Copyright (c) DFN-CERT, Univ. of Hamburg 1994 Univ. Hamburg, Dept. of Computer Science DFN-CERT Vogt-Koelln-Strasse 30 22527 Hamburg Germany @(#) $Header: chklastlog.1,v
NAMEchklastlog - check lastlog-file for deleted entries
Chklastlog is reading all entries from the file /var/log/wtmp
(file with information about logins and logouts) and checks for every user
found in this file whether there is an entry in the file
/var/log/lastlog, too. The program will complain about userids with
logins but no lastlogin information.
To run chklastlog you need read permission on the files /var/log/wtmp and /var/log/lastlogin. Normally these files are world-readable and no special privileges are required to run the checker.
- login data base
- last login times
SEE ALSOwtmp(4), who(1), last(1)
LIMITATIONSThis program only works if the user has not logged in after the deletion of their lastlog entry.
This program was designed to run on SunOS 4.x systems only. On other systems the output is undefined...