# faillog - display faillog records or set login failure limits - man(8) - [phpMan]

[_FAILLOG_(8)](https://www.chedong.com/phpMan.php/man/FAILLOG/8/markdown)                           System Management Commands                           [_FAILLOG_(8)](https://www.chedong.com/phpMan.php/man/FAILLOG/8/markdown)

## NAME
       faillog - display faillog records or set login failure limits

## SYNOPSIS


       **faillog **[_options_]

## DESCRIPTION
       **faillog **displays the contents of the failure log database (/var/log/faillog). It can also set
       the failure counters and limits. When **faillog **is run without arguments, it only displays the
       faillog records of the users who had a login failure.

## OPTIONS
       The options which apply to the **faillog **command are:

### -a --all
           Display (or act on) faillog records for all users having an entry in the faillog
           database.

           The range of users can be restricted with the **-u **option.

           In display mode, this is still restricted to existing users but forces the display of the
           faillog entries even if they are empty.

           With the **-l**, **-m**, **-r**, **-t **options, the users' records are changed, even if the user does
           not exist on the system. This is useful to reset records of users that have been deleted
           or to set a policy in advance for a range of users.

### -h --help
           Display help message and exit.

### -l --lock-secs _
           Lock account for _SEC_ seconds after failed login.

           Write access to /var/log/faillog is required for this option.

### -m --maximum _
           Set the maximum number of login failures after the account is disabled to _MAX_.

           Selecting a _MAX_ value of 0 has the effect of not placing a limit on the number of failed
           logins.

           The maximum failure count should always be 0 for _root_ to prevent a denial of services
           attack against the system.

           Write access to /var/log/faillog is required for this option.

### -r --reset
           Reset the counters of login failures.

           Write access to /var/log/faillog is required for this option.

### -R --root _
           Apply changes in the _CHROOT_DIR_ directory and use the configuration files from the
           _CHROOT_DIR_ directory. Only absolute paths are supported.

### -t --time _
           Display faillog records more recent than _DAYS_.

### -u --user _
           Display faillog record or maintains failure counters and limits (if used with **-l**, **-m **or
           **-r **options) only for the specified user(s).

           The users can be specified by a login name, a numerical user ID, or a _RANGE_ of users.
           This _RANGE_ of users can be specified with a min and max values (_UID_MIN-UID_MAX_), a max
           value (_-UID_MAX_), or a min value (_UID_MIN-_).

       When none of the **-l**, **-m**, or **-r **options are used, **faillog **displays the faillog record of the
       specified user(s).

## CAVEATS
       **faillog **only prints out users with no successful login since the last failure. To print out a
       user who has had a successful login since their last failure, you must explicitly request the
       user with the **-u **flag, or print out all users with the **-a **flag.

## FILES
       /var/log/faillog
           Failure logging file.

## SEE ALSO
       [**login**(1)](https://www.chedong.com/phpMan.php/man/login/1/markdown), [**faillog**(5)](https://www.chedong.com/phpMan.php/man/faillog/5/markdown).

shadow-utils 4.13                            05/30/2024                                   [_FAILLOG_(8)](https://www.chedong.com/phpMan.php/man/FAILLOG/8/markdown)