[ossec-cvs] ossec-hids: decoder.xml (HEAD) [dcid]

[OSSEC CVS <cvs-commit@xxxxxxxxx>]

Module name:	ossec-hids
Changes by:	dcid	07/10/10 21:05:42

Modified files:
	decoder.xml

Log message:
Description: Fixing pam decoder.
Reviewed by: dcid
Bug:

Index: decoder.xml
===================================================================
RCS file: /usr/cvsroot/ossec-hids/etc/decoder.xml,v
diff -u -r1.131 -r1.132
--- decoder.xml	10 Oct 2007 23:29:31 -0000	1.131
+++ decoder.xml	11 Oct 2007 00:05:41 -0000	1.132
@@ -57,7 +57,7 @@
 <decoder name="pam-user">
   <parent>pam</parent>
   <prematch>^session \w+ </prematch>
-  <regex offset="after_prematch">^for user (\S+) </regex>
+  <regex offset="after_prematch">^for user (\S+)</regex>
   <order>user</order>
 </decoder>