1 |
I've setup logcheck on my gentoo system, mostly following: |
2 |
|
3 |
https://wiki.gentoo.org/wiki/Logcheck |
4 |
|
5 |
It is working fairly well. A typical logcheck email I receive looks like: |
6 |
|
7 |
Security Events for su |
8 |
=-=-=-=-=-=-=-=-=-=-=- |
9 |
Using fallback detection... please install python-magic for better gzip detection. |
10 |
0 Lines skipped (already processed) |
11 |
0 Patterns to ignore |
12 |
0 Ignored lines |
13 |
1 sempron su: pam_unix(su:session): session opened for user man(uid=13) by (uid=0) |
14 |
1 sempron su: pam_unix(su:session): session opened for user root(uid=0) by tom(uid=1000) |
15 |
1 sempron su: pam_unix(su:session): session opened for user logcheck(uid=997) by (uid=0) |
16 |
|
17 |
Noticed the line "Using fallback detection... please install python-magic for better gzip detection." I installed python-magic, but that makes no difference. |
18 |
|
19 |
The line is always there, and it appears in both the "Security Events" and "System Events" part of the email. |
20 |
|
21 |
Anybody have any idea how to get rid of it? |
22 |
|
23 |
Tom Naujokas (elu6-u259 at spamex.com) |