From owner-freebsd-bugs  Sun Jan 10 01:30:06 1999
Return-Path: <owner-freebsd-bugs@FreeBSD.ORG>
Received: (from majordom@localhost)
          by hub.freebsd.org (8.8.8/8.8.8) id BAA23455
          for freebsd-bugs-outgoing; Sun, 10 Jan 1999 01:30:06 -0800 (PST)
          (envelope-from owner-freebsd-bugs@FreeBSD.ORG)
Received: from freefall.freebsd.org (freefall.FreeBSD.ORG [204.216.27.21])
          by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id BAA23449
          for <freebsd-bugs@FreeBSD.org>; Sun, 10 Jan 1999 01:30:05 -0800 (PST)
          (envelope-from gnats@FreeBSD.org)
Received: (from gnats@localhost)
	by freefall.freebsd.org (8.8.8/8.8.5) id BAA09267;
	Sun, 10 Jan 1999 01:30:01 -0800 (PST)
Received: from henoch.cc.fh-lippe.de (henoch.cc.fh-lippe.de [193.16.112.72])
          by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id BAA22795
          for <FreeBSD-gnats-submit@freebsd.org>; Sun, 10 Jan 1999 01:22:43 -0800 (PST)
          (envelope-from root@cc.fh-lippe.de)
Received: from spock.cc.fh-lippe.de([193.16.118.120]) (1437 bytes) 
	by henoch.cc.fh-lippe.de
	via sendmail with P:smtp/R:inet_hosts/T:smtp
	(sender: <root@cc.fh-lippe.de>) 
	id <m0zzH4V-00008zC@henoch.cc.fh-lippe.de>
	for <FreeBSD-gnats-submit@freebsd.org>; Sun, 10 Jan 1999 10:22:11 +0100 (MET)
	(Smail-3.2.0.101 1997-Dec-17 #3 built 1998-Feb-3)
Received: from cc.fh-lippe.de by spock.cc.fh-lippe.de with smtp
	(Smail3.1.29.1 #2) id m0zzH4S-00079hC; Sun, 10 Jan 99 10:22 MET
Received: (from root@localhost)
	by cc.fh-lippe.de (8.9.1/8.9.1) id JAA07181;
	Sun, 10 Jan 1999 09:37:03 +0100 (CET)
	(envelope-from root)
Message-Id: <199901100837.JAA07181@cc.fh-lippe.de>
Date: Sun, 10 Jan 1999 09:37:03 +0100 (CET)
From: Charlie Root <root@cc.fh-lippe.de>
Reply-To: root@cc.fh-lippe.de
To: FreeBSD-gnats-submit@FreeBSD.ORG
X-Send-Pr-Version: 3.2
Subject: misc/9424: /etc/security does not recognise login failures
Sender: owner-freebsd-bugs@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org


>Number:         9424
>Category:       misc
>Synopsis:       wrong grep in /etc/security
>Confidential:   no
>Severity:       serious
>Priority:       high
>Responsible:    freebsd-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Sun Jan 10 01:30:00 PST 1999
>Closed-Date:
>Last-Modified:
>Originator:     Lars Köller
>Release:        FreeBSD 3.0-RELEASE i386
>Organization:
Fachhochschule Lippe, Lemgo, Germany
>Environment:

	FreeBSD-3.0 RELEASE ELF

>Description:

	In /etc/security a 'grep -i "login failures" $LOG/messages' is
	executed to grep the login failures, but syslog reports them as

	Jan  9 13:30:07 odie login: 1 LOGIN FAILURE FROM localhost, root

>How-To-Repeat:



>Fix:

	change the line

	grep -i "login failures" $LOG/messages

	to

	grep -i "login failure" $LOG/messages

	in /etc/security
>Release-Note:
>Audit-Trail:
>Unformatted:

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-bugs" in the body of the message