[ale] What creates /var/log/faillog ?

[Raj Wurttemberg]

My Google-Fu must be running low this this morning...  

What creates /var/log/faillog ? I have a RHCE 6.5 server and a security
auditor said that we should have a /var/log/faillog file. I have the
"pam_tally2" module loaded in the auth file "system-auth-ac" .  The
pam_tally2 command does appear to give proper results as well.

Kind regards,
Raj Wurttemberg
rajaw at c64.us