Bug 780

Summary: pam logs bad usernames
Product: [Retired] Red Hat Linux Reporter: jvpurcel
Component: pamAssignee: David Lawrence <dkl>
Status: CLOSED NOTABUG QA Contact:
Severity: medium Docs Contact:
Priority: medium    
Version: 5.2CC: jvpurcel
Target Milestone: ---Keywords: Security
Target Release: ---   
Hardware: i386   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 1999-01-12 17:08:35 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:

Description jvpurcel 1999-01-11 18:14:40 UTC 
How do I shut off the pam feature that records the username
in /var/log/messages ?
Here's a sample:
FAILED LOGIN 1 FROM jupiter FOR user1, User not known to the
underlying authentication module.

It would stink if someone slipped and typed in their
password.
Comment 1 Jay Turner 1999-01-12 17:08:59 UTC 
This is not conidered a bug because you can either disable this type
of logging in /etc/syslog.conf or in any matter, the /var/log/messages
is only readable by root.