Re: [Prelude Hybrid IDS] #266: LML Ruleset to ignore cron jobs

I've seen this the problem is in your pam configuration.
Take a look at your /etc/pam.d/crond file there is an option you can add 
to stop it.
On Wed, 24 Oct 2007 3:33 pm, Prelude Hybrid IDS wrote:
> #266: LML Ruleset to ignore cron jobs
> -------------------------+--------------------------------------------------
>  Reporter:  pollux       |       Owner:  yoann
>      Type:  enhancement  |      Status:  new
>  Priority:  normal       |   Milestone:
> Component:  prelude-lml  |     Version:  0.9
>  Severity:  normal       |    Keywords:
> -------------------------+--------------------------------------------------
>  When parsing auth.log, tons of alerts are send for cron jobs 
> (producing
>  lots of noise on real events).
>
>  This is an example file to show how to ignore how to ignore such 
> events.
>
> --
> Ticket URL: <https://trac.prelude-ids.org/ticket/266>
> Prelude Hybrid IDS <http://www.prelude-ids.org>
> The Prelude Hybrid Intrusion Detection System suite
> _______________________________________________
> Prelude-devel site list
> [email protected]
> http://www.prelude-ids.org/mailman/listinfo/prelude-devel
___________________________________________
The average person does a lot of work in the name of laziness!
Save youre self the effort by doing it right the first time.
Do it with free speech software.
_______________________________________________
Prelude-devel site list
[email protected]
http://www.prelude-ids.org/mailman/listinfo/prelude-devel