This section assumes that you have completed New Feature – Enabling the account-policy Service.
The following command displays the logging policy variables as SMF properties. Note that the properties are in two stencils:
login/log/syslog boolean login/log/syslog_failed_attempts count su/log/device astring su/log/logfile astring su/log/syslog boolean
The following command enables the logging policy for syslog to be set:
$ pfexec svccfg -s account-policy \ setprop config/etc_default_login/disabled boolean true
The following command enables the logging policy for su to be set:
$ pfexec svccfg -s account-policy \ setprop config/etc_default_su/disabled boolean true
For the effects of changing the values of logging properties, see the account-policy(8S) man page.