# faillog

## NAME



           faillog - display faillog records or set login failure limits
    


## SYNOPSIS



    
           **faillog**[_options_]
    


## DESCRIPTION



           **faillog** displays the contents of the failure log database
           (/var/log/faillog). It can also set the failure counters and
           limits. When **faillog** is run without arguments, it only displays
           the faillog records of the users who had a login failure.
    


## OPTIONS



           The options which apply to the **faillog** command are:
    
           **-a** , **--all**
               Display (or act on) faillog records for all users having an
               entry in the faillog database.
    
               The range of users can be restricted with the **-u** option.
    
               In display mode, this is still restricted to existing users
               but forces the display of the faillog entries even if they are
               empty.
    
               With the **-l** , **-m** , **-r** , **-t** options, the users' records are
               changed, even if the user does not exist on the system. This
               is useful to reset records of users that have been deleted or
               to set a policy in advance for a range of users.
    
           **-h** , **--help**
               Display help message and exit.
    
           **-l** , **--lock-secs** _SEC_
               Lock account for _SEC_ seconds after failed login.
    
               Write access to /var/log/faillog is required for this option.
    
           **-m** , **--maximum** _MAX_
               Set the maximum number of login failures after the account is
               disabled to _MAX_.
    
               Selecting a _MAX_ value of 0 has the effect of not placing a
               limit on the number of failed logins.
    
               The maximum failure count should always be 0 for _root_ to
               prevent a denial of services attack against the system.
    
               Write access to /var/log/faillog is required for this option.
    
           **-r** , **--reset**
               Reset the counters of login failures.
    
               Write access to /var/log/faillog is required for this option.
    
           **-R** , **--root** _CHROOT_DIR_
               Apply changes in the _CHROOT_DIR_ directory and use the
               configuration files from the _CHROOT_DIR_ directory. Only
               absolute paths are supported.
    
           **-t** , **--time** _DAYS_
               Display faillog records more recent than _DAYS_.
    
           **-u** , **--user** _LOGIN_ |_RANGE_
               Display faillog record or maintains failure counters and
               limits (if used with **-l** , **-m** or **-r** options) only for the
               specified user(s).
    
               The users can be specified by a login name, a numerical user
               ID, or a _RANGE_ of users. This _RANGE_ of users can be specified
               with a min and max values (_UID_MIN-UID_MAX_), a max value
               (_-UID_MAX_), or a min value (_UID_MIN-_).
    
           When none of the **-l** , **-m** , or **-r** options are used, **faillog** displays
           the faillog record of the specified user(s).
    


## CAVEATS



           **faillog** only prints out users with no successful login since the
           last failure. To print out a user who has had a successful login
           since their last failure, you must explicitly request the user
           with the **-u** flag, or print out all users with the **-a** flag.
    


## FILES



           /var/log/faillog
               Failure logging file.
    


* * *