1FAILLOG(8)                System Management Commands                FAILLOG(8)
2
3
4

NAME

6       faillog - display faillog records or set login failure limits
7

SYNOPSIS

9       faillog [options]
10

DESCRIPTION

12       faillog displays the contents of the failure log database
13       (/var/log/faillog). It can also set the failure counters and limits.
14       When faillog is run without arguments, it only displays the faillog
15       records of the users who had a login failure.
16

OPTIONS

18       The options which apply to the faillog command are:
19
20       -a, --all
21           Display (or act on) faillog records for all users having an entry
22           in the faillog database.
23
24       -h, --help
25           Display help message and exit.
26
27       -l, --lock-time SEC
28           Lock account for SEC seconds after failed login.
29
30           Write access to /var/log/faillog is required for this option.
31
32       -m, --maximum MAX
33           Set the maximum number of login failures after the account is
34           disabled to MAX.
35
36           Selecting a MAX value of 0 has the effect of not placing a limit on
37           the number of failed logins.
38
39           The maximum failure count should always be 0 for root to prevent a
40           denial of services attack against the system.
41
42           Write access to /var/log/faillog is required for this option.
43
44       -r, --reset
45           Reset the counters of login failures.
46
47           Write access to /var/log/faillog is required for this option.
48
49       -t, --time DAYS
50           Display faillog records more recent than DAYS.
51
52       -u, --user LOGIN|RANGE
53           Display faillog record or maintains failure counters and limits (if
54           used with -l, -m or -r options) only for the specified user(s).
55
56           The users can be specified by a login name, a numerical user ID, or
57           a RANGE of users. This RANGE of users can be specified with a min
58           and max values (UID_MIN-UID_MAX), a max value (-UID_MAX), or a min
59           value (UID_MIN-).
60
61       When none of the -l, -m, or -r options are used, faillog displays the
62       faillog record of the specified user(s).
63
64       NOTE: in display mode, only the records of users which currently exist
65       in the system are displayed. In the other modes (when the -l, -m, or -r
66       options are used), the records of the user, or the range of users, or
67       all the users that may have an entry in the faillog database will be
68       changed. This is useful to reset records of users that have been
69       deleted or set a policy in advance for a range of users.
70

CAVEATS

72       faillog only prints out users with no successful login since the last
73       failure. To print out a user who has had a successful login since their
74       last failure, you must explicitly request the user with the -u flag, or
75       print out all users with the -a flag.
76

FILES

78       /var/log/faillog
79           Failure logging file.
80

SEE ALSO

82       login(1), faillog(5).
83
84
85
86System Management Commands        07/24/2009                        FAILLOG(8)
Impressum