Audit script for root

[David Bellamy]

Hello Gurus
does anyone have an audit script that can audit root in a not trusted system. any help will be appreciated.

[Paul Sperry]

take a look a roots .history file

what exactly are you looking to audit?

[David Bellamy]

we trying to audit number of logins,system activity

[David Bellamy]

we trying to audit number of logins,system activity, something that we can put a timestamp on

[Paul Sperry]

take a look at /var/adm/sulog and /var/adm/syslog/syslog.log

Also look at theis thread.

http://forums11.itrc.hp.com/service/forums/questionanswer.do?admit=109447626+1205352405409+28353475&threadId=649574

[Chengchai Theerakalkul]

command last will show history of success login and lastb will show unsuccess login history

[gherbi]

Hi,

I think you can use the soft SUDO

http://www.gratisoft.us/sudo/


Regards