Index: server/fedora/config/etc/syslog-ng/d_zroot.pl
===================================================================
--- server/fedora/config/etc/syslog-ng/d_zroot.pl	(revision 664)
+++ server/fedora/config/etc/syslog-ng/d_zroot.pl	(revision 665)
@@ -5,7 +5,9 @@
 use Sys::Hostname;
 
-sub sendmsg {
-    my ($message) = @_;
-    open(ZWRITE, "|-", qw|/usr/bin/zwrite -d -c scripts-auto|, '-i', 'root.'.hostname, '-s', hostname) or die "Couldn't open zwrite";
+sub sendmsg($;$$) {
+    my ($message, $class, $instance) = @_;
+    $class ||= "scripts-auto";
+    $instance ||= 'root.'.hostname;
+    open(ZWRITE, "|-", qw|/usr/bin/zwrite -d -c|, $class, '-i', $instance, '-s', hostname) or die "Couldn't open zwrite";
     print ZWRITE $message;
     close(ZWRITE);
@@ -25,5 +27,8 @@
 	    sendmsg($send);
 	}
+    } elsif ($message =~ m|session \S+ for user root |) {
+	sendmsg($message);
     }
+
     $last = $message;
 }