Google only tell me how to read the content of the /var/log/lastlog, but I really curious to know what process is responsible to write to it?


The last_log PAM module typically maintains and updates the /var/log/lastlog database.

pam_lastlog is a PAM module to display a line of information about the last login of the user. In addition, the module maintains the /var/log/lastlog file.

Some applications may perform this function themselves. In such cases, this module is not necessary.

  • Okay, thank! Can user program invoke some API also insert records into this lastlog file?
    – Woody Wu
    Jan 18 '19 at 13:32

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.