diff options
Diffstat (limited to 'sys-apps/logwatch/files/logwatch-7.11-openssh-9.8.patch')
| -rw-r--r-- | sys-apps/logwatch/files/logwatch-7.11-openssh-9.8.patch | 37 |
1 files changed, 37 insertions, 0 deletions
diff --git a/sys-apps/logwatch/files/logwatch-7.11-openssh-9.8.patch b/sys-apps/logwatch/files/logwatch-7.11-openssh-9.8.patch new file mode 100644 index 000000000000..1162115f3f09 --- /dev/null +++ b/sys-apps/logwatch/files/logwatch-7.11-openssh-9.8.patch @@ -0,0 +1,37 @@ +https://sourceforge.net/p/logwatch/patches/84/ +--- a/conf/services/secure.conf ++++ b/conf/services/secure.conf +@@ -24,7 +24,7 @@ $secure_ip_lookup = No + # Use this to ignore certain services in the secure log. + # You can ignore as many services as you would like. + # (we ignore sshd because its entries are processed by the sshd script) +-$ignore_services = sshd Pluto stunnel proftpd saslauthd imapd postfix/smtpd ++$ignore_services = sshd sshd-session Pluto stunnel proftpd saslauthd imapd postfix/smtpd + + # For these services, summarize only (i.e. don't least each IP, just + # list the number of connections total) +--- a/conf/services/sshd.conf ++++ b/conf/services/sshd.conf +@@ -19,7 +19,7 @@ LogFile = secure + LogFile = messages + + # Only give lines pertaining to the sshd service... +-*OnlyService = sshd ++*OnlyService = (sshd|sshd-session) + *RemoveHeaders + + # Variable $sshd_ignore_host is used to filter out hosts that login +--- a/scripts/services/sshd ++++ b/scripts/services/sshd +@@ -246,9 +246,9 @@ while (defined(my $ThisLine = <STDIN>)) { + $NoIdent{$name}++; + } elsif ( + ($ThisLine =~ m/^(?:error:.*|fatal:) Connection closed by remote host/ ) or +- ($ThisLine =~ m/^(|fatal: )Read error from remote host(| [^ ]+): Connection reset by peer/ ) or ++ ($ThisLine =~ m/^(|fatal: )Read error from remote host(| [^ ]+)(| port \d+): Connection reset by peer/ ) or + ($ThisLine =~ m/^error: .*: read: Connection reset by peer/ ) or +- ($ThisLine =~ m/^Read error from remote host [^ ]+: (Connection timed out|No route to host)/ ) or ++ ($ThisLine =~ m/^Read error from remote host [^ ]+(| port \d+): (Connection timed out|No route to host)/ ) or + ($ThisLine =~ m/^fatal: Read from socket failed: No route to host/) or + ($ThisLine =~ m/^fatal: Write failed: Network is unreachable/ ) or + ($ThisLine =~ m/^fatal: Write failed: Broken pipe/) or |