Re: Logging Password change attempts

[trondd]

Only other thing I could think of is monitoring the right file access or
system calls or the like and logging that.  But the script is probably the
simplest and if anyone circumvents the script by calling passwd directly,
it only means their password is newer than expected, which isn't as much of
a concern.