This repository is private.
All pages are served over SSL and all pushing and pulling is done over SSH.
No one may fork, clone, or view it unless they are added as a member.
Every repository with this icon (
) is private.
Every repository with this icon (
This repository is public.
Anyone may fork, clone, or view it.
Every repository with this icon (
) is public.
Every repository with this icon (
root (author)
Sat Dec 19 00:08:33 -0800 2009
| name | age | message | |
|---|---|---|---|
| |
README | Fri Jun 19 11:38:40 -0700 2009 | |
| |
ignore.d/ | Thu Dec 17 23:13:04 -0800 2009 | |
| |
sync.py | Fri Dec 18 23:41:00 -0800 2009 | |
| |
violations.ignore.d/ | Sat Dec 19 00:14:31 -0800 2009 |
README
My personal collection of custom logcheck rules
===============================================
1) Check the repository into a location like:
/etc/logcheck/custom.ignore.d
Don't forget to set the permissions correctly. Usually, the group
is set to the ``logcheck`` user, and nothing is world-readable:
chown -R :logcheck /etc/logcheck/custom.ignore.d
chmod -R o= /etc/logcheck/custom.ignore.d
find /etc/logcheck/custom.ignore.d -type d | xargs chmod g+s
2) Run
``/etc/logcheck/custom.ignore.d/sync.py``
This will link the custom rule files into the appropriate logcheck
ignore directories.
Note that by default it will assume to be located in a directory
within a standard ``/etc/logcheck`` directory structure, and will
sync the rules of the SYSTEM EVENTS layer into all report levels
(workstation, server, paranoid).







