topic Re: tracking su's in Operating System - HP-UX

tracking su's

Steve G. Casino — Wed, 08 Sep 2004 11:47:33 GMT

Is there a log i can view to track SUs?

Thanks in advance!

Re: tracking su's

Victor BERRIDGE — Wed, 08 Sep 2004 11:49:09 GMT

Hi,
All I can think of is /var/adm/sulog...

All the best
Victor

Re: tracking su's

Jeff_Traigle — Wed, 08 Sep 2004 11:50:37 GMT

/var/adm/sulog and /var/adm/syslog/syslog.log. See su(1).

Re: tracking su's

Pete Randall — Wed, 08 Sep 2004 11:51:16 GMT

Steve,

/var/adm/sulog tracks the date, time, and user who did the su.

Pete

Re: tracking su's

Geoff Wild — Wed, 08 Sep 2004 11:52:08 GMT

Yes, /var/adm/sulog

more /var/adm/sulog
SU 07/26 10:33 + pts/7 gwild-root
SU 07/26 10:39 + pts/10 gwild-root
SU 07/26 10:39 + daemon root-oracle
SU 07/26 10:41 + daemon root-oracle
SU 07/26 11:58 - pts/11 gwild-root
SU 07/26 11:58 + pts/11 gwild-root
SU 07/28 07:16 + pts/12 gwild-root

Rgds...Geoff

Re: tracking su's

Sanjay_6 — Wed, 08 Sep 2004 11:53:28 GMT

/var/adm/sulog is a readble file. su's are also logged into syslog,

cat /var/adm/syslog/syslog.log |grep -i ": su :"
'+" is a successfule attempt and "-" is an unsuccessful one.

Hope this helps.

Regds

Re: tracking su's

Steve G. Casino — Wed, 08 Sep 2004 11:56:28 GMT

Big help! Thanks to everyone!
This is the best forum i ever joined!
I always get an answer in less than 5 minutes