nixCraft
Linux / UNIX Tech Support Forum
Many users can do 'sudo su', how to know who is who?
This is a discussion on Many users can do 'sudo su', how to know who is who? within the Networking, Firewalls and Security forums, part of the Mastering Servers category; Hi there, I've just received a server as herence on my work which have many users who can do 'sudo ...
|
|||||||
| Networking, Firewalls and Security No it's not a secret. Talk about firewalls and security issues. |
 |
|
|
LinkBack | Thread Tools | Display Modes |
25-10-2008, 08:24 PM
|
||||
|
||||
Many users can do 'sudo su', how to know who is who?
Hi there, I've just received a server as herence on my work which have many users who can do 'sudo su', that's a problem from my point of view. How can I trace who is who when they do sudo su? thanks.
|
| Sponsored Links | ||
|
|
|
26-10-2008, 03:12 AM
|
||||
|
||||
|
Use /var/log/auth.log file under Debian / Ubuntu to see sudo activity. Under Red Hat / CentOS / Fedora it is /var/log/secure file.
Code:
grep sudo /var/log/secure grep username /var/log/secure tail -f /var/log/secure less /var/log/secure
__________________
Rocky Jr.  What's wrong? I hope I am not making you uncomfortable...  Never send a boy to do a mans job. 
|
|
26-10-2008, 09:50 PM
|
||||
|
||||
|
Quote:
fedora core 4, /var/log/secure. But, from the log I only can know when they did 'sudo su', what I would like to know is what they do after that.
|
|
| Tags |
| grep , less command , sudo , tail , var+log+secure |
Currently Active Users Viewing This Thread: 1 (0 members and 1 guests) |
|
| Thread Tools | |
| Display Modes | |
Linear Mode
|
|
|
||||
| Thread | Thread Starter | Forum | Replies | Last Post |
| sudo | senthil6face | Linux software | 2 | 22-08-2008 03:25 PM |
| disable sftp users | raudisir | Networking, Firewalls and Security | 3 | 13-05-2008 05:06 PM |
| sudo and apache | txt3rob | Web servers | 1 | 18-04-2008 11:30 PM |
| different php.ini for different virtual users | kasimani | Web servers | 1 | 15-04-2008 02:17 PM |
| Ldap and non-local users | bdptcob | Linux software | 1 | 15-02-2008 01:34 AM |
All times are GMT +5.5. The time now is 08:02 PM.
