Comment 4 for bug 581360

kern too. There's already this:

| kern.* -/var/log/kern.log

So:

| *.*;auth,authpriv.none -/var/log/syslog

Should exclude both mail and kern (duplicates):

| *.*;auth,authpriv,kern,mail.none -/var/log/syslog