Use /var/log/auth.log and kern.log
1 file changed