LinuxQuestions.org
Share your knowledge at the LQ Wiki.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 05-26-2009, 03:52 PM   #1
mberd
LQ Newbie
 
Registered: May 2009
Posts: 3

Rep: Reputation: 0
no ssh logging in /var/log/secure


while there are lines for ssh in /var/log/messages, none is recorded in /var/log/secure.

i do have some records in /var/log/secure but it stopped after i did something.

please help me diagnose what did i do..

thanks!
 
Old 05-26-2009, 05:05 PM   #2
saavik
Member
 
Registered: Nov 2001
Location: NRW, Germany
Distribution: SLES / FC/ OES / CentOS
Posts: 612

Rep: Reputation: 32
Everything logged from the kernel is configured in

/etc/syslog.conf

Maybe you just edited that file...

http://openskill.info/infobox.php?ID=1091
 
Old 05-27-2009, 12:41 AM   #3
mberd
LQ Newbie
 
Registered: May 2009
Posts: 3

Original Poster
Rep: Reputation: 0
file /etc/syslog.conf has not been touched and has the following line:

authpriv.* /var/log/secure
 
Old 05-27-2009, 02:19 AM   #4
saavik
Member
 
Registered: Nov 2001
Location: NRW, Germany
Distribution: SLES / FC/ OES / CentOS
Posts: 612

Rep: Reputation: 32
Well that look ok for me.

a) How big is the file
b) How about the rwx (rights) of the file ? Who can access the file ?
c) Restart the syslog ( /etc/init.d/syslog restart )
Can be done at any time. Does not effect any other programs.
 
Old 05-27-2009, 08:55 AM   #5
mberd
LQ Newbie
 
Registered: May 2009
Posts: 3

Original Poster
Rep: Reputation: 0
restarting the syslog fixed the the problem.

thank you, saavik!
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Can Samhain log my entries in /var/log/secure and /var/log/mesage to a central server abefroman Linux - Software 2 04-13-2008 05:13 PM
Logging is not happening on my /var/log/boot.log Copain Linux - Security 2 09-28-2007 06:34 PM
/var/log/secure ??? MikeFoo1 Linux - Security 2 06-22-2005 04:42 AM
pppd logging to /var/log/ppp.log problem mrtwice Linux - Software 1 01-10-2004 06:38 PM
/var/log/secure dragon Linux - Security 6 12-02-2003 09:45 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 03:32 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration