FTP的登录日志
为ftp用户登录,添加登录日志:
[root@myzdl ~]# vim /etc/pam.d/vsftpd.virtual
#%PAM-1.0
auth required pam_shells.so
auth required pam_userdb.so db=/etc/vsftpd/vslogin
account required pam_userdb.so db=/etc/vsftpd/vslogin
[root@myzdl ~]# cat /var/log/audit/audit.log | grep acct | grep vsftpd |awk ‘{print $9" “$12” "$14 }’
acct=“qweq” addr=27.38.37.98 res=failed’
acct=“qweqwe” addr=27.38.37.98 res=failed’
acct=“myzdl” addr=27.38.37.98 res=success’
acct=“myzdl” addr=27.38.37.98 res=success’
acct=“myzdl” addr=27.38.37.98 res=success’
acct=“qweq” addr=27.38.37.98 res=failed’
acct=“123” addr=27.38.37.98 res=failed’
acct=“44444” addr=27.38.37.98 res=failed’
[root@myzdl ~]#
1万+

被折叠的 条评论
为什么被折叠?



