Changeset 2195 for branches/fc17-dev/server/fedora/config/etc/syslog-ng/d_zroot.pl

Timestamp:

May 22, 2012, 10:52:35 PM (12 years ago)

Author:

ezyang

Message:

Merge changes from trunk.

Location:

branches/fc17-dev

Files:

• . (modified) (1 prop)
• server/fedora/config/etc/syslog-ng/d_zroot.pl (modified) (5 diffs)

branches/fc17-dev/server/fedora/config/etc/syslog-ng/d_zroot.pl

@@ -17 +17 @@
 @USERS{@USERS} = undef;
 
-sub zwrite($;$$@) {
-    my ($message, $class, $instance, @recipients) = @_;
+sub zwrite($;$$\@) {
+    my ($message, $class, $instance, $recipref) = @_;
+    my @recipients = ();
+    if (defined($recipref)) {
+        if (@$recipref) {
+            @recipients = @$recipref;
+        } else {
+            $message = '@b(Empty recipient list specified, message redacted)';
+            $class = $ZCLASS;
+        }
+    }
     $class ||= $ZCLASS;
     $instance ||= 'root.'.hostname;
@@ -24 +33 @@
     print ZWRITE $message;
     close(ZWRITE);
+}
+
+unless (@RECIPIENTS) {
+    # Also give a warning at startup
+    zwrite('@b(No .k5login found, sensitive logs will not be zephyred)', $ZCLASS);
 }
 
@@ -108 +122 @@
         } elsif ($message =~ m|^error: PAM: Authentication failure|) {
         } elsif ($message =~ m|^pam_unix\(sshd:auth\): authentication failure|) {
+        } elsif ($message =~ m|^pam_unix\(sshd:auth\): check pass; user unknown|) {
         } elsif ($message =~ m|^Postponed keyboard-interactive for invalid user |) {
         } elsif ($message =~ m|^Failed keyboard-interactive/pam for invalid user |) {
@@ -119 +134 @@
         } elsif ($message =~ m|^ *root : TTY=|) {
         } elsif ($message =~ m|^Set /proc/self/oom_adj to |) {
+        } elsif ($message =~ m|^Set /proc/self/oom_score_adj to |) {
         } elsif ($message =~ m|^fatal: mm_request_receive: read: Connection reset by peer$|) {
         } else {
@@ -126 +142 @@
 
     foreach my $class (keys %toclass) {
-        if ($class eq "scripts-auto") {
+        if ($class eq $ZCLASS) {
             zwrite($toclass{$class}, $class);
         } else {