Tighten all rules to strict left side, based on su rules.

1 files changed, 58 insertions, 58 deletions

diff --git a/logcheck/ignore.d.workstation/local b/logcheck/ignore.d.workstation/local
index 8ee691d..ae02644 100644
--- a/logcheck/ignore.d.workstation/local
+++ b/logcheck/ignore.d.workstation/local
@@ -1,74 +1,74 @@
 ### ignore.d.workstation/bind
-named\[[0-9]+\]: deleting interface \[[\.0-9]+\]\.[0-9]+$
-named\[[0-9]+\]: listening on IPv4 interface eth[0-9], [\.0-9]+#53$
-named\[[0-9]+\]: listening on \[[\.0-9]+\]\.[0-9]+ \([^[:space:]]+\)$
-named\[[0-9]+\]: no longer listening on [\.0-9]+#53$
-named\[[0-9]+\]: ns_forw: sendto\(\[[\.0-9]+\]\.[0-9]+\): Network is unreachable$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ named\[[0-9]+\]: deleting interface \[[\.0-9]+\]\.[0-9]+$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ named\[[0-9]+\]: listening on IPv4 interface eth[0-9], [\.0-9]+#53$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ named\[[0-9]+\]: listening on \[[\.0-9]+\]\.[0-9]+ \([^[:space:]]+\)$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ named\[[0-9]+\]: no longer listening on [\.0-9]+#53$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ named\[[0-9]+\]: ns_forw: sendto\(\[[\.0-9]+\]\.[0-9]+\): Network is unreachable$
 ### ignore.d.workstation/devfsd
-devfsd\[[0-9]+\]: Caught SIGHUP$
-devfsd\[[0-9]+\]: read config file: "/etc/devfsd.conf"$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ devfsd\[[0-9]+\]: Caught SIGHUP$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ devfsd\[[0-9]+\]: read config file: "/etc/devfsd.conf"$
 ### ignore.d.workstation/dhcp-client
-dhclient(-2.2.x)?: No working leases in persistent database( - sleeping)?\.$
-dhclient(-2.2.x)?: Sleeping\.$
-dhclient(-2.2.x)?: No DHCPOFFERS received\.$
-dhclient(-2.2.x)?: receive_packet failed on eth[0-9]: Network is down$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhclient(-2.2.x)?: No working leases in persistent database( - sleeping)?\.$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhclient(-2.2.x)?: Sleeping\.$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhclient(-2.2.x)?: No DHCPOFFERS received\.$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhclient(-2.2.x)?: receive_packet failed on eth[0-9]: Network is down$
 ### ignore.d.workstation/gconf.changes
-gconfd \([^[:space:]]+\): CORBA_ORB_destroy: ORB still has [0-9]+ refs\.$
-gconfd \([^[:space:]]+\): Exiting$
-gconfd \([^[:space:]]+\): GConf server is not in use, shutting down\.$
-gconfd \([^[:space:]]+\): Resolved address "xml:readonly:/[^[:space:]]+" to a read-only config source at position [0-9]+$
-gconfd \([^[:space:]]+\): Resolved address "xml:readwrite:/[^[:space:]]+" to a writable config source at position [0-9]+$
-gconfd \([^[:space:]]+\): starting \(version [\.0-9]+\), pid [0-9]+ user '[^[:space:]]+'$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ gconfd \([^[:space:]]+\): CORBA_ORB_destroy: ORB still has [0-9]+ refs\.$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ gconfd \([^[:space:]]+\): Exiting$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ gconfd \([^[:space:]]+\): GConf server is not in use, shutting down\.$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ gconfd \([^[:space:]]+\): Resolved address "xml:readonly:/[^[:space:]]+" to a read-only config source at position [0-9]+$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ gconfd \([^[:space:]]+\): Resolved address "xml:readwrite:/[^[:space:]]+" to a writable config source at position [0-9]+$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ gconfd \([^[:space:]]+\): starting \(version [\.0-9]+\), pid [0-9]+ user '[^[:space:]]+'$
 ### ignore.d.workstation/gconf.da_DK
-gconfd \([^[:space:]]+\): Afslutter$
