheck/ignore.d.server/cvs-pserver D: [1210401350] cleanrules: /etc/logcheck/ignore.d.server/cvsd D: [1210401350] cleanrules: /etc/logcheck/ignore.d.server/cyrus D: [1210401350] cleanrules: /etc/logcheck/ignore.d.server/dcc D: [1210401350] cleanrules: /etc/logcheck/ignore.d.server/dhclient D: [1210401350] cleanrules: /etc/logcheck/ignore.d.server/dhcp D: [1210401350] cleanrules: /etc/logcheck/ignore.d.server/dictd D: [1210401350] cleanrules: /etc/logcheck/ignore.d.server/dkfilter D: [1210401350] cleanrules: /etc/logcheck/ignore.d.server/dnsmasq D: [1210401350] cleanrules: /etc/logcheck/ignore.d.server/dovecot D: [1210401350] cleanrules: /etc/logcheck/ignore.d.server/dspam D: [1210401350] cleanrules: /etc/logcheck/ignore.d.server/epmd D: [1210401350] cleanrules: /etc/logcheck/ignore.d.server/exim4 D: [1210401350] cleanrules: /etc/logcheck/ignore.d.server/fetchmail D: [1210401350] cleanrules: /etc/logcheck/ignore.d.server/gnome-bin D: [1210401350] cleanrules: /etc/logcheck/ignore.d.server/gnu-imap4d D: [1210401350] cleanrules: /etc/logcheck/ignore.d.server/gps D: [1210401350] cleanrules: /etc/logcheck/ignore.d.server/grinch D: [1210401350] cleanrules: /etc/logcheck/ignore.d.server/hddtemp D: [1210401350] cleanrules: /etc/logcheck/ignore.d.server/horde3 D: [1210401350] cleanrules: /etc/logcheck/ignore.d.server/hplip D: [1210401350] cleanrules: /etc/logcheck/ignore.d.server/hylafax D: [1210401350] cleanrules: /etc/logcheck/ignore.d.server/ikiwiki D: [1210401350] cleanrules: /etc/logcheck/ignore.d.server/imap D: [1210401350] cleanrules: /etc/logcheck/ignore.d.server/imapproxy D: [1210401350] cleanrules: /etc/logcheck/ignore.d.server/imp D: [1210401350] cleanrules: /etc/logcheck/ignore.d.server/imp4 D: [1210401350] cleanrules: /etc/logcheck/ignore.d.server/innd D: [1210401351] cleanrules: /etc/logcheck/ignore.d.server/ipppd D: [1210401351] cleanrules: /etc/logcheck/ignore.d.server/isdnlog D: [1210401351] cleanrules: /etc/logcheck/ignore.d.server/isdnutils D: [1210401351] cleanrules: /etc/logcheck/ignore.d.server/jabberd D: [1210401351] cleanrules: /etc/logcheck/ignore.d.server/kernel D: [1210401351] cleanrules: /etc/logcheck/ignore.d.server/logcheck D: [1210401351] cleanrules: /etc/logcheck/ignore.d.server/lpr D: [1210401351] cleanrules: /etc/logcheck/ignore.d.server/maradns D: [1210401351] cleanrules: /etc/logcheck/ignore.d.server/mldonkey-server D: [1210401351] cleanrules: /etc/logcheck/ignore.d.server/mon D: [1210401351] cleanrules: /etc/logcheck/ignore.d.server/mysql-server-5_0 D: [1210401351] cleanrules: /etc/logcheck/ignore.d.server/nagios D: [1210401351] cleanrules: /etc/logcheck/ignore.d.server/netconsole D: [1210401351] cleanrules: /etc/logcheck/ignore.d.server/nfs D: [1210401351] cleanrules: /etc/logcheck/ignore.d.server/nntpcache D: [1210401351] cleanrules: /etc/logcheck/ignore.d.server/nscd D: [1210401351] cleanrules: /etc/logcheck/ignore.d.server/ntp D: [1210401351] cleanrules: /etc/logcheck/ignore.d.server/ntpdate