logwatch/logwatch-xvc.patch
Jan Synacek 47eb5193fe Add applystddate patch - support rsyslog timestamps
Add http patch - count .hdr files as archives
Add pluto patch - update openswan parsing
Add xvc patch - support xen virtual console logins
2012-08-29 12:50:53 +02:00

23 lines
937 B
Diff

--- logwatch-svn110/scripts/services/secure.orig 2012-08-29 10:45:25.000000000 +0200
+++ logwatch-svn110/scripts/services/secure 2012-08-29 10:47:51.228547898 +0200
@@ -377,6 +377,8 @@
$Error{$Service}{$Err}++;
} elsif ( $ThisLine =~ /^login(\[\d+\])*: ROOT LOGIN\s+(ON|on)\s+`?tty[0-9]+/) {
$RootLoginTTY++
+ } elsif ( $ThisLine =~ /^login(\[\d+\])*: ROOT LOGIN\s+(ON|on)\s+`?xvc[0-9]+/) {
+ $RootLoginXVC++
} elsif ( $ThisLine =~ /^com.apple.SecurityServer: authinternal authenticated user root .*/) {
$RootLoginTTY++
} elsif ( (undef,$User) = ($ThisLine =~ /^login: LOGIN ON (tty|pts\/)[0-9]+ BY ([^ ]+)/ )) {
@@ -734,6 +736,10 @@
print "\nRoot logins on ttys: $RootLoginTTY Time(s).\n";
}
+if ($RootLoginXVC) {
+ print "\nRoot logins on xvcs: $RootLoginXVC Time(s).\n";
+}
+
if (keys %UserLogin) {
print "\nUser Logins:\n";
foreach $User (sort {$a cmp $b} keys %UserLogin) {