[syslog-ng] patterndb Joining rulesets with mismatching program name sets

Fabien Wernli wernli at in2p3.fr
Wed Mar 22 15:43:21 UTC 2017


Hi,

It seems somewhere between 3.7 and 3.8 my patterndb broke validation tests.
When running `pdbtool test` I now get:

    Joining rulesets with mismatching program name sets

This helpful message seems to be right if I understand it correctly:

    <ruleset name='pam_unix' id='72d75cb0-0107-4d12-b0bf-cea36ddf7f38'>
             <patterns>
                        <pattern>sshd</pattern>
                        <pattern>crond</pattern>
                        <pattern>imap</pattern>
                        <pattern>imapd</pattern>
                        <pattern>login</pattern>
                        <pattern>pam</pattern>
                        <pattern>pure-ftpd</pattern>
                        <pattern>proftpd</pattern>
                        <pattern>su</pattern>
                        <pattern>sudo</pattern>
        

    <ruleset name='cron' id='3a8efec5-6974-4b4a-b203-3247fe235812'>
                <patterns>
                        <pattern>crond</pattern>
                        <pattern>CROND</pattern>
                </patterns>

Since when, and why is this illegal now?

Thanks



More information about the syslog-ng mailing list