faillog


SYNOPSIS
       faillog [options]

DESCRIPTION
       faillog displays the contents of the failure log database
       (/var/log/faillog). It can also set the failure counters and limits.
       When faillog is run without arguments, it only displays the faillog
       records of the users who had a login failure.

OPTIONS
       The options which apply to the faillog command are:

       -a, --all
           Display (or act on) faillog records for all users having an entry
           in the faillog database.

           The range of users can be restricted with the -u option.

           In display mode, this is still restricted to existing users but
           forces the display of the faillog entries even if they are empty.

           With the -l, -m, -r, -t options, the users' records are changed,
           even if the user does not exist on the system. This is useful to
           reset records of users that have been deleted or to set a policy in
           advance for a range of users.

       -h, --help
           Display help message and exit.

       -l, --lock-secs SEC
           Lock account for SEC seconds after failed login.

           Write access to /var/log/faillog is required for this option.

       -m, --maximum MAX
           Set the maximum number of login failures after the account is
           disabled to MAX.

           Selecting a MAX value of 0 has the effect of not placing a limit on
           the number of failed logins.

           The maximum failure count should always be 0 for root to prevent a
           denial of services attack against the system.

           Write access to /var/log/faillog is required for this option.

       -r, --reset
           Reset the counters of login failures.

           Write access to /var/log/faillog is required for this option.

       -t, --time DAYS
           Display faillog records more recent than DAYS.

CAVEATS
       faillog only prints out users with no successful login since the last
       failure. To print out a user who has had a successful login since their
       last failure, you must explicitly request the user with the -u flag, or
       print out all users with the -a flag.

FILES
       /var/log/faillog
           Failure logging file.

SEE ALSO
       login(1), faillog(5).



System Management Commands        09/12/2012                        FAILLOG(8)
Man Pages Copyright Respective Owners. Site Copyright (C) 1994 - 2017 Hurricane Electric. All Rights Reserved.