Unix & Linux Stack Exchange is a question and answer site for users of Linux, FreeBSD and other Un*x-like operating systems. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a finger print reader on my laptop, and I configured PAM with fprintd,

sometimes when it lights up, I want to find out which program is asking for a privilege escalation.

Any ideas?

share|improve this question

The parm_warn module will log the service (and the terminal, user, remote user and remote host) to syslog. This will tell you the service (and assuming syslog is called with that option) the pid in question.

As this should log to the AUTHPRIV syslog facility, usually going to the root readable-only file /var/log/secure, this may not be as accessible as you'd like. This would be a good starting point to coding a custom module to give you better notification.

There are also web search hits for individual's pam_log modules that allow logging more arbitrary text and fields.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.