diff --git a/files/etc/filter-syslog/auditd-wheezy b/files/etc/filter-syslog/auditd-wheezy index 13da1e9066770476dd03f74613b7a6b0b8ac428f..678bcf02be72d15f36fb95fd836f0012befd6ec6 100644 --- a/files/etc/filter-syslog/auditd-wheezy +++ b/files/etc/filter-syslog/auditd-wheezy @@ -2,10 +2,8 @@ # # 2015-07-28T23:45:01.850038-07:00 ldap-test0 auditd[4506]: /sbin/audispd permissions should be 0750 # 2015-07-28T23:45:01.850149-07:00 ldap-test0 auditd[4506]: config change requested by pid=17795 auid=0 subj=? -# 2015-07-28T23:45:01.850222-07:00 ldap-test0 auditd[4506]: audit(1438152301.850:2396) config changed, auid=0 pid=17795 subj=? res -=success +# 2015-07-28T23:45:01.850222-07:00 ldap-test0 auditd[4506]: audit(1438152301.850:2396) config changed, auid=0 pid=17795 subj=? res=success # # See also https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=640866 /.*.sbin.audispd permissions should be 0750.*/ ... /.*config changed, auid=.* pid=.* subj=. res=success.*/ -