On Sat, 03 Jun 2006, Dan Jacobson wrote: > Package: general > Severity: wishlist > > tiger says > # Checking for existence of log files... > --FAIL-- [logf005f] Log file /var/log/btmp permission should be 660 > > OK, now how do I even find out what package /var/log/btmp belongs to > in order to tell them about the problem? dlocate? No.
/var/log/btmp logs 'bad login' attempts and is read by /usr/bin/lastb (part of the sysvinit package). It has the same format as /var/log/(utmp|wtmp). Various packages seem to write to them (hence the need for write perms for the utmp group. I don't think any package owns the log file... I presume the permissions are documented by Policy somewhere but I'm not sure where to find it. (Perhaps it's in the LSB?) FWIW the perms on /var/log/btmp on my boxes are 664: -rw-rw-r-- 1 root utmp 0 2006-06-01 00:34 /var/log/btmp -- Brad -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]