Steve Grubb wrote:
The alternative is to install the audit package which will pick up
these
messages and deposit them in /var/log/audit/audit.log. This keeps them out
of /var/log/messages.
OK, will do - thanks.
This is one thing I would advise those working on logging systems, like
Logwatch and audit, to keep in mind:
Logging everything is good, but needlessly bothering root about trivial
stuff just buries the important messages in the noise.