topic su log in syslog in Operating System - HP-UX

su log in syslog

marc seguin — Tue, 27 Jan 2004 06:55:33 GMT

Hello,

I have too many messages like :
su: + tty?? root-oracle
in my syslog file.

sudo file is enough.
How to prevent these messages in syslog file ?

thanks

Re: su log in syslog

Chris Wilshaw — Tue, 27 Jan 2004 06:58:43 GMT

Change /etc/syslog.conf to include

*.info;auth.none;mail.none /var/adm/syslog/syslog.log

This sends all messages of type info to syslog.log, except those from mail and the auth system (login, su etc).

Then restart syslogd

Re: su log in syslog

T G Manikandan — Tue, 27 Jan 2004 07:01:15 GMT

check /etc/syslog.conf

check you have auth.none

*.info;auth.none;mail.none /var/adm/syslog/syslog.log

Re: su log in syslog

Mark Grant — Tue, 27 Jan 2004 07:03:49 GMT

Not sure exactly but something like

edit /etc/syslog.conf and change

"*.info;mail.none /var/adm/syslog/syslog.log" to

"*.info;mail.nonea;su.none /var/adm/syslog/syslog.log"

You then need to "kill -1" the syslogd process.