I'm running FreeBSD 4.7 and I noticed that /var/log/auth.log does not include year (YYYY) in the log entries. My daily cron jobs recently sent notice that there were some failed login attempts on July 3 to an account that was removed many months ago. This raised concern, so I did a thorough check and determined that the failed login attempt occurred July 03 of 2003, _not_ 2004.

Shouldn't auth.log include the full YYYY-MM-DD date to avoid confusion in case auth.log doesn't rotate between years? This should apply to all logs, especially security related logs...


Scott A. Gerhardt, P.Geo.
Gerhardt Information Technologies

[EMAIL PROTECTED] mailing list
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Reply via email to