opnsense-ports/security/logcheck/files/patch-rulefiles_linux_violations.d_sudo
Franco Fichtner 9ce766f4ca */*: sync with upstream
Taken from: HardenedBSD
2018-10-27 08:06:09 +02:00

7 lines
398 B
Text

--- rulefiles/linux/violations.d/sudo.orig 2018-05-30 21:59:13 UTC
+++ rulefiles/linux/violations.d/sudo
@@ -1,3 +1,3 @@
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ sudo\[[0-9]+\]: \(pam_[[:alnum:]]+\) .*$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ sudo\[[0-9]+\]: pam_[[:alnum:]]+\(sudo:[[:alnum:]]+\): .*$
-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ sudo: .*$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ sudo(\[[0-9]+\])?: .*$