other sections
FAILLOG(8) | 系统管理命令 | FAILLOG(8) |
名称¶
faillog - 显示登录失败记录或设置登录失败限制大纲¶
faillog
[ 选项]
描述¶
选项¶
faillog 可以接受的选项有: -a, --allDisplay (or act on) faillog records for all
users having an entry in the faillog database.
用户的范围可以使用
-u 选项限制。
In display mode, this is still restricted to existing users but forces the
display of the faillog entries even if they are empty.
With the -l, -m, -r, -t options, the users' records
are changed, even if the user does not exist on the system. This is useful to
reset records of users that have been deleted or to set a policy in advance
for a range of users.
-h, --help
现实帮助信息并退出。
-l, --lock-secsSEC
登录失败后锁定账户
SEC 秒。
此选项要求对 /var/log/faillog
有写入权限。
-m, --maximumMAX
Set the maximum number of login failures after
the account is disabled to MAX.
Selecting a MAX value of 0 has the effect of not placing a limit on the
number of failed logins.
The maximum failure count should always be 0 for root to prevent a denial
of services attack against the system.
此选项要求对 /var/log/faillog
有写入权限。
-r, --reset
重置登录失败计数。
此选项要求对 /var/log/faillog
有写入权限。
-R, --rootCHROOT_DIR
Apply changes in the CHROOT_DIR
directory and use the configuration files from the CHROOT_DIR
directory.
-t, --timeDAYS
显示新于 DAYS
的登录失败记录。
-u, --userLOGIN|RANGE
Display faillog record or maintains failure
counters and limits (if used with -l, -m or -r options)
only for the specified user(s).
The users can be specified by a login name, a numerical user ID, or a
RANGE of users. This RANGE of users can be specified with a min
and max values ( UID_MIN-UID_MAX), a max value (-UID_MAX), or a
min value ( UID_MIN-).
When none of the -l, -m, or -r options are used,
faillog displays the faillog record of the specified user(s).
CAVEATS¶
文件¶
/var/log/faillogFailure logging file.
参见¶
login(1), faillog(5).2012-05-25 | shadow-utils 4.1.5.1 |