summaryrefslogtreecommitdiffstats
path: root/libexec
diff options
context:
space:
mode:
authoryar <yar@FreeBSD.org>2003-02-11 11:58:33 +0000
committeryar <yar@FreeBSD.org>2003-02-11 11:58:33 +0000
commitf6108273cb3328024bcb59be2e8c9d0ef5c9830c (patch)
tree4b31e9c99915531e86f0288aa8789f15022a1c62 /libexec
parent41af143abe2d17f7e1d91cbbaf99ea2772acaab8 (diff)
downloadFreeBSD-src-f6108273cb3328024bcb59be2e8c9d0ef5c9830c.zip
FreeBSD-src-f6108273cb3328024bcb59be2e8c9d0ef5c9830c.tar.gz
Use LOG_AUTHPRIV to hide the username attempted during an invalid login
from everyone but sysadmins. PR: bin/29487 MFC after: 3 days
Diffstat (limited to 'libexec')
-rw-r--r--libexec/ftpd/ftpd.c6
1 files changed, 5 insertions, 1 deletions
diff --git a/libexec/ftpd/ftpd.c b/libexec/ftpd/ftpd.c
index 83e2e97..997bbf3 100644
--- a/libexec/ftpd/ftpd.c
+++ b/libexec/ftpd/ftpd.c
@@ -1401,10 +1401,14 @@ skip:
*/
if (rval) {
reply(530, "Login incorrect.");
- if (logging)
+ if (logging) {
syslog(LOG_NOTICE,
+ "FTP LOGIN FAILED FROM %s",
+ remotehost);
+ syslog(LOG_AUTHPRIV | LOG_NOTICE,
"FTP LOGIN FAILED FROM %s, %s",
remotehost, curname);
+ }
pw = NULL;
if (login_attempts++ >= 5) {
syslog(LOG_NOTICE,
OpenPOWER on IntegriCloud