Linux Logs

Protecting your Linux box
Post Reply
asimo
Havaldaar
Posts: 101
Joined: Sat Apr 23, 2005 1:35 pm
Location: Karachi

Linux Logs

Post by asimo »

Assala-Elekum

Please Advice i am find for commands.

on my linux machine there is five people knows root passwd
who entered command and at what data and time.

OR some thing Good

Thanks
asimo
nomankhn
Colonel
Posts: 714
Joined: Wed Aug 07, 2002 8:00 pm

Post by nomankhn »

Hi Asim,

Check for the particular time from /var/log/messages and grep time, this is really bad you directly enter from root password, i dont agree with this thing disable root password and enable sudo login with your normal userid and assign sudo to that particular user who is actually administrating that.

About finding there is no particular way, but if some body change directories or files than you can do # man find and see which particular thing is helpful for you.

Regards,
Noman Liaquat
x2oxen
Major General
Posts: 1114
Joined: Wed Aug 22, 2007 3:17 pm
Location: Faisalabad
Contact:

Post by x2oxen »

well there is one thing that might help you. if user was logged on remotely then in logs it will be showing the ip of user as well. so from there you can take an idea who was that!
Muhammad Usman
+92-321-6640501
Chemonics International
http://usmanpk.com
nomankhn
Colonel
Posts: 714
Joined: Wed Aug 07, 2002 8:00 pm

Re: Linux Logs

Post by nomankhn »

asimo wrote:Assala-Elekum

asimo
Hi what does this word means do you know?

Regards,
Noman Liaquat
asimo
Havaldaar
Posts: 101
Joined: Sat Apr 23, 2005 1:35 pm
Location: Karachi

Post by asimo »

Hi what does this word means do you know?
Assalam-O-Elikum

Thanks To Correct,, its by Mistake.
Muhammad Saad
Battalion Havaldaar Major
Posts: 273
Joined: Sat Jan 27, 2007 11:07 pm
Location: Dera Ismail Khan, Pakistan
Contact:

Post by Muhammad Saad »

asimo wrote:
Hi what does this word means do you know?
Assalam-O-Elikum

Thanks To Correct,, its by Mistake.
Waalaikum-us-Salam,

Please correct it in the beginning too. :roll:
Post Reply