[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

/etc/securetty and login failure logging



I commented out most lines from /etc/securetty so that root is only
allowed to login from tty3. Now I see the following messages when root
tries to login from any other terminals:

Jan  3 15:46:55 phoenix login[25646]: FAILED LOGIN 1 FROM  FOR root, Authentication failure
Jan  3 15:47:13 phoenix login[25646]: FAILED LOGIN 2 FROM  FOR root, Authentication failure
Jan  3 15:47:37 phoenix login[195]: FAILED LOGIN 1 FROM  FOR root, Authentication failure
Jan  3 16:01:14 phoenix login[198]: FAILED LOGIN 1 FROM  FOR root,
Authentication failure

But these messages (from /var/log/auth.log) don't indicate which
terminal was used for the login attempt. Is there any way that
information can also be logged in /var/log/auth.log ?

Running potato, BTW.

Thanks for any info.

-- 
Salman Ahmed
ssahmed AT pathcom DOT com


Reply to: