Some Pbm in logwatch

Hi

I receive these logs in logwatch

lastlog_perform_login: Couldn’t stat /var/log/lastlog: Permission denied
lastlog_openseek: /var/log/lastlog is not a file or directory!
error: open /dev/tty failed - could not set controlling tty: Permission denied

Any idea about lastlog ? the file doesn’t exist. Do I have to create it ?

Thanks
pascal

The lastlog file is simply a log of who logged in and when. Not sure why yours wouldn’t be there but you can stop the messages by just doing a “touch /var/log/lastlog”. Once you do that login via SSH and see if the lastlog grows.

Chris

I have the same problem… i already touched /var/log/lastlog and I still get these errors under /var/log/messages:

Feb 12 06:36:25 ganja sshd[23266]: Accepted password for admin from 200.92.253.233 port 61878 ssh2
Feb 12 06:36:26 ganja sshd[23268]: lastlog_perform_login: Couldn’t stat /var/log/lastlog: Permission denied
Feb 12 06:36:26 ganja sshd[23268]: lastlog_openseek: /var/log/lastlog is not a file or directory!

but /var/log/lastlog exists, it has read-write permissions by root and it grows with each login, so what does this message mean?

i’m running redhat 9 with interworx 1.8.1

What are the perms / ownership on /var/log?

They should be:

drwx–x--x 12 root root 4096 Feb 12 04:02 .

Chris