[hobbit] Another stellar release
Henrik Stoerner
henrik at hswn.dk
Mon Aug 28 18:42:44 CEST 2006
On Mon, Aug 28, 2006 at 11:08:20AM -0400, Jerry Yu wrote:
>
> Question, which takes precedence, if a line matches both IGNORE and the
> alert string/reg. One line of particular interests to me is the SELinux's
> pts relabeling warning in /var/log/messages, which is harmless but annoying.
> I am on 4.2-RC1-20060712 and have seen such a log line causing this log test
> to go red.
>
> In 'hobbit-clients.cfg', I have
> log /var/log/messages %WARNING|NOTICE|ERROR IGNORE=relabeling
>
> The offending log lines goes line:
> Jul 30 18:22:25 SRV01 su[31747]: Warning! Could not relabel /dev/pts/0 with
> user_u:object_r:devpts_t, not relabeling.Operation not permitted
IGNORE takes precedence over the matching rule. So this line would not
trigger an error status.
Regards,
Henrik
More information about the Xymon
mailing list