[Bug 1059854] [NEW] auth.log is empty

[Launchpad Bug Tracker]

You have been subscribed to a public bug:

On a fresh 12.04 64 bit machine in the default state + sshd installed,
the auth.log file remained empty, when normally it would fill up with
sshd hacking attempts. The sshd_config was left at its default, which
should record login failures.

I have figured out a workaround, which is probably a good clue about the
underlying bug.

It turns out that the permissions of auth.log were:  messagebus (owner)
adm (group)

doing a

sudo chown syslog /etc/auth.log

fixed the problem instantly, with failed logins now going to the file as
expected. I don't know if this "fix" will survive log rotation.

** Affects: rsyslog (Ubuntu)
     Importance: Undecided
         Status: New

-- 
auth.log is empty
https://bugs.launchpad.net/bugs/1059854
You received this bug notification because you are a member of Ubuntu Foundations Bugs, which is subscribed to rsyslog in Ubuntu.