D: [1210401351] cleanrules: /etc/logcheck/ignore.d.server/oidentd D: [1210401351] cleanrules: /etc/logcheck/ignore.d.server/openvpn D: [1210401351] cleanrules: /etc/logcheck/ignore.d.server/pdns D: [1210401351] cleanrules: /etc/logcheck/ignore.d.server/perdition D: [1210401351] cleanrules: /etc/logcheck/ignore.d.server/policyd D: [1210401351] cleanrules: /etc/logcheck/ignore.d.server/popa3d D: [1210401351] cleanrules: /etc/logcheck/ignore.d.server/postfix D: [1210401351] cleanrules: /etc/logcheck/ignore.d.server/postfix-policyd D: [1210401351] cleanrules: /etc/logcheck/ignore.d.server/ppp D: [1210401351] cleanrules: /etc/logcheck/ignore.d.server/pptpd D: [1210401351] cleanrules: /etc/logcheck/ignore.d.server/procmail D: [1210401351] cleanrules: /etc/logcheck/ignore.d.server/proftpd D: [1210401351] cleanrules: /etc/logcheck/ignore.d.server/puppetd D: [1210401351] cleanrules: /etc/logcheck/ignore.d.server/pure-ftpd D: [1210401351] cleanrules: /etc/logcheck/ignore.d.server/qpopper D: [1210401351] cleanrules: /etc/logcheck/ignore.d.server/rbldnsd D: [1210401351] cleanrules: /etc/logcheck/ignore.d.server/rpc_statd D: [1210401351] cleanrules: /etc/logcheck/ignore.d.server/rsnapshot D: [1210401351] cleanrules: /etc/logcheck/ignore.d.server/rsync D: [1210401351] cleanrules: /etc/logcheck/ignore.d.server/sa-exim D: [1210401351] cleanrules: /etc/logcheck/ignore.d.server/samba D: [1210401351] cleanrules: /etc/logcheck/ignore.d.server/saned D: [1210401351] cleanrules: /etc/logcheck/ignore.d.server/saslauthd D: [1210401351] cleanrules: /etc/logcheck/ignore.d.server/scponly D: [1210401351] cleanrules: /etc/logcheck/ignore.d.server/sendmail D: [1210401351] cleanrules: /etc/logcheck/ignore.d.server/slapd D: [1210401351] cleanrules: /etc/logcheck/ignore.d.server/smartd D: [1210401351] cleanrules: /etc/logcheck/ignore.d.server/smokeping D: [1210401351] cleanrules: /etc/logcheck/ignore.d.server/snmpd D: [1210401351] cleanrules: /etc/logcheck/ignore.d.server/snort D: [1210401351] cleanrules: /etc/logcheck/ignore.d.server/spamc D: [1210401351] cleanrules: /etc/logcheck/ignore.d.server/spamd D: [1210401352] cleanrules: /etc/logcheck/ignore.d.server/squid D: [1210401352] cleanrules: /etc/logcheck/ignore.d.server/ssh D: [1210401352] cleanrules: /etc/logcheck/ignore.d.server/stunnel D: [1210401352] cleanrules: /etc/logcheck/ignore.d.server/sympa D: [1210401352] cleanrules: /etc/logcheck/ignore.d.server/syslogd D: [1210401352] cleanrules: /etc/logcheck/ignore.d.server/teapop D: [1210401352] cleanrules: /etc/logcheck/ignore.d.server/tftpd D: [1210401352] cleanrules: /etc/logcheck/ignore.d.server/thy D: [1210401352] cleanrules: /etc/logcheck/ignore.d.server/ucd-snmp D: [1210401352] cleanrules: /etc/logcheck/ignore.d.server/uptimed D: [1210401352] cleanrules: /etc/logcheck/ignore.d.server/userv D: [1210401352] cleanrules: /etc/logcheck/ignore.d.server/watchdog D: [1210401352] cleanrules: /etc/logcheck/ignore.d.server/webmin