Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!

Bug 232848

Summary: syslog-ng-2.0.9: match filter rules in 'syslog-ng.conf.gentoo.hardened' broken
Product: Gentoo Linux Reporter: cilly <cilly>
Component: New packagesAssignee: Gentoo Linux bug wranglers <bug-wranglers>
Status: RESOLVED DUPLICATE    
Severity: normal    
Priority: High    
Version: unspecified   
Hardware: All   
OS: Linux   
URL: http://sources.gentoo.org/viewcvs.py/gentoo-x86/app-admin/syslog-ng/files/syslog-ng.conf.gentoo.hardened?hideattic=0&view=markup
Whiteboard:
Package list:
Runtime testing required: ---
Attachments: corrected

Description cilly 2008-07-24 16:30:43 UTC
corrected filters:

# grsec & pax
filter f_avc { match("^\\[.*\] .*avc: .*"); };
filter f_audit { match("^\\[.*\] audit.*") and not match(".*avc: .*"); };
filter f_pax { match("^\\[.*\] PAX:.*"); };
filter f_grsec { match("^\\[.*\] grsec:.*"); };
Comment 1 cilly 2008-07-24 16:31:33 UTC
Created attachment 161275 [details]
corrected
Comment 2 cilly 2008-07-24 16:32:31 UTC
May be, there are other filter rules broken, too.
Comment 3 Rafał Mużyło 2008-07-24 17:41:21 UTC
Close the duplicate, please.
Comment 4 Jeremy Olexa (darkside) (RETIRED) archtester gentoo-dev Security 2008-07-24 18:01:09 UTC

*** This bug has been marked as a duplicate of bug 232847 ***