On Mon, 26 Jul 1999, Bill Sommerfeld wrote:

# If I were building something from scratch:
# 
#  - I'd use db for the utmp and lastlog replacement (utmp keyed by
# "line", while lastlog keyed by either uid or login name), and a plain
# text file for the wtmp replacement.

utmp:  I hope you're prepared to make 'who', 'finger' and 'w' sort their
output :-) [db files are not stored in any meaningful order].

wtmp: Why text?  That makes it that much easier for a newbie cracker wannabe
to hack accounting records.

#  - I'd probably also extend lastlog to record unsuccessful login info
# as well.

This would be a boon, actually.  Would you show who the intruder was
attempting to impersonate?

# 					- Bill


				--*greywolf;
--
NetBSD: My Computer Runs!