/etc/securetty and login failure logging
I commented out most lines from /etc/securetty so that root is only
allowed to login from tty3. Now I see the following messages when root
tries to login from any other terminals:
Jan 3 15:46:55 phoenix login[25646]: FAILED LOGIN 1 FROM FOR root, Authentication failure
Jan 3 15:47:13 phoenix login[25646]: FAILED LOGIN 2 FROM FOR root, Authentication failure
Jan 3 15:47:37 phoenix login[195]: FAILED LOGIN 1 FROM FOR root, Authentication failure
Jan 3 16:01:14 phoenix login[198]: FAILED LOGIN 1 FROM FOR root,
Authentication failure
But these messages (from /var/log/auth.log) don't indicate which
terminal was used for the login attempt. Is there any way that
information can also be logged in /var/log/auth.log ?
Running potato, BTW.
Thanks for any info.
--
Salman Ahmed
ssahmed AT pathcom DOT com
Reply to: