lastlog - Login logging file


The log file /var/log/lastlog keeps track of the last successfull login of each user on the system. Not all programs logs this data and for some this is configurable. The content of this file can be printed with the lastlog(8) command. Every entry has a fixed length, the file is indexed by numerical UID. Each record contains the time, port and originating host that were used for the login.

The structure of the file is

struct lastlog { #if __WORDSIZE == 64 && defined __WORDSIZE_COMPAT32 int32_t ll_time; #else time_t ll_time; #endif char ll_line[UT_LINESIZE]; char fail_host[UT_HOSTSIZE]; };


faillog(5), faillog(8), lastlog(8), login.defs(5)

openSUSE Logo