|
Lines 80-89
Link Here
|
| 80 |
filter f_crit { level(crit); }; |
80 |
filter f_crit { level(crit); }; |
| 81 |
filter f_err { level(err); }; |
81 |
filter f_err { level(err); }; |
| 82 |
|
82 |
|
| 83 |
filter f_avc { match(".*avc: .*"); }; |
83 |
filter f_avc { match("regex" value(".*avc: .*")); }; |
| 84 |
filter f_audit { match("^audit.*") and not match(".*avc: .*"); }; |
84 |
filter f_audit { match("regex" value("^audit.*")) and not match("regex" value(".*avc: .*")); }; |
| 85 |
filter f_pax { match("^PAX:.*"); }; |
85 |
filter f_pax { match("regex" value("^PAX:.*")); }; |
| 86 |
filter f_grsec { match("^grsec:.*"); }; |
86 |
filter f_grsec { match("regex" value("^grsec:.*")); }; |
| 87 |
|
87 |
|
| 88 |
log { source(src); filter(f_authpriv); destination(authlog); }; |
88 |
log { source(src); filter(f_authpriv); destination(authlog); }; |
| 89 |
log { source(src); filter(f_syslog); destination(_syslog); }; |
89 |
log { source(src); filter(f_syslog); destination(_syslog); }; |
