Linux Logs

Protecting your Linux box

Linux Logs

Postby asimo » Sat May 17, 2008 11:53 am

Assala-Elekum

Please Advice i am find for commands.

on my linux machine there is five people knows root passwd
who entered command and at what data and time.

OR some thing Good

Thanks
asimo
asimo
Havaldaar
 
Posts: 101
Joined: Sat Apr 23, 2005 1:35 pm
WLM: asimo75@hotmail.com
Location: Karachi

Postby nomankhn » Sat May 17, 2008 3:04 pm

Hi Asim,

Check for the particular time from /var/log/messages and grep time, this is really bad you directly enter from root password, i dont agree with this thing disable root password and enable sudo login with your normal userid and assign sudo to that particular user who is actually administrating that.

About finding there is no particular way, but if some body change directories or files than you can do # man find and see which particular thing is helpful for you.

Regards,
Noman Liaquat
nomankhn
Colonel
 
Posts: 714
Joined: Wed Aug 07, 2002 8:00 pm

Postby x2oxen » Sun May 18, 2008 1:58 am

well there is one thing that might help you. if user was logged on remotely then in logs it will be showing the ip of user as well. so from there you can take an idea who was that!
Muhammad Usman
+92-321-6640501
Chemonics International
http://usmanpk.com
x2oxen
Major General
 
Posts: 1114
Joined: Wed Aug 22, 2007 3:17 pm
Website: http://usmanpk.com
WLM: x2oxen@hotmail.com
Yahoo Messenger: x2oxen
Location: Faisalabad

Re: Linux Logs

Postby nomankhn » Mon May 19, 2008 9:12 pm

asimo wrote:Assala-Elekum

asimo


Hi what does this word means do you know?

Regards,
Noman Liaquat
nomankhn
Colonel
 
Posts: 714
Joined: Wed Aug 07, 2002 8:00 pm

Postby asimo » Tue May 20, 2008 1:22 pm

Hi what does this word means do you know?


Assalam-O-Elikum

Thanks To Correct,, its by Mistake.
asimo
Havaldaar
 
Posts: 101
Joined: Sat Apr 23, 2005 1:35 pm
WLM: asimo75@hotmail.com
Location: Karachi

Postby Muhammad Saad » Wed May 21, 2008 10:47 am

asimo wrote:
Hi what does this word means do you know?


Assalam-O-Elikum

Thanks To Correct,, its by Mistake.


Waalaikum-us-Salam,

Please correct it in the beginning too. :roll:
Muhammad Saad
Battalion Havaldaar Major
 
Posts: 273
Joined: Sat Jan 27, 2007 11:07 pm
Website: http://tajassus.pk
Yahoo Messenger: muhammad.saad1
Location: Dera Ismail Khan, Pakistan


Return to “%s” Security

Who is online

Users browsing this forum: No registered users and 1 guest