Re: How To Log Password Change

• Previous message: Tim Haynes: "Re: MD5 checksum changed"
• In reply to: Bob Holding: "How To Log Password Change"
• Next in thread: Michael Heiming: "Re: How To Log Password Change"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

Date: Fri, 27 Aug 2004 23:30:40 +0200

Bob Holding wrote:
> There have been a few posts about this, but no answer...
>
> Fedora Core 1 will send a bad password change to syslog, but not a
> vanilla password change... Any suggestions on how I can log regular
> password changes?
>
> My first thought was to modify the source to passwd. So, I grabbed
> the source, did a grep on the text that a bad password change makes,
> but nothing pops up... So, then I looked at passwd.c, then I saw a
> bunch of PAM references, but I don't know how to send a successful
> password change to syslog...
>
> Any suggestions?

If you like hacks then you can write a wrapper for passwd that logs the
password change with logger to the system logs and then pass the command
arguments to the real passwd.

-- 
Jose Maria Lopez Hernandez
Director Tecnico de bgSEC
jkerouac@bgsec.com
bgSEC Seguridad y Consultoria de Sistemas Informaticos
http://www.bgsec.com
ESPAŅA
The only people for me are the mad ones -- the ones who are mad to live,
mad to talk, mad to be saved, desirous of everything at the same time,
the ones who never yawn or say a commonplace thing, but burn, burn, burn
like fabulous yellow Roman candles.
                 -- Jack Kerouac, "On the Road"

• Previous message: Tim Haynes: "Re: MD5 checksum changed"
• In reply to: Bob Holding: "How To Log Password Change"
• Next in thread: Michael Heiming: "Re: How To Log Password Change"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]