/var/adm/sulog

[madhudeepan]

SU 07/06 10:01+ pts/6 ram1123-root
SU 07/06 10:04+ pts/5 gupta11-root
SU 07/06 10:04+ pts/1 ram1123-root
SU 07/06 11:03+ pts/1 tarun-ram1123-root

one of the unprivileged user has executed as the super user.... how can find which user dont have super user privilege.

[Dennis Handly]

>how can find which user don't have super user privilege?

(Beat them with a stick? ;-)
Each of the 3 users above know the root password and were able to use su(1).
ram1123, gupta11 and tarun-ram1123
The latter is more than 8 chars??

[Sajjad Sahir]

Dear Madhu

They know root passwd.

why we are using sulog files u know
in order to check any user is trying to get an access as root. So u should careful about root passwd.

thanks and regards

Sajjad Sahir

[Suraj K Sankari]

HI,
Time login as root
~~~~~~~~~~~~~~~~~~~~~~
10:01 ram1123-root
10:04 gupta11-root
10:04 ram1123-root
11:03 tarun-ram1123-root

As showing time these 3 user's logged into your server as superuser.

>>how can find which user dont have super user privilege.

Any user who knows the root passwd or any user who's uid is 0 (zero) is having the super user priviledge.

Suraj

[Aryan]

Please do not expose the root password...

thats it...

Regards,
Aaryan