Arch Linux

carlday

Member

Registered: 2011-10-04

Posts: 45

[Solved] Force no-create of /var/log/tallylog

When using my Arch systems, when thru with session rm logs and type "poweroff" to secure system.
Tallylog seems to be tied to logind/pam_tally2, have  NO intrest in this Binary login counter file.
Tried changes to /etc/pam.d/system-login to the lines with pam_tally2.so
auth       required   pam_tally2.so        onerr=succeed file=/dev/null
no change
auth       optional   pam_tally2.so        onerr=succeed file=/dev/null
no change
account       required   pam_tally2.so         file=/dev/null
after reboot on this last change, Authenticaion Failure
Boot usb to fix last change to login.
Do NOT want edit/compile PAM system to stop /var/log/tallylog
TIA

Last edited by carlday (2020-05-13 20:03:46)

Awebb

Member

Registered: 2010-05-06

Posts: 6,688

Re: [Solved] Force no-create of /var/log/tallylog

Try setting file= to anything other than /dev/null to see if the file parameter works as expected. Maybe it realizes it cannot write to /dev/null and falls back to the default path.

seth

Member

From: Won't reply 2 private help req

Registered: 2012-09-03

Posts: 77,813

Re: [Solved] Force no-create of /var/log/tallylog

Edit, forgot F5…: @OP, do you understand what it does?

man 8 pam_tally2

You cannot use tally w/o providing it a file to store your failed attempts.
If you don't want the tally feature, remove its pam entries.

Last edited by seth (2020-05-13 06:16:01)

---

How to upload text · How to boot w/o GUI · Disable Windows Fast-Start! · Fix your xinitrc

carlday

Member

Registered: 2011-10-04

Posts: 45

Re: [Solved] Force no-create of /var/log/tallylog

Put # on pam_tally2.so lines, rm log, rebooted no Log
Will add this to my Post Syu sed script