/var/log/btmp$ f ActLog
/var/log/btmp\\.1$ f RotLog+ARF
