Hi List,
Is there nice way to get more logging for all su - logins? pam?
-- Eero
On 08/27/2013 02:02 PM, Eero Volotinen wrote:
Hi List,
Is there nice way to get more logging for all su - logins? pam?
-- Eero _______________________________________________ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Eero,
My suggestion would be logwatch. If you do not need a real time solution. You can have the server email you a nightly report that will include the day before su access.
-J.J.-
On 27.Aug.2013, at 21:02, Eero Volotinen wrote:
Is there nice way to get more logging for all su - logins? pam?
What exactly do you want to be logged? I get entries in /var/log/secure
Aug 28 00:38:51 xxx su: pam_unix(su-l:session): session opened for user root ... Aug 28 00:39:23 xxx su: pam_unix(su-l:session): session closed for user root
On 28.Aug.2013, at 00:43, Markus Falb wrote:
On 27.Aug.2013, at 21:02, Eero Volotinen wrote:
Is there nice way to get more logging for all su - logins? pam?
I get entries in /var/log/secure
I also get entries in /var/log/audit/audit.log, these are probably more trustworthy.
-
Eero Volotinen -
Jason A. Johnson -
Markus Falb