| FAILLOG(8) | 系统管理命令 | FAILLOG(8) |
名称¶
faillog - 显示登录失败记录或设置登录失败限制大纲¶
faillog [选项]
描述¶
faillog displays the contents of the failure log database (/var/log/faillog). It can also set the failure counters and limits. When faillog is run without arguments, it only displays the faillog records of the users who had a login failure.选项¶
faillog 可以接受的选项有：-a, --all
用户的范围可以使用 -u 选项限制。
In display mode, this is still restricted to existing users but forces the display of the faillog entries even if they are empty.
With the -l, -m, -r, -t options, the users' records are changed, even if the user does not exist on the system. This is useful to reset records of users that have been deleted or to set a policy in advance for a range of users.
-h, --help
-l, --lock-secs SEC
此选项要求对 /var/log/faillog 有写入权限。
-m, --maximum MAX
Selecting a MAX value of 0 has the effect of not placing a limit on the number of failed logins.
The maximum failure count should always be 0 for root to prevent a denial of services attack against the system.
此选项要求对 /var/log/faillog 有写入权限。
-r, --reset
此选项要求对 /var/log/faillog 有写入权限。
-R, --root CHROOT_DIR
-t, --time DAYS
-u, --user LOGIN|RANGE
The users can be specified by a login name, a numerical user ID, or a RANGE of users. This RANGE of users can be specified with a min and max values (UID_MIN-UID_MAX), a max value (-UID_MAX), or a min value (UID_MIN-).
When none of the -l, -m, or -r options are used, faillog displays the faillog record of the specified user(s).
CAVEATS¶
faillog only prints out users with no successful login since the last failure. To print out a user who has had a successful login since their last failure, you must explicitly request the user with the -u flag, or print out all users with the -a flag.文件¶
/var/log/faillog参见¶
login(1), faillog(5).| 2018-07-27 | shadow-utils 4.5 |