luci-base: send failed/successfull login to syslog

Note: This change is relevant for systems that don't
use uhttpd for LuCI.
This log can be later used for fail2ban etc.

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit be8d749599a11229435141d85cfe5eba2dcf96d2)

diff --git a/modules/luci-base/luasrc/dispatcher.lua b/modules/luci-base/luasrc/dispatcher.lua
index 3c1d438f34a3b690e36972a7ff9ba8b130497bba..bd1b112f60cdb6816c01d18b371d78f8596684b3 100644 (file)
--- a/modules/luci-base/luasrc/dispatcher.lua
+++ b/modules/luci-base/luasrc/dispatcher.lua
@@ -563,15 +563,13 @@ local function session_setup(user, pass)
                        ubus_rpc_session = login.ubus_rpc_session,
                        values = { token = sys.uniqueid(16) }
                })
-
-               io.stderr:write("luci: accepted login on /%s for %s from %s\n"
-                       %{ rp, user or "?", http.getenv("REMOTE_ADDR") or "?" })
+               nixio.syslog("info", tostring("luci: accepted login on /%s for %s from %s\n"
+                       %{ rp, user or "?", http.getenv("REMOTE_ADDR") or "?" }))
 
                return session_retrieve(login.ubus_rpc_session)
        end
-
-       io.stderr:write("luci: failed login on /%s for %s from %s\n"
-               %{ rp, user or "?", http.getenv("REMOTE_ADDR") or "?" })
+       nixio.syslog("info", tostring("luci: failed login on /%s for %s from %s\n"
+               %{ rp, user or "?", http.getenv("REMOTE_ADDR") or "?" }))
 end
 
 local function check_authentication(method)