Marco d'Itri wrote: > On Jun 08, Wichert Akkerman <[EMAIL PROTECTED]> wrote: > >+ The files <tt>/var/run/utmp</tt>, <tt>/var/log/wtmp</tt> and > >+ <tt>/var/log/lastlog</tt> should be installed writeable by group > >+ utmp. Programs who need to modify those files should be installed > >+ install setgid utmp.</p></sect> > Why lastlog too? It is only updated by /bin/login, isn't it?
[EMAIL PROTECTED]:~>strings =sshd |grep lastlog /var/log/lastlog -- see shy jo

