From 00b7acda29699a9f2cfdb9ae73f96c2b54710067 Mon Sep 17 00:00:00 2001
From: matteo <matteo@FreeBSD.org>
Date: Sun, 5 Mar 2006 15:45:38 +0000
Subject: Enhance loginfail: it will catch sshd, proftpd and su errors, as well
 as other programs

PR: conf/70973
Submitted by:	Ryan Sommers" <ryans@gamersimpact.com>
Approved by:	philip (mentor)
MFC after:	3 days
---
 etc/periodic/security/800.loginfail | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'etc')

diff --git a/etc/periodic/security/800.loginfail b/etc/periodic/security/800.loginfail
index dd02a4e..d75f953 100755
--- a/etc/periodic/security/800.loginfail
+++ b/etc/periodic/security/800.loginfail
@@ -59,7 +59,7 @@ case "$daily_status_security_loginfail_enable" in
     [Yy][Ee][Ss])
 	echo ""
 	echo "${host} login failures:"
-	n=$(catmsgs | grep -ia "^$yesterday.*fail" |
+	n=$(catmsgs | grep -ia "^$yesterday.*(fail|invalid|bad|illegal)" |
 	    tee /dev/stderr | wc -l)
 	[ $n -gt 0 ] && rc=1 || rc=0;;
     *)	rc=0;;
-- 
cgit v1.1