This file is indexed.

/etc/logcheck/ignore.d.server/rssh is in rssh 2.3.4-4+b1.

This file is owned by root:root, with mode 0o644.

The actual contents of the file can be viewed below.

1
2
3
4
5
6
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ rssh\[[0-9]+\]: allowing [[:alnum:]]+ to (all users|user [^[:space:]]+)$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ rssh\[[0-9]+\]: cmd '[[:alnum:]]+' approved$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ rssh\[[0-9]+\]: line [0-9]+: configuring user [^[:space:]]+$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ rssh\[[0-9]+\]: setting [^[:space:]]+ umask to [0-9]+$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ rssh\[[0-9]+\]: setting log facility to LOG_USER$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ rssh\[[0-9]+\]: setting umask to [0-9]+$