From owner-freebsd-questions@FreeBSD.ORG  Thu Feb  3 15:25:39 2005
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 4C1F516A4D5
	for <freebsd-questions@FreeBSD.ORG>;
	Thu,  3 Feb 2005 15:25:39 +0000 (GMT)
Received: from dragoncrest.jasnetworks.net (dragoncrest.jasnetworks.net
	[69.51.151.143])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 6062443D48
	for <freebsd-questions@FreeBSD.ORG>;
	Thu,  3 Feb 2005 15:25:37 +0000 (GMT)
	(envelope-from steve.lake@raiden.net)
Received: from v5k7y7.raiden.net (works.jasnetworks.net [192.168.0.3])
	j13Fxfbd061816	for <freebsd-questions@FreeBSD.ORG>;
	Thu, 3 Feb 2005 10:59:44 -0500 (EST)
	(envelope-from steve.lake@raiden.net)
Message-Id: <5.2.0.9.2.20050203102839.00a37c70@192.168.0.25>
X-Sender: megos@192.168.0.25
X-Mailer: QUALCOMM Windows Eudora Version 5.2.0.9
Date: Thu, 03 Feb 2005 10:33:45 -0500
To: freebsd-questions@FreeBSD.ORG
From: Steve Lake <steve.lake@raiden.net>
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"; format=flowed
Subject: questions about extra logging
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 03 Feb 2005 15:25:39 -0000

	I'm curious of something.  I think I've got a fellow co-worker who may be 
trying to break into my workstation and I need some help.  I know kde logs 
whenever a failed login attempt occurs if the screen is locked and sends 
that in the daily logs, but it doesn't log successes.  IE successfully 
loging into KDE via the password box when the screensaver/blank screen is 
running.  I'd like to log ALL attempts, success, failure or otherwise, and 
have that included in my daily log reports so that I know if they did in 
fact get in at any one point when I wasn't there.  I want to be able to do 
this so I can turn this into my manager and stop this from happening.  So 
far I see no evidence that they got in, but that doesn't mean that they're 
not putting everything back before locking the screen again either.  IE I 
don't want someone perusing my workstation while I'm not there.  Any help 
or suggestions will be welcome.