jimzah/freebsd-src
1
0
Fork 0
mirror of https://github.com/freebsd/freebsd-src.git synced 2024-12-04 10:19:26 +00:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity

Update login failure checking to check auth.log instead of messages,

Browse Source 
and teach it to look for more general classes of failures, including
SSH login failures.  This is similar but not identical to a patch
submitted by aeonflux@synapse.subneural.net.
This commit is contained in:
Robert Watson 2002-03-11 19:39:08 +00:00
parent ee1b1a6549
commit cd9281b380
Notes: svn2git 2020-12-20 02:59:44 +00:00 
svn path=/head/; revision=92102
1 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
etc/periodic/security/800.loginfail
View File

@ -43,17 +43,17 @@ LOG="${daily_status_security_logdir}"
yesterday=`date -v-1d "+%b %e "`
catmsgs() {
find ${LOG} -name 'messages.*' -mtime -2 |
find ${LOG} -name 'auth.log.*' -mtime -2 |
sort -t. -r -n +1 -2 |
xargs zcat -f
[ -f ${LOG}/messages ] && cat $LOG/messages
[ -f ${LOG}/auth.log ] && cat $LOG/auth.log
}
case "$daily_status_security_loginfail_enable" in
[Yy][Ee][Ss])
echo ""
echo "${host} login failures:"
n=$(catmsgs | grep -ia "^$yesterday.*login failure" |
n=$(catmsgs | grep -ia "^$yesterday.*[fF]ail" |
tee /dev/stderr | wc -l)
[ $n -gt 0 ] && rc=1 || rc=0;;
*) rc=0;;