diff --git a/modules/journalwatch.nix b/modules/journalwatch.nix index e042b70..5859776 100644 --- a/modules/journalwatch.nix +++ b/modules/journalwatch.nix @@ -117,7 +117,8 @@ { # yodaTux. If the user `yoda` runs a command with `sudo`. filters = '' - \s+yoda : TTY=pts/7 ; PWD=/.+ ; USER=root ; COMMAND=/.+ + \s+yoda : TTY=pts/1 ; PWD=/\S+ ; USER=root ; COMMAND=/.+ + \s+yoda : TTY=pts/7 ; PWD=/\S+ ; USER=root ; COMMAND=/.+ ''; match = "SYSLOG_IDENTIFIER = sudo"; }