SF.net SVN: logwatch:[252] trunk/scripts/services/secure

Revision: 252
          http://sourceforge.net/p/logwatch/code/252
Author:   opoplawski
Date:     2014-09-25 18:37:00 +0000 (Thu, 25 Sep 2014)
Log Message:
-----------
[secure] - Fix username handling

Weaken username regexp restriction. Usernames can include more characters than
just letters (e.g. _ or [0-9]).

Author: Jan Synacek <[email protected]>
Reported-By: Robert Scheck
RH-Bugzilla: #894272

Modified Paths:
--------------
    trunk/scripts/services/secure

Modified: trunk/scripts/services/secure
===================================================================
--- trunk/scripts/services/secure	2014-09-25 18:30:37 UTC (rev 251)
+++ trunk/scripts/services/secure	2014-09-25 18:37:00 UTC (rev 252)
@@ -246,7 +246,7 @@
       ( $ThisLine =~ /userhelper\[\d+\]: running '([^ ]+)' with [^ ]+ context/) or
       ( $ThisLine =~ /pam_timestamp\(.*:session\): updated timestamp file `\/var\/run\/sudo.*'/) or
       ( $ThisLine =~ /[^ ]*: pam_keyinit(.*:.*): Unable to change GID to [0-9]* temporarily/) or
-      ( $ThisLine =~ /password check failed for user \([a-zA-Z]*\)/) or
+      ( $ThisLine =~ /password check failed for user \(\S*\)/) or
       ( $ThisLine =~ /PAM pam_set_item: attempt to set conv\(\) to NULL/) or
       ( $ThisLine =~ /PAM pam_get_item: nowhere to place requested item/) or
       ( $ThisLine =~ /pam_succeed_if\(.*:.*\): error retrieving information about user [a-zA-Z]*/ ) or

This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.


------------------------------------------------------------------------------
Meet PCI DSS 3.0 Compliance Requirements with EventLog Analyzer
Achieve PCI DSS 3.0 Compliant Status with Out-of-the-box PCI DSS Reports
Are you Audit-Ready for PCI DSS 3.0 Compliance? Download White paper
Comply to PCI DSS 3.0 Requirement 10 and 11.5 with EventLog Analyzer
http://pubads.g.doubleclick.net/gampad/clk?id=154622311&iu=/4140/ostg.clktrk