From d46867733de3016f2c758fbffb2db84904415cd3 Mon Sep 17 00:00:00 2001
From: Ivana Varekova <varekova@fedoraproject.org>
Date: Mon, 2 Apr 2007 14:04:05 +0000
Subject: [PATCH] - Resolves: 234767 Unmatched Entries in mails since sysklogd 
    1.4.2-3/#223573

---
 logwatch-7.3.4-secure.patch | 13 +++++++++++++
 logwatch.spec               |  8 +++++++-
 2 files changed, 20 insertions(+), 1 deletion(-)
 create mode 100644 logwatch-7.3.4-secure.patch

diff --git a/logwatch-7.3.4-secure.patch b/logwatch-7.3.4-secure.patch
new file mode 100644
index 0000000..3834398
--- /dev/null
+++ b/logwatch-7.3.4-secure.patch
@@ -0,0 +1,13 @@
+--- logwatch-7.3.4/scripts/services/secure.pom	2007-01-29 19:29:14.000000000 +0100
++++ logwatch-7.3.4/scripts/services/secure	2007-04-02 15:56:22.000000000 +0200
+@@ -204,7 +204,9 @@
+       ( $ThisLine =~ /PAM pam_set_item: attempt to set conv\(\) to NULL/) or
+       ( $ThisLine =~ /PAM pam_get_item: nowhere to place requested item/) or
+       ( $ThisLine =~ /pam_succeed_if\(.*:.*\): error retrieving information about user [a-zA-Z]*/ ) or
+-      ( $ThisLine =~ /logfile turned over/) # newsyslog on OpenBSD
++      ( $ThisLine =~ /logfile turned over/) or # newsyslog on OpenBSD
++      ( $ThisLine =~ /Connection closed by/) or
++      ( $ThisLine =~ /sshd: Accepted \S+ for \S+ from [\d\.:a-f]+ port \d+/) # ssh script reads this log
+    ) {
+       # Ignore these entries
+    } elsif ($ThisLine =~ /^spop3d/ || $ThisLine =~ /^pop\(\w+\)\[\d+\]:/) {
diff --git a/logwatch.spec b/logwatch.spec
index baf65cf..e002604 100644
--- a/logwatch.spec
+++ b/logwatch.spec
@@ -1,7 +1,7 @@
 Summary: A log file analysis program
 Name: logwatch
 Version: 7.3.4
-Release: 2%{?dist}
+Release: 3%{?dist}
 License: MIT
 Group: Applications/System
 URL: http://www.logwatch.org/
@@ -9,6 +9,7 @@ Source: ftp://ftp.kaybee.org/pub/linux/logwatch-%{version}.tar.gz
 Patch1: logwatch-7.2.1-nosegfault.patch
 Patch2: logwatch-7.3.1-vsftpd.patch
 Patch3: logwatch-7.3.4-pam_unix.patch
+Patch4: logwatch-7.3.4-secure.patch
 
 Requires: textutils sh-utils grep mailx
 BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
@@ -25,6 +26,7 @@ of the package on many systems.
 %patch1 -p1
 %patch2 -p1
 %patch3 -p1
+%patch4 -p1
 
 %build
 
@@ -138,6 +140,10 @@ rm -rf %{buildroot}
 %doc License project/CHANGES 
 
 %changelog
+* Mon Apr  2 2007 Ivana Varekova <varekova@redhat.com> 7.3.4-3
+- Resolves: 234767
+  Unmatched Entries in mails since sysklogd 1.4.2-3/#223573
+
 * Thu Mar  8 2007 Ivana Varekova <varekova@redhat.com> 7.3.4-2
 - add pam_unix service patch