Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 24 May 1998 22:28:50 -0700
From:      Mike Smith <mike@smith.net.au>
To:        Wes Peters <wes@softweyr.com>
Cc:        Philippe Regnauld <regnauld@deepo.prosa.dk>, Mike Smith <mike@smith.net.au>, freebsd-security@FreeBSD.ORG
Subject:   Re: SKey and locked account 
Message-ID:  <199805250528.WAA10561@antipodes.cdrom.com>
In-Reply-To: Your message of "Fri, 22 May 1998 07:24:54 MDT." <35657CA6.D93AC10D@softweyr.com> 

next in thread | previous in thread | raw e-mail | index | archive | help
> Yeah, this little bit of UNIX arcana has been batted back and forth
> for years.  At least FreeBSD *has* a nologin program, see nologin(8).
> I don't like it, because it doesn't log the failed access.  Here's my 
> replacement, which does:

>     syslog(LOG_CRIT, "%s on %s", user, device);

Why LOG_CRIT?  I would have expected something a little lower perhaps?
(Especially if you're using it in an ISP context...)

At any rate, how do people feel about this?  How about a shellscript 
version using logger(8)?

-- 
\\  Sometimes you're ahead,       \\  Mike Smith
\\  sometimes you're behind.      \\  mike@smith.net.au
\\  The race is long, and in the  \\  msmith@freebsd.org
\\  end it's only with yourself.  \\  msmith@cdrom.com



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe security" in the body of the message



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199805250528.WAA10561>