Use LOG_AUTHPRIV to hide the username attempted during an invalid login
from everyone but sysadmins. PR: bin/29487 MFC after: 3 days
This commit is contained in:
parent
83333d4569
commit
b8939f6fa6
@ -1401,10 +1401,14 @@ skip:
|
||||
*/
|
||||
if (rval) {
|
||||
reply(530, "Login incorrect.");
|
||||
if (logging)
|
||||
if (logging) {
|
||||
syslog(LOG_NOTICE,
|
||||
"FTP LOGIN FAILED FROM %s",
|
||||
remotehost);
|
||||
syslog(LOG_AUTHPRIV | LOG_NOTICE,
|
||||
"FTP LOGIN FAILED FROM %s, %s",
|
||||
remotehost, curname);
|
||||
}
|
||||
pw = NULL;
|
||||
if (login_attempts++ >= 5) {
|
||||
syslog(LOG_NOTICE,
|
||||
|
Loading…
x
Reference in New Issue
Block a user