[arch-general] bad login attempts not written to /var/log/btmp

Renato rennabh at gmail.com
Wed Jul 27 09:29:03 EDT 2011


On Wed, 27 Jul 2011 21:52:24 +1000
Simon Perry <arch at sanxion.net> wrote:

> On 27/07/11, Renato wrote:
> 
> | no, didn't know it conflicted with lastb. However, stopping it
> doesn't | change the situtation, bad logins aren't logged
> to /var/log/btmp. | 
> | Can I configure syslog-ng to report bad login attempts?
> 
> Dude, it's not syslog-ng.
> 
> Read the man pages, for example "man lastb" says:
> 
> NOTES
>       The files wtmp and btmp might not be found. The system only logs
>       information in these files if they are present. This is  a
> local configuration  issue.  If  you  want  the files to be used, they
>       can be created with a simple touch(1) command (for example,
> touch /var/log/wtmp).
> 
> These are also clues (in the same man page):
> 
> SEE ALSO
>       shutdown(8), login(1), init(8)
> 


sorry, I think I don't understand what you're saying, maybe my english
isn't very good. the files /var/log/wtmp and /var/log/btmp are indeed
present in my system

cheers
renato


More information about the arch-general mailing list