1 --- acl.conf.pius Thu Jan 6 17:00:30 2000
2 +++ acl.conf Thu Jan 20 21:35:26 2000
4 Service, identd, normal
5 Service, ftpd, BrightGreen : Note this also does tftpd
6 Service, named, BrightCyan
7 -Service, PAM_pwdb, BrightMagenta
8 +Service, PAM_unix, BrightMagenta
9 Service, login, BrightYellow
10 Service, telnetd, Yellow
11 +Service, inetd, Yellow
12 Service, snort, BrightRed
18 : More alert stuff we want to highlight
19 -BackgroundBrightYellow,Authentication failure
20 +BackgroundBrightYellow,uthentication failure
21 BackgroundBrightYellow,FAILED LOGIN : telnetd
22 BackgroundBrightYellow,failed login : ftpd
23 BeepBlinkingBackgroundBrightYellow,repeated login failures : ftpd
24 +BrightRed,inetd,warning
27 : Further down the chain are these messages we don't want to miss.
29 BackgroundWhite,modprobe
34 Hide,(su),for user nobody : Ignore `su nobody`
35 -:BackgroundMagenta,PAM_pwdb,(su),opened : `su nobody` already fell out
36 -BackgroundMagenta,PAM_pwdb,opened
37 -:Magenta,PAM_pwdb,(su)
38 -Magenta,PAM_pwdb,closed
39 -BrightMagenta,PAM_pwdb : Everything else - passwd changes,
40 +:BackgroundMagenta,PAM_unix,(su),opened : `su nobody` already fell out
41 +BackgroundMagenta,PAM_unix,opened
42 +:Magenta,PAM_unix,(su)
43 +Magenta,PAM_unix,closed
44 +BrightMagenta,PAM_unix : Everything else - passwd changes,
45 : auth failures, unforeseen things