Without further ado, the following was found: Issue: btmp → I<btmp> "For security reasons, B<su> always logs failed log-in attempts to the btmp " "file, but it does not write to the I<lastlog> file at all. This solution can " "be used to control B<su> behavior by PAM configuration. If you want to use " "the B<pam_lastlog>(8) module to print warning message about failed log-in " "attempts then B<pam_lastlog>(8) has to be configured to update the " "I<lastlog> file as well. For example by:"
