Re: Seeing who has su-ed

From: Andreas (andreashoheisel@web.de)
Date: 03/21/03

  • Next message: J. Rowan: "Re: Seeing who has su-ed" 
    From: Andreas <andreashoheisel@web.de>
To: focus-linux@securityfocus.com
Date: Fri, 21 Mar 2003 20:24:08 +0100

    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA1

    Am Thursday 20 March 2003 23:25 schrieb Klotz, Brian:
    [..]
    > Does anyone know of a way to list all of the users currently logged in,
    Try finger

    > including when someone has su-ed to become another user?
    [..]

    Look at /var/log/messages if its not there add
    authpriv.* /var/log/secure
    to your /etc/syslog.conf and than look at /var/log/secure

    - --
    Andreas Hoheisel

    Wer die Freiheit aufgibt, um Sicherheit zu gewinnen, wird am Ende beides
    verlieren. (Benjamin Franklin)
    http://www.againstTCPA.com/
    http://www.odem.org
    -----BEGIN PGP SIGNATURE-----
    Version: GnuPG v1.0.7 (GNU/Linux)

    iD8DBQE+e2bYHTQsYavDgB8RAqR0AJ4xCUukzbTvdMdcR29MEIDxD0K/ewCgl8sA
    4L/uqnjpPl5JV8UpbkWysi0=
    =NAnw
    -----END PGP SIGNATURE-----

  • Next message: J. Rowan: "Re: Seeing who has su-ed"

    Relevant Pages