Pere Camps wrote: > > Hi! > > Is there any way to log with syslog all attepts (good & bad) to > user 'su' ? > > TIA! > > -- p. > > -- > Unsubscribe? mail -s unsubscribe [EMAIL PROTECTED] < /dev/null
You might want to disable su and have users use sudo. that logs to syslog. if they really need su they can do: sudo sh to get a root shell. then can su to another user from there. This has the advantage that you need to individually allow each account to use sudo, so no one that you don't specifically let use it can. --Evan -- Evan Van Dyke E-mail: [EMAIL PROTECTED] Page: [EMAIL PROTECTED] ICQ#: 15442232 DNRC's Minister of Lost Internet Packets. O- Amateur Radio Call Sign: KB8PVE Elder ResCon at Northwestern GCS/S d+(-) s:+ a--- C++++ UH+I++L++++S++V++++ P+ L+++>++++ E W++ N++ w-- O- M-- !V PS+ PE+ Y+ PGP t+ 5+++ X+ R+ tv+ b+++ DI++++ D+ g e h !r y- "Quoth the Raven... 'Nevermore!'" --Edgar Allen Poe "I'll bet that all you can do is watch the ball bounce around the screen. --Dilbert to Management