OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: [suse-security] suse doesn't Log successful logins at the console

From: David Huecking (d.hueckinggmx.net)
Date: Wed Mar 05 2003 - 12:27:54 CST


How about using the debug-option of pam_unix.so?! ;-)
Add a "debug" (without quotes...) to the line
session required pam_unix.so
in /etc/pam.d/login
session required pam_unix.so debug

Than log in your system and watch /var/log/messages...
Mar 5 19:22:22 moria login: pam_unix2: session started for user david,
service login

On Mittwoch, 5. März 2003 19:15, Lars Ellenberg wrote:
> On Wed, Mar 05, 2003 at 06:24:01PM +0100, Arno Luppold wrote:
> > It seems to me as if notifications about successful logins aren't sent to
> > syslog.
>
> yes. you are right.
>
> how about patching it to do so?
> find below a trivial patch.
> prove: tail -1 /var/log/messages
> Mar 5 19:07:09 minna login[18592]: successful login for `root' from tty2

--
Eat, sleep and go running,
David Huecking.

Encrypted eMail welcome!
GnuPG/ PGP-Key: 0x57809216. Fingerprint:
3DF2 CBE0 DFAA 4164 02C2 4E2A E005 8DF7 5780 9216

--
Check the headers for your unsubscription address
For additional commands, e-mail: suse-security-helpsuse.com
Security-related bug reports go to securitysuse.de, not here