Chris's Wiki :: blog/linux/VarLogBtmp Commentshttps://utcc.utoronto.ca/~cks/space/blog/linux/VarLogBtmp?atomcommentsDWiki2006-09-19T23:39:53ZRecent comments in Chris's Wiki :: blog/linux/VarLogBtmp.From 67.181.30.74 on /blog/linux/VarLogBtmptag:CSpace:blog/linux/VarLogBtmp:c17378125f72655f3d99fe9bf097e0352498d632From 67.181.30.74<div class="wikitext"><p>My btmp is rotated by something mysterious (as tested on FC5). No file
in /etc contains the string "btmp". Maybe something like logrotate just
greps /etc/syslog.conf and rotates everything it finds?
-- Pete</p>
</div>2006-09-19T23:39:53ZFrom 71.208.125.132 on /blog/linux/VarLogBtmptag:CSpace:blog/linux/VarLogBtmp:d9367d03fa53cc8f128b8a6def2269eb248725d2From 71.208.125.132<div class="wikitext"><p>Ubuntu 6.06 seems to have things configured slightly differently:</p>
<p><code>UNKNOWN Mon Sep 18 17:41 - 17:41 (00:00</code>)</p>
<p>and SuSE 10.1 gives:</p>
<p><code>lastb: /var/log/btmp: No such file or directory
Perhaps this file was removed by the operator to prevent logging lastb info.</code></p>
<p>Touching /var/log/btmp and rebooting leaves /var/log/btmp empty even after bad logins (lastb loses the missing file message, but still has no info). I think the choice between the two is mainly preference, I tend strongly towards the "don't bother logging" camp.</p>
</div>2006-09-19T20:00:54Z