-gconfd \([^[:space:]]+\): Bestemte adressen "xml:readonly:/[^[:space:]]+" til en skrivebeskyttet konfigureringskilde ved position [0-9]+$
-gconfd \([^[:space:]]+\): Bestemte adressen "xml:readwrite:/[^[:space:]]+" til en skrivbar konfigureringskilde ved position [0-9]+$
-gconfd \([^[:space:]]+\): GConf-server er ikke i brug, lukker ned\.$
-gconfd \([^[:space:]]+\): Kunne ikke fjerne kataloget '/[^[:space:]]+' fra XML-bagendemellemlageret fordi den ikke er synkroniseret med disken\.$
-gconfd \([^[:space:]]+\): Modtog signal 15, lukker pænt ned$
-gconfd \([^[:space:]]+\): starter \(version [\.0-9]+\), pid [0-9]+ bruger '[^[:space:]]+'$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ gconfd \([^[:space:]]+\): Afslutter$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ gconfd \([^[:space:]]+\): Bestemte adressen "xml:readonly:/[^[:space:]]+" til en skrivebeskyttet konfigureringskilde ved position [0-9]+$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ gconfd \([^[:space:]]+\): Bestemte adressen "xml:readwrite:/[^[:space:]]+" til en skrivbar konfigureringskilde ved position [0-9]+$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ gconfd \([^[:space:]]+\): GConf-server er ikke i brug, lukker ned\.$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ gconfd \([^[:space:]]+\): Kunne ikke fjerne kataloget '/[^[:space:]]+' fra XML-bagendemellemlageret fordi den ikke er synkroniseret med disken\.$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ gconfd \([^[:space:]]+\): Modtog signal 15, lukker pænt ned$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ gconfd \([^[:space:]]+\): starter \(version [\.0-9]+\), pid [0-9]+ bruger '[^[:space:]]+'$
 ### ignore.d.workstation/laptop-net
-ifd\[[0-9]+\]: executing: '/usr/share/laptop-net/link-change eth[0-9]+ unwatched ((((up|down),(running|stopped),(dis)?connected|unknown)|unknown)( )?){2}'$
-ifd\[[0-9]+\]: eth[0-9]+ is unavailable$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ ifd\[[0-9]+\]: executing: '/usr/share/laptop-net/link-change eth[0-9]+ unwatched ((((up|down),(running|stopped),(dis)?connected|unknown)|unknown)( )?){2}'$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ ifd\[[0-9]+\]: eth[0-9]+ is unavailable$
 ### ignore.d.workstation/libgnorba
-gnome-name-server\[[0-9]+\]: starting
-gnome-name-server\[[0-9]+\]: name server starting
-gnome-name-server\[[0-9]+\]: server_is_alive: .*
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ gnome-name-server\[[0-9]+\]: starting
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ gnome-name-server\[[0-9]+\]: name server starting
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ gnome-name-server\[[0-9]+\]: server_is_alive: .*
 ### ignore.d.workstation/misc
 # Linux Thin clients
-syslogd started: BusyBox v[\.0-9]+ \([^[:space:]]+\)$
-init: Entering runlevel: 2
-rpc.mountd: authenticated mount request from 192\.168\..* for /home/opt/ltsp/i386 \(/home/opt/ltsp/i386\)
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ syslogd started: BusyBox v[\.0-9]+ \([^[:space:]]+\)$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ init: Entering runlevel: 2
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ rpc.mountd: authenticated mount request from 192\.168\..* for /home/opt/ltsp/i386 \(/home/opt/ltsp/i386\)
 # Laptop sleep
-kernel: ADB keyboard at [0-9], handler [0-9]$
-kernel: ADB mouse at [0-9], handler set to [0-9] \(trackpad\)$
-kernel: PCI: Enabling bus mastering for device [0-9:\.]+$
-kernel: adb devices:( \[[0-9]\]: [0-9] [0-9a-f]+)+$
-kernel: adb: (starting|finished) probe task\.\.\.$
-kernel: eth[0-9]: Airport (entering sleep mode|waking up)$
-kernel: eth[0-9]: __orinoco_set_multicast_list\(\) called while device not present\.
-kernel: eth[0-9]: resuming$
-kernel: eth[0-9]: suspending, WakeOnLan disabled$
-kernel: hd[a-d]: Enabling MultiWord DMA [1-9]$
-kernel: hd[a-d]: Enabling Ultra DMA [1-9]$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ kernel: ADB keyboard at [0-9], handler [0-9]$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ kernel: ADB mouse at [0-9], handler set to [0-9] \(trackpad\)$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ kernel: PCI: Enabling bus mastering for device [0-9:\.]+$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ kernel: adb devices:( \[[0-9]\]: [0-9] [0-9a-f]+)+$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ kernel: adb: (starting|finished) probe task\.\.\.$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ kernel: eth[0-9]: Airport (entering sleep mode|waking up)$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ kernel: eth[0-9]: __orinoco_set_multicast_list\(\) called while device not present\.
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ kernel: eth[0-9]: resuming$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ kernel: eth[0-9]: suspending, WakeOnLan disabled$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ kernel: hd[a-d]: Enabling MultiWord DMA [1-9]$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ kernel: hd[a-d]: Enabling Ultra DMA [1-9]$
 ### ignore.d.workstation/ntp-simple
-ntpd\[[0-9]+\]: synchronisation lost$
-ntpd\[[0-9]+\]: time reset [\.0-9]+ s$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ ntpd\[[0-9]+\]: synchronisation lost$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ ntpd\[[0-9]+\]: time reset [\.0-9]+ s$
 ### ignore.d.workstation/ntpdate
-ntpdate\[[0-9]+\]: can't find host$
-ntpdate\[[0-9]+\]: no servers can be used, exiting$
-ntpdate\[[0-9]+\]: step time server [\.0-9]+ offset [\.0-9]+ sec$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ ntpdate\[[0-9]+\]: can't find host$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ ntpdate\[[0-9]+\]: no servers can be used, exiting$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ ntpdate\[[0-9]+\]: step time server [\.0-9]+ offset [\.0-9]+ sec$
 ### ignore.d.workstation/oaf
-oafd: server_is_alive: cnx\[IDL:Bonobo/ConfigDatabase:1\.0\] = ([0-9a-f]+|\(nil\))$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ oafd: server_is_alive: cnx\[IDL:Bonobo/ConfigDatabase:1\.0\] = ([0-9a-f]+|\(nil\))$
 ### ignore.d.workstation/pmud
-pmud\[[0-9]+\]: running /etc/power/pwrctl (maximum|minimum|sleep|wakeup|lid-(closed|opened)) (ac|battery)$
-pmud\[[0-9]+\]: lid closed: request sleep$
-pmud\[[0-9]+\]: going to sleep$
-pmud\[[0-9]+\]: initiating user requested sleep$
-pmud\[[0-9]+\]: system awake again$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ pmud\[[0-9]+\]: running /etc/power/pwrctl (maximum|minimum|sleep|wakeup|lid-(closed|opened)) (ac|battery)$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ pmud\[[0-9]+\]: lid closed: request sleep$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ pmud\[[0-9]+\]: going to sleep$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ pmud\[[0-9]+\]: initiating user requested sleep$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ pmud\[[0-9]+\]: system awake again$
 ### ignore.d.workstation/sfs-client
-: sfsrwcd: reloaded resolv.conf file$
-: sfsrwcd: changing nameserver to [\.0-9]+$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ : sfsrwcd: reloaded resolv.conf file$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ : sfsrwcd: changing nameserver to [\.0-9]+$
 ### ignore.d.workstation/usbutils
-kernel: usb-ohci.c: USB continue: usb-[0-9:\.]+ from host wakeup$
-kernel: usb-ohci.c: USB suspend: usb-[0-9:\.]++$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ kernel: usb-ohci.c: USB continue: usb-[0-9:\.]+ from host wakeup$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ kernel: usb-ohci.c: USB suspend: usb-[0-9:\.]++$