Solved

Track all su/root usage

Posted on 2011-03-15
5
537 Views
Last Modified: 2013-12-28
I want to track all the su/root activities.
If I set to the syslog.conf *emerg, *alert,*crit,*err,*warning,*notice,*info and *debug I will be ok?
0
Comment
Question by:darkbluegr
  • 3
  • 2
5 Comments
 
LVL 68

Accepted Solution

by:
woolmilkporc earned 50 total points
ID: 35142404
Hi,

there is a dedicated log for "su" under Solaris:

/var/log/sulog

No need for syslog.

wmp
0
 

Author Comment

by:darkbluegr
ID: 35142438
thanks woolm!  will this also have all root activity or just su?
0
 
LVL 68

Expert Comment

by:woolmilkporc
ID: 35142491
Just su.

To track all activity you'll have to set up auditing.
Syslog will not help here.
0
 

Author Comment

by:darkbluegr
ID: 35142555
ok I will open a new question about that then, thanks!
0
 

Author Comment

by:darkbluegr
ID: 35142556
thanks!
0

Featured Post

Gigs: Get Your Project Delivered by an Expert

Select from freelancers specializing in everything from database administration to programming, who have proven themselves as experts in their field. Hire the best, collaborate easily, pay securely and get projects done right.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Using libpcap/Jpcap to capture and send packets on Solaris version (10/11) Library used: 1.      Libpcap (http://www.tcpdump.org) Version 1.2 2.      Jpcap(http://netresearch.ics.uci.edu/kfujii/Jpcap/doc/index.html) Version 0.6 Prerequisite: 1.      GCC …
FreeBSD on EC2 FreeBSD (https://www.freebsd.org) is a robust Unix-like operating system that has been around for many years. FreeBSD is available on Amazon EC2 through Amazon Machine Images (AMIs) provided by FreeBSD developer and security office…
Learn how to get help with Linux/Unix bash shell commands. Use help to read help documents for built in bash shell commands.: Use man to interface with the online reference manuals for shell commands.: Use man to search man pages for unknown command…
Learn how to navigate the file tree with the shell. Use pwd to print the current working directory: Use ls to list a directory's contents: Use cd to change to a new directory: Use wildcards instead of typing out long directory names: Use ../ to move…

808 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question