From 31f3d30599b976bfd033b7c69b2aa1394541d879 Mon Sep 17 00:00:00 2001
From: Stephen Hemminger <stephen.hemminger@vyatta.com>
Date: Wed, 25 May 2011 14:16:11 -0700
Subject: Always log authorization messages

Bug 7095
Always keep /var/log/auth.log to allow for 'show log authorization'
---
 sysconf/rsyslog.conf | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/sysconf/rsyslog.conf b/sysconf/rsyslog.conf
index 919df901..56c7e15c 100644
--- a/sysconf/rsyslog.conf
+++ b/sysconf/rsyslog.conf
@@ -49,3 +49,13 @@ $Umask 0022
 # Include all config files in /etc/rsyslog.d/
 #
 $IncludeConfig /etc/rsyslog.d/*.conf
+
+###############
+#### RULES ####
+###############
+
+# Log authorization failure messages
+auth,authpriv.*			/var/log/auth.log
+
+# Emergencies are sent to everybody logged in.
+*.emerg				*
-- 
cgit v1.2.3