Re: Seeing who has su-ed

From: Cameron Simpson (cs@zip.com.au)
Date: 03/22/03

  • Next message: Jason Kohles: "Re: Seeing who has su-ed" 
    Date: Sat, 22 Mar 2003 10:42:12 +1100
From: Cameron Simpson <cs@zip.com.au>
To: "Klotz, Brian" <Brian_Klotz@heald.edu>

    On 14:25 20 Mar 2003, Klotz, Brian <Brian_Klotz@heald.edu> wrote:
    | I teach a Linux basics course and each term I have the problem of students
    | who do an su to become root, then rather than exiting, they su again to go
    | back to their regular account. The trouble is identifying when someone has
    | done this (they usually don't remember). The "who" command only shows login
    | shells (AFAIK) so it does not reveal when someone has su-ed.
    |
    | Does anyone know of a way to list all of the users currently logged in,
    | including when someone has su-ed to become another user?

    Try this:

            ps axfu

    That neatly shows the process tree and the users of each process.
    You will see a parent-child-grandchild of user-root-user in the case
    you describe.

    Cheers, 

    -- 
Cameron Simpson, DoD#743        cs@zip.com.au    http://www.zip.com.au/~cs/
Talk is the *** redheaded stepchild of email and the telephone.
	- Geoff Miller, geoffm@purplehaze.Corp.Sun.COM
  • Next message: Jason Kohles: "Re: Seeing who has su-ed"
    • Quantcast