Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 3 Feb 2005 18:35:03 +0100
From:      Roland Smith <rsmith@xs4all.nl>
To:        Steve Lake <steve.lake@raiden.net>
Cc:        freebsd-questions@freebsd.org
Subject:   Re: questions about extra logging
Message-ID:  <20050203173503.GD39390@slackbox.xs4all.nl>
In-Reply-To: <5.2.0.9.2.20050203102839.00a37c70@192.168.0.25>
References:  <5.2.0.9.2.20050203102839.00a37c70@192.168.0.25>

next in thread | previous in thread | raw e-mail | index | archive | help

--n/aVsWSeQ4JHkrmm
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Thu, Feb 03, 2005 at 10:33:45AM -0500, Steve Lake wrote:

> I'm curious of something.  I think I've got a fellow co-worker who may
> be trying to break into my workstation and I need some help. =20

> I know kde logs whenever a failed login attempt occurs if the screen
> is locked and sends that in the daily logs, but it doesn't log
> successes.  IE successfully loging into KDE via the password box when
> the screensaver/blank screen is running.  I'd like to log ALL
> attempts, success, failure or otherwise, and have that included in my
> daily log reports so that I know if they did in fact get in at any one
> point when I wasn't there. =20

The logfile /var/log/auth.log does contain _all_ logins, AFAIK.

Roland
--=20
R.F. Smith                           /"\    ASCII Ribbon Campaign
r s m i t h @ x s 4 a l l . n l      \ /    No HTML/RTF in e-mail
http://www.xs4all.nl/~rsmith/         X     No Word docs in e-mail
public key: http://www.keyserver.net / \    Respect for open standards

--n/aVsWSeQ4JHkrmm
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.0 (FreeBSD)

iD8DBQFCAmDHEnfvsMMhpyURAmkTAJ9+z7ylogKtC8SNWWAy7vhfj/6FTQCaA/7Z
LIKvFWaQvCvi3HkvjTuglkA=
=4k/Z
-----END PGP SIGNATURE-----

--n/aVsWSeQ4JHkrmm--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20050203173503.GD39390>