faillog(5) — Linux manual page


FAILLOG(5)            File Formats and Configuratio           FAILLOG(5)

NAME         top

       faillog - login failure logging file

DESCRIPTION         top

       /var/log/faillog maintains a count of login failures and the
       limits for each account.

       The file contains fixed length records, indexed by numerical UID.
       Each record contains the count of login failures since the last
       successful login; the maximum number of failures before the
       account is disabled; the line on which the last login failure
       occurred; the date of the last login failure; and the duration
       (in seconds) during which the account will be locked after a

       The structure of the file is:

           struct    faillog {
                short   fail_cnt;
                short   fail_max;
                char    fail_line[12];
                time_t  fail_time;
                long    fail_locktime;

FILES         top

           Failure logging file.

SEE ALSO         top


COLOPHON         top

       This page is part of the shadow-utils (utilities for managing
       accounts and shadow password files) project.  Information about
       the project can be found at 
       ⟨⟩.  If you have a bug
       report for this manual page, send it to  This page was obtained
       from the project's upstream Git repository
       ⟨⟩ on 2024-06-15.  (At that
       time, the date of the most recent commit that was found in the
       repository was 2024-06-13.)  If you discover any rendering
       problems in this HTML version of the page, or you believe there
       is a better or more up-to-date source for the page, or you have
       corrections or improvements to the information in this COLOPHON
       (which is not part of the original manual page), send a mail to

shadow-utils 4.14.0            06/15/2024                     FAILLOG(5)

Pages that refer to this page: faillog(8)