D: [1210401352] cleanrules: /etc/logcheck/ignore.d.server/xinetd D: [1210401352] cleanrules: /etc/logcheck/ignore.d.paranoid/apmd D: [1210401352] cleanrules: /etc/logcheck/ignore.d.paranoid/bind D: [1210401352] cleanrules: /etc/logcheck/ignore.d.paranoid/cron D: [1210401352] cleanrules: /etc/logcheck/ignore.d.paranoid/incron D: [1210401352] cleanrules: /etc/logcheck/ignore.d.paranoid/logcheck D: [1210401352] cleanrules: /etc/logcheck/ignore.d.paranoid/mysql-server-5_0 D: [1210401352] cleanrules: /etc/logcheck/ignore.d.paranoid/postfix D: [1210401352] cleanrules: /etc/logcheck/ignore.d.paranoid/ppp D: [1210401352] cleanrules: /etc/logcheck/ignore.d.paranoid/qpopper D: [1210401352] cleanrules: /etc/logcheck/ignore.d.paranoid/sendmail D: [1210401352] cleanrules: /etc/logcheck/ignore.d.paranoid/squid D: [1210401352] cleanrules: /etc/logcheck/ignore.d.paranoid/ssh D: [1210401352] cleanrules: /etc/logcheck/ignore.d.paranoid/stunnel D: [1210401352] cleanrules: /etc/logcheck/ignore.d.paranoid/sysklogd D: [1210401352] cleanrules: /etc/logcheck/ignore.d.paranoid/telnetd D: [1210401352] cleanrules: /etc/logcheck/ignore.d.paranoid/tripwire D: [1210401352] cleanrules: /etc/logcheck/cracking.ignore.d/my_cracking D: [1210401352] logoutput called with file: /var/log/syslog D: [1210401352] Running /usr/sbin/logtail2 on /var/log/syslog D: [1210401352] logoutput called with file: /var/log/auth.log D: [1210401352] Running /usr/sbin/logtail2 on /var/log/auth.log D: [1210401352] Sorting logs D: [1210401353] Setting the Intro D: [1210401353] Checking for security alerts and using cracking-ignore D: [1210401353] greplogoutput: logcheck D: [1210401355] greplogoutput: smartd D: [1210401355] greplogoutput: returning 1 D: [1210401355] Checking for security events D: [1210401355] greplogoutput: kernel D: [1210401355] greplogoutput: logcheck D: [1210401357] greplogoutput: smartd D: [1210401357] greplogoutput: su D: [1210401357] greplogoutput: sudo D: [1210401357] greplogoutput: Entries in checked D: [1210401357] cleanchecked - file: /tmp/logcheck.b12740/violations-ignore/logcheck-sudo D: [1210401358] report: cat'ing - Security Events for sudo D: [1210401358] greplogoutput: returning 0 D: [1210401358] Checking for system events D: [1210401358] cleanchecked - dir - /tmp/logcheck.b12740/ignore D: [1210401358] cleanchecked - dir - /tmp/logcheck.b12740/ignore/acpid D: [1210401358] cleanchecked - dir - /tmp/logcheck.b12740/ignore/amandad D: [1210401358] cleanchecked - dir - /tmp/logcheck.b12740/ignore/anacron D: [1210401358] cleanchecked - dir - /tmp/logcheck.b12740/ignore/anon-proxy D: [1210401358] cleanchecked - dir - /tmp/logcheck.b12740/ignore/apache D: [1210401358] cleanchecked - dir - /tmp/logcheck.b12740/ignore/apmd D: [1210401358] cleanchecked - dir - /tmp/logcheck.b12740/ignore/arpwatch D: [1210401358] cleanchecked - dir - /tmp/logcheck.b12740/ignore/automount D: [1210401358] cleanchecked - dir - /tmp/logcheck.b12740/ignore/bind D: [1210401358] cleanchecked - dir - /tmp/logcheck.b12740/ignore/bluez-utils D: [1210401358] cleanchecked - dir - /tmp/logcheck.b12740/ignore/courier D: [1210401361] cleanchecked - dir - /tmp/logcheck.b12740/ignore/cpqarrayd D: [1210401361] cleanchecked - dir - /tmp/logcheck.b12740/ignore/cpufreqd D: [1210401361] cleanchecked - dir - /tmp/logcheck.b12740/ignore/cracklib D: [1210401361] cleanchecked - dir - /tmp/logcheck.b12740/ignore/cron D: [1210401361] cleanchecked - dir - /tmp/logcheck.b12740/ignore/cron-apt D: [1210401361] cleanchecked - dir - /tmp/logcheck.b12740/ignore/cups-lpd D: [1210401361] cleanchecked - dir - /tmp/logcheck.b12740/ignore/cvsd D: [1210401361] cleanchecked - dir - /tmp/logcheck.b12740/ignore/cvs-pserver D: [1210401361] cleanchecked - dir - /tmp/logcheck.b12740/ignore/cyrus D: [1210401361] cleanchecked - dir - /tmp/logcheck.b12740/ignore/dcc D: [1210401361] cleanchecked - dir - /tmp/logcheck.b12740/ignore/dhclient D: [1210401361] cleanchecked - dir - /tmp/logcheck.b12740/ignore/dhcp D: [1210401361] cleanchecked - dir - /tmp/logcheck.b12740/ignore/dictd D: [1210401361] cleanchecked - dir - /tmp/logcheck.b12740/ignore/dkfilter D: [1210401361] cleanchecked - dir - /tmp/logcheck.b12740/ignore/dnsmasq D: [1210401361] cleanchecked - dir - /tmp/logcheck.b12740/ignore/dovecot D: [1210401365] cleanchecked - dir - /tmp/logcheck.b12740/ignore/dspam D: [1210401365] cleanchecked - dir - /tmp/logcheck.b12740/ignore/epmd D: [1210401365] cleanchecked - dir - /tmp/logcheck.b12740/ignore/exim4 D: [1210401367] cleanchecked - dir - /tmp/logcheck.b12740/ignore/fetchmail D: [1210401367] cleanchecked - dir - /tmp/logcheck.b12740/ignore/gnome-bin D: [1210401367] cleanchecked - dir - /tmp/logcheck.b12740/ignore/gnu-imap4d D: [1210401367] cleanchecked - dir - /tmp/logcheck.b12740/ignore/gps D: [1210401367] cleanchecked - dir - /tmp/logcheck.b12740/ignore/grinch D: [1210401367] cleanchecked - dir - /tmp/logcheck.b12740/ignore/hddtemp D: [1210401367] cleanchecked - dir - /tmp/logcheck.b12740/ignore/horde3 D: [1210401367] cleanchecked - dir - /tmp/logcheck.b12740/ignore/hplip D: [1210401367] cleanchecked - dir - /tmp/logcheck.b12740/ignore/hylafax D: [1210401367] cleanchecked - dir - /tmp/logcheck.b12740/ignore/ikiwiki D: [1210401367] cleanchecked - dir - /tmp/logcheck.b12740/ignore/imap D: [1210401367] cleanchecked - dir - /tmp/logcheck.b12740/ignore/imapproxy D: [1210401367] cleanchecked - dir - /tmp/logcheck.b12740/ignore/imp D: [1210401367] cleanchecked - dir - /tmp/logcheck.b12740/ignore/imp4 D: [1210401367] cleanchecked - dir - /tmp/logcheck.b12740/ignore/incron D: [1210401367] cleanchecked - dir - /tmp/logcheck.b12740/ignore/innd D: [1210401378] cleanchecked - dir - /tmp/logcheck.b12740/ignore/ipppd D: [1210401378] cleanchecked - dir - /tmp/logcheck.b12740/ignore/isdnlog D: [1210401378] cleanchecked - dir - /tmp/logcheck.b12740/ignore/isdnutils D: [1210401378] cleanchecked - dir - /tmp/logcheck.b12740/ignore/jabberd