secure日志登录成功记录

Mar 17 09:04:43 localhost unix_chkpwd[14198]: password check failed for user (root)
Mar 17 09:04:43 localhost sshd[14196]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=10.10.10.10  user=root
Mar 17 09:04:43 localhost sshd[14196]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Mar 17 09:04:45 localhost sshd[14196]: Failed password for root from 10.10.10.10 port 51098 ssh2
Mar 17 09:04:48 localhost sshd[14196]: Accepted password for root from 10.10.10.10 port 51098 ssh2

Mar 17 09:04:49 localhost sshd[14196]: pam_unix(sshd:session): session opened for user root by (uid=0)

Accepted是关键

/var/log/secure登录成功的日志记录