On Sunday 11 of April 2010 12:32, Jos Chrispijn wrote: > In order to find out if someone logged in, I should then first copy > auth.log to auth2.log, and do a compare and then do the tail trick. Have > to cron that every half a minute. > I would like to know if there is something that is alterted on the > moment that someone logs on thus forcing evt. your tail suggestion > > thanks, > Jos Chrispijnj
you could try using syslog to do that. check the man page of syslog.conf, and search for "auth." you could then populate a file with the successful logins as they happen -- Real programmers don't document. If it was hard to write, it should be hard to understand.
signature.asc
Description: This is a digitally signed message part.
