|
Lines 84-93
Link Here
|
| 84 |
filter f_crit { level(crit); }; |
84 |
filter f_crit { level(crit); }; |
| 85 |
filter f_err { level(err); }; |
85 |
filter f_err { level(err); }; |
| 86 |
|
86 |
|
|
|
87 |
# grsec & pax |
| 87 |
filter f_avc { match(".*avc: .*"); }; |
88 |
filter f_avc { match(".*avc: .*"); }; |
| 88 |
filter f_audit { match("^audit.*") and not match(".*avc: .*"); }; |
89 |
filter f_audit { ( match("^\\[.*\] audit.*") or match("^audit.*") ) and not match(".*avc: .*"); }; |
| 89 |
filter f_pax { match("^PAX:.*"); }; |
90 |
filter f_pax { match("^\\[.*\] PAX:.*") or match("^PAX:.*"); }; |
| 90 |
filter f_grsec { match("^grsec:.*"); }; |
91 |
filter f_grsec { match("^\\[.*\] grsec:.*") or match("^grsec:.*"); }; |
| 91 |
|
92 |
|
| 92 |
log { source(src); filter(f_authpriv); destination(authlog); }; |
93 |
log { source(src); filter(f_authpriv); destination(authlog); }; |
| 93 |
log { source(src); filter(f_syslog); destination(syslog); }; |
94 |
log { source(src); filter(f_syslog); destination(syslog); }; |
