Original inquiry:
> I have a system running DU 4.0 with Enhanced Security. There
> may or may not have been unauthorized attempts to login as a
> particular user. I would like to be able to log all login
> attempts, successful or failed.
> From scouring the man pages, it looks like sia might be what
> I want. But the man pages say the output of sia is
> /var/adm/sialog and there is no sign of that file. And siainit
> is getting called at system startup.
The solution to this was about as trivial as could ever be imagined:
(as root) touch /var/adm/sialog
And logins magically started being logged to /var/adm/sialog.
I was also looking for TCP Wrappers at
ftp://ftp.win.tue.nl:/pub/security. That was the site that was
recently hacked and a bogus version (complete with trojan horse)
was uploaded. The current location of TCP Wrappers is:
If using a web browser, surf to
ftp://ftp.porcupine.org/pub/security/index.html
If using regular ftp, go to the pub/security directory and grab
tcp_wrappers_7.6.tar.gz.
A tip 'o the hat to Kevin Tyle <kevin_at_meso.com> and
John Speno <speno_at_isc.upenn.edu> for the speedy help!
--
Jon Wright
Unified Information, Inc.
voice: 425-814-4019
fax: 425-814-4001
mailto:jon.wright_at_ui.com
Received on Wed Jan 27 1999 - 17:05:47 NZDT