D: [1210401378] cleanchecked - dir - /tmp/logcheck.b12740/ignore/kernel D: [1210401386] cleanchecked - dir - /tmp/logcheck.b12740/ignore/logcheck D: [1210401388] cleanchecked - dir - /tmp/logcheck.b12740/ignore/lpr D: [1210401388] cleanchecked - dir - /tmp/logcheck.b12740/ignore/maradns D: [1210401388] cleanchecked - dir - /tmp/logcheck.b12740/ignore/mldonkey-server D: [1210401389] cleanchecked - dir - /tmp/logcheck.b12740/ignore/mon D: [1210401389] cleanchecked - dir - /tmp/logcheck.b12740/ignore/my D: [1210401389] cleanchecked - dir - /tmp/logcheck.b12740/ignore/mysql-server-5_0 D: [1210401389] cleanchecked - dir - /tmp/logcheck.b12740/ignore/nagios D: [1210401389] cleanchecked - dir - /tmp/logcheck.b12740/ignore/netconsole D: [1210401389] cleanchecked - dir - /tmp/logcheck.b12740/ignore/nfs D: [1210401389] cleanchecked - dir - /tmp/logcheck.b12740/ignore/nntpcache D: [1210401389] cleanchecked - dir - /tmp/logcheck.b12740/ignore/nscd D: [1210401389] cleanchecked - dir - /tmp/logcheck.b12740/ignore/ntp D: [1210401389] cleanchecked - dir - /tmp/logcheck.b12740/ignore/ntpdate D: [1210401389] cleanchecked - dir - /tmp/logcheck.b12740/ignore/oidentd D: [1210401389] cleanchecked - dir - /tmp/logcheck.b12740/ignore/openvpn D: [1210401390] cleanchecked - dir - /tmp/logcheck.b12740/ignore/pdns D: [1210401390] cleanchecked - dir - /tmp/logcheck.b12740/ignore/perdition D: [1210401390] cleanchecked - dir - /tmp/logcheck.b12740/ignore/policyd D: [1210401390] cleanchecked - dir - /tmp/logcheck.b12740/ignore/popa3d D: [1210401390] cleanchecked - dir - /tmp/logcheck.b12740/ignore/postfix D: [1210401391] cleanchecked - dir - /tmp/logcheck.b12740/ignore/postfix-policyd D: [1210401391] cleanchecked - dir - /tmp/logcheck.b12740/ignore/ppp D: [1210401394] cleanchecked - dir - /tmp/logcheck.b12740/ignore/pptpd D: [1210401394] cleanchecked - dir - /tmp/logcheck.b12740/ignore/procmail D: [1210401394] cleanchecked - dir - /tmp/logcheck.b12740/ignore/proftpd D: [1210401394] cleanchecked - dir - /tmp/logcheck.b12740/ignore/puppetd D: [1210401394] cleanchecked - dir - /tmp/logcheck.b12740/ignore/pure-ftpd D: [1210401394] cleanchecked - dir - /tmp/logcheck.b12740/ignore/qpopper D: [1210401394] cleanchecked - dir - /tmp/logcheck.b12740/ignore/rbldnsd D: [1210401394] cleanchecked - dir - /tmp/logcheck.b12740/ignore/rpc_statd D: [1210401394] cleanchecked - dir - /tmp/logcheck.b12740/ignore/rsnapshot D: [1210401394] cleanchecked - dir - /tmp/logcheck.b12740/ignore/rsync D: [1210401394] cleanchecked - dir - /tmp/logcheck.b12740/ignore/sa-exim D: [1210401394] cleanchecked - dir - /tmp/logcheck.b12740/ignore/samba D: [1210401394] cleanchecked - dir - /tmp/logcheck.b12740/ignore/saned D: [1210401394] cleanchecked - dir - /tmp/logcheck.b12740/ignore/saslauthd D: [1210401394] cleanchecked - dir - /tmp/logcheck.b12740/ignore/scponly D: [1210401394] cleanchecked - dir - /tmp/logcheck.b12740/ignore/sendmail D: [1210401394] cleanchecked - dir - /tmp/logcheck.b12740/ignore/slapd D: [1210401394] cleanchecked - dir - /tmp/logcheck.b12740/ignore/smartd D: [1210401394] cleanchecked - dir - /tmp/logcheck.b12740/ignore/smokeping D: [1210401394] cleanchecked - dir - /tmp/logcheck.b12740/ignore/snmpd D: [1210401394] cleanchecked - dir - /tmp/logcheck.b12740/ignore/snort D: [1210401399] cleanchecked - dir - /tmp/logcheck.b12740/ignore/spamc D: [1210401399] cleanchecked - dir - /tmp/logcheck.b12740/ignore/spamd D: [1210401399] cleanchecked - dir - /tmp/logcheck.b12740/ignore/squid D: [1210401399] cleanchecked - dir - /tmp/logcheck.b12740/ignore/ssh D: [1210401399] cleanchecked - dir - /tmp/logcheck.b12740/ignore/stunnel D: [1210401399] cleanchecked - dir - /tmp/logcheck.b12740/ignore/sympa D: [1210401399] cleanchecked - dir - /tmp/logcheck.b12740/ignore/sysklogd D: [1210401399] cleanchecked - dir - /tmp/logcheck.b12740/ignore/syslogd D: [1210401399] cleanchecked - dir - /tmp/logcheck.b12740/ignore/teapop D: [1210401399] cleanchecked - dir - /tmp/logcheck.b12740/ignore/telnetd D: [1210401399] cleanchecked - dir - /tmp/logcheck.b12740/ignore/tftpd D: [1210401399] cleanchecked - dir - /tmp/logcheck.b12740/ignore/thy D: [1210401399] cleanchecked - dir - /tmp/logcheck.b12740/ignore/tripwire D: [1210401399] cleanchecked - dir - /tmp/logcheck.b12740/ignore/ucd-snmp D: [1210401399] cleanchecked - dir - /tmp/logcheck.b12740/ignore/uptimed D: [1210401399] cleanchecked - dir - /tmp/logcheck.b12740/ignore/userv D: [1210401399] cleanchecked - dir - /tmp/logcheck.b12740/ignore/watchdog D: [1210401399] cleanchecked - dir - /tmp/logcheck.b12740/ignore/webmin D: [1210401399] cleanchecked - dir - /tmp/logcheck.b12740/ignore/xinetd D: [1210401399] Removing alerts from system events D: [1210401399] cleanchecked - dir - /tmp/logcheck.b12740/cracking D: [1210401399] cleanchecked - dir - /tmp/logcheck.b12740/cracking/logcheck D: [1210401401] cleanchecked - dir - /tmp/logcheck.b12740/cracking/smartd D: [1210401401] Removing violations from system events D: [1210401401] cleanchecked - dir - /tmp/logcheck.b12740/violations D: [1210401401] cleanchecked - dir - /tmp/logcheck.b12740/violations/kernel D: [1210401401] cleanchecked - dir - /tmp/logcheck.b12740/violations/logcheck D: [1210401403] cleanchecked - dir - /tmp/logcheck.b12740/violations/smartd D: [1210401403] cleanchecked - dir - /tmp/logcheck.b12740/violations/su D: [1210401403] cleanchecked - dir - /tmp/logcheck.b12740/violations/sudo D: [1210401404] Setting the footer text D: [1210401404] Sending report to STDOUT

Код:

