Unix & Linux Stack Exchange is a question and answer site for users of Linux, FreeBSD and other Un*x-like operating systems. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

What's the difference between authpriv and auth in syslog configuration?

It wasn't mentioned in syslog.conf, only tells me that such facility exists.

share|improve this question
up vote 8 down vote accepted

authpriv – non-system authorization messages

auth-authentication and authorization related commands

earlier LOG_AUTHPRIV is for hiding sensitive log messages inside a protected file, e.g., /var/log/auth.log. whereas LOG_AUTH on Linux is not configured with restricted access normally,whereas LOG_AUTHPRIV is. LOG_AUTH instead of using something generic like LOG_USER.

It is recommended to use LOG_AUTHPRIV for auth logs that have a substantial risk of recording someone's password

The GNU C Library manual doesn't document LOG_AUTHPRIV at all and just has LOG_AUTH, so the Linux manpages aren't getting it from there.

now from man syslog i got LOG_AUTH security/authorization messages (DEPRECATED Use LOG_AUTHPRIV instead)

but most of the code i have seen has something like


so it is upto you to decide which one to use

share|improve this answer

authpriv is a separate bucket for routing authorization messages to a log file that has more restricted permissions that those of auth. Different OS's will send different messages to auth vs. authpriv.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.