[opensuse] rsyslog question
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I'm getting a lot of these:
<10.3> 2013-06-09 19:53:01 Telcontar 10047 - - pam_apparmor(crond:session): Unknown error occurred changing to news hat: Operation not permitted <10.3> 2013-06-09 19:58:01 Telcontar 10174 - - pam_apparmor(crond:session): Unknown error occurred changing to news hat: Operation not permitted <10.3> 2013-06-09 20:00:01 Telcontar 10306 - - pam_apparmor(crond:session): Unknown error occurred changing to users hat: Operation not permitted <10.3> 2013-06-09 20:00:01 Telcontar 10305 - - pam_apparmor(crond:session): Unknown error occurred changing to users hat: Operation not permitted <10.3> 2013-06-09 20:00:01 Telcontar 10304 - - pam_apparmor(crond:session): Unknown error occurred changing to root hat: Operation not permitted
The root cause is Bug 807130, they are innocuous, but I just want to silence them on the warning log at least. I tried this in /etc/rsyslog.conf if ($APP-NAME startswith 'pam_apparmor') \ then -/var/log/DeleteMe & ~ and also #if ($programname == 'pam_apparmor(crond:session)') #if ($programname startswith 'pam_apparmor') None matches, there is nothing in the /var/log/DeleteMe file. I got the idea from this existing entry: # # NetworkManager into separate file and stop their further processing # if ($programname == 'NetworkManager') or \ ($programname startswith 'nm-') \ then -/var/log/NetworkManager & ~ - -- Cheers / Saludos, Carlos E. R. (from 12.3 x86_64 "Dartmouth" at Telcontar) -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.19 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iEYEARECAAYFAlG0yaUACgkQIvFNjefEBxp1cACgmuF4XNkSTu5Qu5tHolCp/loE 32AAoJI99er9pbluerISrJAV5mwHWLL9 =sENU -----END PGP SIGNATURE----- -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
participants (1)
-
Carlos E. R.