Previously Adam Di Carlo wrote: > laurent bonnaud <Laurent.Bonnaud@inpg.fr> writes: > > > the base system in 2.2.15-2000-06-07/base2_2.tgz does contain /var/log/wtmp, > > but it does not contain /var/log/btmp. Adding this file has two advantages: > > > > - it is probably better from a security point of view > > - logrotate tries to rotate it (see Bug#64043) > > Why should this be provided by base2_2.tgz itself -- shouldn't it be > provided by base-files or something? Actually I vaguely remember some documentation stating that it's probably a bad idea to have a btmp file. It would certainly be a place where password would be logged plaintest if a users enters a password instead of a username by accident. Wichert. -- _________________________________________________________________ / Generally uninteresting signature - ignore at your convenience \ | wichert@wiggy.net http://www.liacs.nl/~wichert/ | | 1024D/2FA3BC2D 576E 100B 518D 2F16 36B0 2805 3CB8 9250 2FA3 BC2D |
Attachment:
pgpK0b33piE5E.pgp
Description: PGP signature