[ale] What creates /var/log/faillog ?

[leam hall]

Interesting. My RHEL 6.x box doesn't even have /var/log/faillog. Of
course, I'm running a very scaled down install.

Maybe try "rpm -q --whatprovides /var/log/faillog"

That should say what package creates it.


On Mon, Sep 22, 2014 at 10:02 AM, Jim Kinney <jim.kinney at gmail.com> wrote:
> Never heard of a "faillog". There is secure and audit logs. /var/log/secure
> handles login attempts. If auditd is running, /var/log/audit/* handles all
> manner of access internal to the system (I.e. not web server access).
> Perhaps those are what was inferred.
> On Sep 22, 2014 9:43 AM, "Raj Wurttemberg" <rajaw at c64.us> wrote:
>
>>
>> My Google-Fu must be running low this this morning...
>>
>> What creates /var/log/faillog ? I have a RHCE 6.5 server and a security
>> auditor said that we should have a /var/log/faillog file. I have the
>> "pam_tally2" module loaded in the auth file "system-auth-ac" .  The
>> pam_tally2 command does appear to give proper results as well.
>>
>> Kind regards,
>> Raj Wurttemberg
>> rajaw at c64.us
>>
>>
>> _______________________________________________
>> Ale mailing list
>> Ale at ale.org
>> http://mail.ale.org/mailman/listinfo/ale
>> See JOBS, ANNOUNCE and SCHOOLS lists at
>> http://mail.ale.org/mailman/listinfo
>>
> -------------- next part --------------
> An HTML attachment was scrubbed...
> URL: <http://mail.ale.org/pipermail/ale/attachments/20140922/cb52c48d/attachment.html>
> _______________________________________________
> Ale mailing list
> Ale at ale.org
> http://mail.ale.org/mailman/listinfo/ale
> See JOBS, ANNOUNCE and SCHOOLS lists at
> http://mail.ale.org/mailman/listinfo



-- 
Mind on a Mission