diff --git a/logwatch-7.3.6-sshd3.patch b/logwatch-7.3.6-sshd3.patch new file mode 100644 index 0000000..6528b82 --- /dev/null +++ b/logwatch-7.3.6-sshd3.patch @@ -0,0 +1,17 @@ +--- logwatch/scripts/services/sshd 2009-08-11 21:59:52.000000000 +1000 ++++ sshd 2009-07-27 22:14:54.000000000 +1000 +@@ -342,6 +342,14 @@ + $LockedAccount{$User}++; + } elsif ( my ($User) = ($ThisLine =~ /^User ([^ ]*)( from [0-9.]*)? not allowed because not listed in AllowUsers/)) { + $AllowUsers{$User}++; ++ } elsif ( my ($User) = ($ThisLine =~ /^User ([^ ]*)( from [0-9.]*)? not allowed because listed in DenyUsers/)) { ++ $AllowUsers{$User}++; ++ } elsif ( my ($User) = ($ThisLine =~ /^User ([^ ]*)( from [0-9.]*)? not allowed because not in any group/)) { ++ $AllowUsers{$User}++; ++ } elsif ( my ($User) = ($ThisLine =~ /^User ([^ ]*)( from [0-9.]*)? not allowed because a group is listed in DenyGroups/)) { ++ $AllowUsers{$User}++; ++ } elsif ( my ($User) = ($ThisLine =~ /^User ([^ ]*)( from [0-9.]*)? not allowed because none of user\'s groups are listed in AllowGroups/)) { ++ $AllowUsers{$User}++; + } elsif ( ($User) = ($ThisLine =~ /^User ([^ ]*) not allowed because shell (\S+) does not exist/)) { + $NoShellUsers{$User}++; + } elsif ( my ($IP) = ($ThisLine =~ /^scanned from ([^ ]*)/) ) { diff --git a/logwatch.spec b/logwatch.spec index e422eac..5d2b6ef 100644 --- a/logwatch.spec +++ b/logwatch.spec @@ -1,7 +1,7 @@ Summary: A log file analysis program Name: logwatch Version: 7.3.6 -Release: 49%{?dist} +Release: 50%{?dist} License: MIT Group: Applications/System URL: http://www.logwatch.org/ @@ -65,6 +65,7 @@ Patch63: logwatch-7.3.6-openvpn4.patch Patch64: logwatch-7.3.6-pam_unix4.patch Patch65: logwatch-7.3.6-dhcpd.patch Patch66: logwatch-7.3.6-named6.patch +Patch67: logwatch-7.3.6-sshd3.patch Requires: textutils sh-utils grep mailx Requires: perl(Date::Manip) BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n) @@ -135,6 +136,7 @@ of the package on many systems. %patch64 -p1 %patch65 -p1 %patch66 -p1 +%patch67 -p1 rm -f scripts/services/*.orig %build @@ -258,6 +260,9 @@ rm -rf %{buildroot} %doc License project/CHANGES %changelog +* Mon Feb 1 2010 Karel Klic 7.3.6-50 +- Added patch from #555750: Not all methods to deny login via sshd are reported + * Wed Dec 2 2009 Karel Klic 7.3.6-49 - Add 802.1q subinterface support to iptables report; iptables.patch (#507743) - Fixed error in the RE that matches "lost connection" lines in postfix script; lost-connection.patch (#525903)