security question about /var/log/secure

[Andy Green]

Somebody in the thread at some point said:

> Sep 13 11:21:55 server pam_timestamp_check: PAM `/var/run/' permissions are lax

ll -d /var/run ... mine looks like

# ll -d /var/run
drwxr-xr-x 22 root root 4096 2007-09-13 04:28 /var/run

> Sep 13 11:22:30 server last message repeated 5 times
> Sep 13 11:22:51 server last message repeated 3 times
> Sep 13 11:22:52 server sshd[24997]: Connection closed by UNKNOWN

I wonder if solving the one problem will solve the other.  It appears
sshd can blow chunks and terminate connections like this.

-Andy