help in understanding the output(sulog)

[djoshi]

Hi All,

Can anyone help me to understand the output of /var/adm/sulog file? Also Please look the out below

SU 09/10 15:31 + tty?? root-520008
SU 09/10 15:38 + to test-root

Question

I can see that test executed the su command to become a root.

Please help me to understand the meaning of below log or advise me Is root executed su command to become a user 520008?

SU 09/10 15:34 + tty?? root-520008

Thx

[Marco A.]

tty?? means that it doesn't have a tty session, so it could be coming from a deamon.
Basically that root became 520008.Don't you have users like that ??...because that's the meaning of that. Maybe a PID becoming root, with the tty?? I think that the most probable action.

Marco,

[Hakki Aydin Ucar]

tty?? /dev/tty/ is unknown

root-520008 root switched to user 520008

For more :
http://www.umanitoba.ca/cgi-bin/man.cgi?section=4&topic=sulog