Solved

Track all su/root usage

Posted on 2011-03-15
5
535 Views
Last Modified: 2013-12-28
I want to track all the su/root activities.
If I set to the syslog.conf *emerg, *alert,*crit,*err,*warning,*notice,*info and *debug I will be ok?
0
Comment
Question by:darkbluegr
  • 3
  • 2
5 Comments
 
LVL 68

Accepted Solution

by:
woolmilkporc earned 50 total points
ID: 35142404
Hi,

there is a dedicated log for "su" under Solaris:

/var/log/sulog

No need for syslog.

wmp
0
 

Author Comment

by:darkbluegr
ID: 35142438
thanks woolm!  will this also have all root activity or just su?
0
 
LVL 68

Expert Comment

by:woolmilkporc
ID: 35142491
Just su.

To track all activity you'll have to set up auditing.
Syslog will not help here.
0
 

Author Comment

by:darkbluegr
ID: 35142555
ok I will open a new question about that then, thanks!
0
 

Author Comment

by:darkbluegr
ID: 35142556
thanks!
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

My previous tech tip, Installing the Solaris OS From the Flash Archive On a Tape (http://www.experts-exchange.com/articles/OS/Unix/Solaris/Installing-the-Solaris-OS-From-the-Flash-Archive-on-a-Tape.html), discussed installing the Solaris Operating S…
FreeBSD on EC2 FreeBSD (https://www.freebsd.org) is a robust Unix-like operating system that has been around for many years. FreeBSD is available on Amazon EC2 through Amazon Machine Images (AMIs) provided by FreeBSD developer and security office…
Learn several ways to interact with files and get file information from the bash shell. ls lists the contents of a directory: Using the -a flag displays hidden files: Using the -l flag formats the output in a long list: The file command gives us mor…
Learn how to navigate the file tree with the shell. Use pwd to print the current working directory: Use ls to list a directory's contents: Use cd to change to a new directory: Use wildcards instead of typing out long directory names: Use ../ to move…

910 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

21 Experts available now in Live!

Get 1:1 Help Now