1 files changed, 36 insertions, 0 deletions

diff --git a/src/Propellor/Property/Logcheck.hs b/src/Propellor/Property/Logcheck.hs
new file mode 100644
index 00000000..ced9fce2
--- /dev/null
+++ b/src/Propellor/Property/Logcheck.hs
@@ -0,0 +1,36 @@
+-- | Maintainer: Jelmer Vernooij <jelmer@jelmer.uk>
+
+module Propellor.Property.Logcheck (
+	ReportLevel (Workstation, Server, Paranoid),
+	Service,
+	defaultPrefix,
+	ignoreFilePath,
+	ignoreLines,
+	installed,
+) where
+
+import Propellor.Base
+import qualified Propellor.Property.Apt as Apt
+import qualified Propellor.Property.File as File
+
+data ReportLevel = Workstation | Server | Paranoid
+type Service = String
+
+instance Show ReportLevel where
+	show Workstation = "workstation"
+	show Server = "server"
+	show Paranoid = "paranoid"
+
+-- The common prefix used by default in syslog lines.
+defaultPrefix :: String
+defaultPrefix = "^\\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ "
+
+ignoreFilePath :: ReportLevel -> Service -> FilePath
+ignoreFilePath t n = "/etc/logcheck/ignore.d." ++ (show t) </> n
+
+ignoreLines :: ReportLevel -> Service -> [String] -> Property UnixLike
+ignoreLines t n ls = (ignoreFilePath t n) `File.containsLines` ls
+	`describe` ("logcheck ignore lines for " ++ n ++ "(" ++ (show t) ++ ")")
+
+installed :: Property DebianLike
+installed = Apt.installed ["logcheck"]