This email is sent by logcheck. If you wish to no-longer receive it, you can either deinstall the logcheck package or modify its configuration file (/etc/logcheck/logcheck.conf). Security Events for sudo =-=-=-=-=-=-=-=-=-=-=-=- May 10 10:30:48 dmitry-desktop sudo: PAM [error: /lib/security/pam_smbpass.so: cannot open shared object file: No such file or directory] May 10 10:30:48 dmitry-desktop sudo: PAM adding faulty module: /lib/security/pam_smbpass.so May 10 10:30:48 dmitry-desktop sudo: pam_unix(sudo:session): session opened for user root by (uid=0) May 10 10:30:48 dmitry-desktop sudo: pam_unix(sudo:session): session closed for user root May 10 10:30:48 dmitry-desktop sudo: PAM unable to dlopen(/lib/security/pam_smbpass.so) May 10 10:30:48 dmitry-desktop sudo: PAM [error: /lib/security/pam_smbpass.so: cannot open shared object file: No such file or directory] May 10 10:30:48 dmitry-desktop sudo: PAM adding faulty module: /lib/security/pam_smbpass.so May 10 10:30:48 dmitry-desktop sudo: pam_unix(sudo:session): session opened for user root by (uid=0) May 10 10:30:48 dmitry-desktop sudo: pam_unix(sudo:session): session closed for user root May 10 10:30:48 dmitry-desktop sudo: PAM unable to dlopen(/lib/security/pam_smbpass.so) May 10 10:30:48 dmitry-desktop sudo: PAM [error: /lib/security/pam_smbpass.so: cannot open shared object file: No such file or directory] May 10 10:30:48 dmitry-desktop sudo: PAM adding faulty module: /lib/security/pam_smbpass.so ... ... ... May 10 10:30:48 dmitry-desktop sudo: pam_unix(sudo:session): session opened for user root by (uid=0) May 10 10:30:48 dmitry-desktop sudo: pam_unix(sudo:session): session closed for user root May 10 10:30:49 dmitry-desktop sudo: PAM unable to dlopen(/lib/security/pam_smbpass.so) May 10 10:30:49 dmitry-desktop sudo: PAM [error: /lib/security/pam_smbpass.so: cannot open shared object file: No such file or directory] May 10 10:30:49 dmitry-desktop sudo: PAM adding faulty module: /lib/security/pam_smbpass.so May 10 10:31:22 dmitry-desktop sudo: PAM adding faulty module: /lib/security/pam_smbpass.so System Events =-=-=-=-=-=-= May 10 10:23:45 dmitry-desktop postfix/local[32591]: warning: dict_nis_init: NIS domain name not set - NIS lookups disabled May 10 10:30:01 dmitry-desktop CRON[6230]: PAM unable to dlopen(/lib/security/pam_smbpass.so) May 10 10:30:01 dmitry-desktop CRON[6230]: PAM [error: /lib/security/pam_smbpass.so: cannot open shared object file: No such file or directory] May 10 10:30:01 dmitry-desktop CRON[6230]: PAM adding faulty module: /lib/security/pam_smbpass.so May 10 10:30:01 dmitry-desktop CRON[6233]: PAM unable to dlopen(/lib/security/pam_smbpass.so) May 10 10:30:01 dmitry-desktop CRON[6233]: PAM [error: /lib/security/pam_smbpass.so: cannot open shared object file: No such file or directory] May 10 10:30:01 dmitry-desktop CRON[6233]: PAM adding faulty module: /lib/security/pam_smbpass.so May 10 10:30:01 dmitry-desktop postfix/local[6271]: warning: dict_nis_init: NIS domain name not set - NIS lookups disabled D: [1210401157] Sent report to STDOUT D: [1210401157] cleanup: Killing lockfile-touch - 6929 D: [1210401157] cleanup: Removing lockfile: /var/lock/logcheck/logcheck.lock D: [1210401157] cleanup: Removing - /tmp/logcheck.xY6930

Подскажите, пожалуйста, что я делаю не так.
Спасибо сказали:
Вернуться к началу

Вернуться в «Администрирование»