[Logwatch-Devel] patch for pam_unix to process 'rsh'

David Baldwin david.baldwin at anu.edu.au
Sun Sep 18 17:51:57 MST 2005


'rsh' connections were coming up as unknown on my RH8 boxes. Lumped them in with 
sshd, login and ftp.

David.


--- scripts/services/pam_unix   23 Aug 2005 22:10:26 -0000      1.20
+++ scripts/services/pam_unix   19 Sep 2005 00:50:05 -0000
@@ -82,7 +82,7 @@
         }
     #lowercase the service
     $service = lc($service);
-       if (($service eq 'sshd') or ($service eq 'login') or ($service eq 'ftp')) {
+       if (($service eq 'sshd') or ($service eq 'login') or ($service eq 'ftp') 
or ($service eq 'rsh')) {
                 if ($line =~ s/^session opened for user (.+) by \(uid=\d+\)/$1/) {
                         ($Detail >= 5) && $data{$service}{'Sessions 
Opened'}{$line}++;
        } elsif ($line =~ s/^session opened for user ([^ ]*) by ([^ 
]*)\(uid=\d+\)/$1 by $2/) {


-- 
=====================================================================+
David Baldwin                   mailto:David.Baldwin at anu.edu.au      |
Supercomputer Facility          URL: http://www.anu.edu.au/~u8611156 |
II Services, Huxley Building    Ph:  {intl+61+2 | (02)} 6125 0321    |
Australian National University  FAX: {intl+61+2 | (02)} 6125 8199    |
Canberra ACT 0200, AUSTRALIA  *======================================+


More information about the Logwatch-Devel mailing list