summaryrefslogtreecommitdiff
path: root/src/etc/rsyslog.d/01-auth.conf
blob: cc64099d6b112748ea2ec43a128569a89ddf30f1 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
# The lines below cause all listed daemons/processes to be logged into
# /var/log/auth.log, then drops the message so it does not also go to the
# regular syslog so that messages are not duplicated

$outchannel auth_log,/var/log/auth.log
if  $programname == 'CRON' or
    $programname == 'sudo' or
    $programname == 'su'
    then :omfile:$auth_log

if $programname == 'CRON' or
    $programname == 'sudo' or
    $programname == 'su'
    then stop