Linux Logs

[asimo]

Assala-Elekum

Please Advice i am find for commands.

on my linux machine there is five people knows root passwd
who entered command and at what data and time.

OR some thing Good

Thanks
asimo

[nomankhn]

Hi Asim,

Check for the particular time from /var/log/messages and grep time, this is really bad you directly enter from root password, i dont agree with this thing disable root password and enable sudo login with your normal userid and assign sudo to that particular user who is actually administrating that.

About finding there is no particular way, but if some body change directories or files than you can do # man find and see which particular thing is helpful for you.

Regards,
Noman Liaquat

[x2oxen]

well there is one thing that might help you. if user was logged on remotely then in logs it will be showing the ip of user as well. so from there you can take an idea who was that!

[nomankhn]

Assala-Elekum

asimo

Hi what does this word means do you know?

Regards,
Noman Liaquat

[asimo]

Hi what does this word means do you know?

Assalam-O-Elikum

Thanks To Correct,, its by Mistake.

[Muhammad Saad]

Hi what does this word means do you know?

Assalam-O-Elikum

Thanks To Correct,, its by Mistake.

Waalaikum-us-Salam,

Please correct it in the beginning too.