LinuxQuestions.org
Help answer threads with 0 replies.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Fedora
User Name
Password
Fedora This forum is for the discussion of the Fedora Project.

Notices


Reply
  Search this Thread
Old 01-31-2005, 09:03 AM   #1
rhoekstra
Member
 
Registered: Aug 2004
Location: The Netherlands
Distribution: RedHat 2, 3, 4, 5, Fedora, SuSE, Gentoo
Posts: 372

Rep: Reputation: 42
Question Syslog logging Cron logins


Hi,

Since I have upgraded my router from FC1 to FC3, my log is being filled with logins by crond for management tasks.

This is fairly logical to keep track of what the machine is doing, but it clutters my logs a bit too mucht to keep track of remaining loggings.

Does anybody experience the same, or know how to get rid of the loggings? (no, not get rid of crond ).

Thanks in advance,
 
Old 02-15-2005, 01:04 PM   #2
highfly
LQ Newbie
 
Registered: Feb 2005
Posts: 2

Rep: Reputation: 0
Hi,

I was also looking for a solution and as I didn't find any I decided to dive into PAM (*gasp*).
My solution:

change this in /etc/pam.d/crond:

[...]
#session required /lib/security/$ISA/pam_stack.so service=system-auth
session required /lib/security/$ISA/pam_limits.so


pam_stack makes pam look into the system-auth service:

session required /lib/security/$ISA/pam_limits.so
session required /lib/security/$ISA/pam_unix.so

The session component of pam_unix simply logs start and end of session. So I disabled pam_stack and put only pam_limits into crond's pam file.
 
Old 02-17-2005, 01:01 AM   #3
rhoekstra
Member
 
Registered: Aug 2004
Location: The Netherlands
Distribution: RedHat 2, 3, 4, 5, Fedora, SuSE, Gentoo
Posts: 372

Original Poster
Rep: Reputation: 42
Isn't security compromised doing this ?
 
Old 02-17-2005, 01:28 AM   #4
highfly
LQ Newbie
 
Registered: Feb 2005
Posts: 2

Rep: Reputation: 0
Quote:
Originally posted by rhoekstra
Isn't security compromised doing this ?
If by "security" you mean "log everything", then yes.
Otherwise: No, I think not. As I wrote, all the session component does is logging the start and end of a session. So, if you remove this, what will you lose?
 
Old 02-17-2005, 02:45 AM   #5
rhoekstra
Member
 
Registered: Aug 2004
Location: The Netherlands
Distribution: RedHat 2, 3, 4, 5, Fedora, SuSE, Gentoo
Posts: 372

Original Poster
Rep: Reputation: 42
okay, thx
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Logging firewall with syslog-ng? RecoilUK Linux - Security 1 08-06-2005 04:28 PM
syslog and normal user logins bujecas Slackware 9 12-20-2004 11:18 AM
Logging out all logins. No one seems to be able to answer this brady9953 Linux - General 2 01-17-2004 11:28 PM
syslog running but not logging tantric Linux - Security 1 10-15-2003 07:24 AM
logging information into syslog prisam Linux - Security 1 08-05-2003 09:58 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Fedora

All times are GMT -5. The time now is 01:10 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration