Date: Sat, 05 Feb 2005 18:47:02 -0500 From: Steve Lake <steve.lake@raiden.net> To: Roland Smith <rsmith@xs4all.nl> Cc: freebsd-questions@freebsd.org Subject: Re: questions about extra logging Message-ID: <5.2.0.9.2.20050205184558.00a58cb0@192.168.0.25> In-Reply-To: <20050203173503.GD39390@slackbox.xs4all.nl> References: <5.2.0.9.2.20050203102839.00a37c70@192.168.0.25> <5.2.0.9.2.20050203102839.00a37c70@192.168.0.25>
next in thread | previous in thread | raw e-mail | index | archive | help
Sorry it took so long getting back to you. Actually, I looked in
auth.log and it only shows failures for KDE logins, not successes. I'm
looking to log successes too. Thanks. (please reply directly to me as I
don't subscribe to this list. ^_^
At 06:35 PM 2/3/05 +0100, Roland Smith wrote:
>On Thu, Feb 03, 2005 at 10:33:45AM -0500, Steve Lake wrote:
>
> > I'm curious of something. I think I've got a fellow co-worker who may
> > be trying to break into my workstation and I need some help.
>
> > I know kde logs whenever a failed login attempt occurs if the screen
> > is locked and sends that in the daily logs, but it doesn't log
> > successes. IE successfully loging into KDE via the password box when
> > the screensaver/blank screen is running. I'd like to log ALL
> > attempts, success, failure or otherwise, and have that included in my
> > daily log reports so that I know if they did in fact get in at any one
> > point when I wasn't there.
>
>The logfile /var/log/auth.log does contain _all_ logins, AFAIK.
>
>Roland
>--
>R.F. Smith /"\ ASCII Ribbon Campaign
>r s m i t h @ x s 4 a l l . n l \ / No HTML/RTF in e-mail
>http://www.xs4all.nl/~rsmith/ X No Word docs in e-mail
>public key: http://www.keyserver.net / \ Respect for open standards
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?5.2.0.9.2.20050205184558.00a58cb0>