Auth.log
Scott Gerhardt
scott at g-it.ca
Sun Jul 4 13:41:27 PDT 2004
I'm running FreeBSD 4.7 and I noticed that /var/log/auth.log does not
include year (YYYY) in the log entries. My daily cron jobs recently
sent notice that there were some failed login attempts on July 3 to an
account that was removed many months ago. This raised concern, so I
did a thorough check and determined that the failed login attempt
occurred July 03 of 2003, _not_ 2004.
Shouldn't auth.log include the full YYYY-MM-DD date to avoid confusion
in case auth.log doesn't rotate between years? This should apply to
all logs, especially security related logs...
Thanks,
--
Scott A. Gerhardt, P.Geo.
Gerhardt Information Technologies
More information about the freebsd-questions
mailing list