When a user gets refused because the password is wrong, use the

older "BAD SU" syslog message that folks prefer. There is quite
a bit more tweaking that can be done with other similar messages.

Asked for by:	tjr

usr.bin/su/su.c

@@ -230,8 +230,12 @@ main(int argc, char *argv[])
 
 	retcode = pam_authenticate(pamh, 0);
 	if (retcode != PAM_SUCCESS) {
+#if 0
 		syslog(LOG_ERR, "pam_authenticate: %s",
 		    pam_strerror(pamh, retcode));
+#endif
+		syslog(LOG_AUTH|LOG_WARNING, "BAD SU %s to %s on %s",
+		    username, user, mytty);
 		errx(1, "Sorry");
 	}
 	retcode = pam_get_item(pamh, PAM_USER, (const void **)&p);