Hi all,

I'm curious why failed logins isn't logged by default. This is basic security?


It is mentioned in Securing Debian:

http://www.debian.org/doc/manuals/securing-debian-howto/ch4.en.html#s4.10


       FAILLOG_ENAB        yes

If you enable this variable, failed logins will be logged. It is important to keep track of them to catch someone who tries a brute force attack.



All the best
/Daniel


--
To UNSUBSCRIBE, email to [email protected] with a subject of "unsubscribe". Trouble? Contact [email protected]
Archive: http://lists.debian.org/[email protected]

Reply via email to