From owner-freebsd-questions  Tue Jun  6 18:19:49 2000
Delivered-To: freebsd-questions@freebsd.org
Received: from vicosa.dpi.ufv.br (vicosa.dpi.ufv.br [200.17.74.1])
	by hub.freebsd.org (Postfix) with ESMTP id 42DC037B61F
	for <questions@freebsd.org>; Tue,  6 Jun 2000 18:19:31 -0700 (PDT)
	(envelope-from kernel@tdnet.com.br)
Received: from tdnet.com.br (port20.tdnet.com.br [200.236.148.120]) by vicosa.dpi.ufv.br (AIX4.2/UCB 8.7/8.7) with ESMTP id WAA20142 for <questions@freebsd.org>; Tue, 6 Jun 2000 22:18:56 -0200 (GRNLNDDT)
Message-ID: <393DA3B6.2F156DCE@tdnet.com.br>
Date: Tue, 06 Jun 2000 22:21:58 -0300
From: Gustavo Vieira Goncalves Coelho Rios <kernel@tdnet.com.br>
X-Mailer: Mozilla 4.72 [en] (X11; I; FreeBSD 4.0-STABLE i386)
X-Accept-Language: en
MIME-Version: 1.0
To: questions@freebsd.org
Subject: syslogd
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG

Hi folks!


Every time i execute a "su -" to switch from a non-root account to root
one, i got  a notice on /dev/ttyv0:

Jun 6 19:23:20 su: grios to root on /dev/ttyp0  (for instance)

(looking into  /usr/src/usr.bin/su/su.c) i saw that su uses the
following flags to perform log to syslogd:

LOG_AUTH|LOG_WARNING;  or
LOG_NOTICE|LOG_AUTH

Why is this information being showed up in /dev/ttyv0 ?

here goes my syslog.conf:

#       Consult the syslog.conf(5) manpage.
#*.err;kern.debug;auth.notice;mail.crit         /dev/console
*.notice;kern.debug;lpr.info;mail.crit;news.err /var/log/messages
security.*                                      /var/log/security
mail.info                                       /var/log/maillog
lpr.info                                        /var/log/lpd-errs
cron.*                                          /var/log/cron
#*.err                                          root
#*.notice;news.err                              root
#*.alert                                                root
#*.emerg                                                *
# uncomment this to enable logging of all log messages to
/var/log/all.log
#*.*                                            /var/log/all.log
# uncomment this to enable logging to a remote loghost named loghost
#*.*                                            @loghost
# uncomment these if you're running inn
# news.crit                                     /var/log/news/news.crit
# news.err                                      /var/log/news/news.err
# news.notice                                  
/var/log/news/news.notice
!startslip
*.*                                             /var/log/slip.log
!ppp
*.*                                             /var/log/ppp.log


thanks for your time and cooperation.



-- 
Your mouse has moved.
Windows NT must be restarted for the change to take effect!

Reboot now?   [ OK]


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message