From 93616660dbd06e2ed916d0fe05b687665067e4ae Mon Sep 17 00:00:00 2001
From: Hendrik Jäger <hendrik@securosys.ch>
Date: Sat, 21 Dec 2019 13:54:11 +0200
Subject: Add logcheck rule for auditd

---
 files/etc/logcheck/ignore.d.server/local-auditd | 1 +
 1 file changed, 1 insertion(+)
 create mode 100644 files/etc/logcheck/ignore.d.server/local-auditd

(limited to 'files/etc')

diff --git a/files/etc/logcheck/ignore.d.server/local-auditd b/files/etc/logcheck/ignore.d.server/local-auditd
new file mode 100644
index 0000000..13df1eb
--- /dev/null
+++ b/files/etc/logcheck/ignore.d.server/local-auditd
@@ -0,0 +1 @@
+^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ auditd\[[[:digit:]]+\]: Audit daemon rotating log files$
-- 
cgit v1.2.3