Selinux has ability to audit user logins.
Created attachment 1689 [details] Patch solving the problem
Like I said last time this came up, please use the existing audit framework rather than adding another parallel one. If the existing audit hooks are insufficient then let use know and we'll see what needs to be changed. *** This bug has been marked as a duplicate of bug 1402 ***
Mass move of RESOLVED bugs to CLOSED now that 5.3 is out.