-a

Display (or act on) faillog records for all users having an entry in the faillog database.The range of users can be restricted with the -u option.In display mode, this is still restricted to existing users but forces the display of the faillog entries even if they are empty.With the -l, -m, -r, -t options, the users' records are changed, even if the user does not exist on the system. This is useful toreset records of users that have been deleted or to set a policy in advance for a range of users.

-h

Display help message and exit.

-l

Lock account for SEC seconds after failed login.Write access to /var/log/faillog is required for this option.

-m

Set the maximum number of login failures after the account is disabled to MAX.Selecting a MAX value of 0 has the effect of not placing a limit on the number of failed logins.The maximum failure count should always be 0 for root to prevent a denial of services attack against the system.Write access to /var/log/faillog is required for this option.

-r

Reset the counters of login failures.Write access to /var/log/faillog is required for this option.

-R

Apply changes in the CHROOT_DIR directory and use the configuration files from the CHROOT_DIR directory.

-t

Display faillog records more recent than DAYS.

-u

Display faillog record or maintains failure counters and limits (if used with -l, -m or -r options) only for the specifieduser(s).The users can be specified by a login name, a numerical user ID, or a RANGE of users. This RANGE of users can be specified with amin and max values (UID_MIN-UID_MAX), a max value (-UID_MAX), or a min value (UID_MIN-).When none of the -l, -m, or -r options are used, faillog displays the faillog record of the specified user(s).CAVEATSfaillog only prints out users with no successful login since the last failure. To print out a user who has had a successful loginsince their last failure, you must explicitly request the user with the -u flag, or print out all users with the -a flag.FILES/var/log/faillogFailure logging file.