LinuxQuestions.org
Welcome to the most active Linux Forum on the web.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie
User Name
Password
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!

Notices


Reply
  Search this Thread
Old 09-24-2011, 04:15 AM   #1
Konphine
Member
 
Registered: Jul 2011
Location: Phoenix, New York
Distribution: Slackware 13.37
Posts: 376

Rep: Reputation: 11
Monitoring Usage


So, I'm in my dorm, but I have reason to believe somebody is physically using, or trying to use my computer when I'm in classes (I only have 1 roommate, but he's very social so I'm guessing one of his friends).

Is there a way to check this? Kind of like a parent wanting to know what his/her child has been doing on the computer sort of thing.
 
Old 09-24-2011, 04:19 AM   #2
jdkaye
LQ Guru
 
Registered: Dec 2008
Location: Westgate-on-Sea, Kent, UK
Distribution: Debian Testing Amd64
Posts: 5,464

Rep: Reputation: Disabled
I don't understand the situation very well. Do you leave your laptop running and logged in when you are absent? Does anyone else have your password? Don't you have a lock screen function on your screensaver after that requires a password after x number of idle minutes? Please give us a few details about your security measures.
ciao,
jdk
 
Old 09-24-2011, 04:20 AM   #3
firefiber
LQ Newbie
 
Registered: Sep 2011
Posts: 16

Rep: Reputation: Disabled
Quote:
Originally Posted by Konphine View Post
So, I'm in my dorm, but I have reason to believe somebody is physically using, or trying to use my computer when I'm in classes (I only have 1 roommate, but he's very social so I'm guessing one of his friends).

Is there a way to check this? Kind of like a parent wanting to know what his/her child has been doing on the computer sort of thing.
Using your computer as in, breaking into it? Or do you leave it logged on? Have you put in a user password? Lock your PC when you leave. Install a keylogger. Disable USB/CD booting in your BIOS and set a BIOS password, I guess.

That's all I can think of.

How do you know someone's been using it?
 
Old 09-24-2011, 04:24 AM   #4
Konphine
Member
 
Registered: Jul 2011
Location: Phoenix, New York
Distribution: Slackware 13.37
Posts: 376

Original Poster
Rep: Reputation: 11
Hi, and thanks for the quick response.

I leave it on when my roommate and I are both not in the room, since we have room keys I just lock the door when I leave, and when I come back he's still not there either. Like I said, a very social guy.

I thought somebody was using it, because I lined up the computer's charger port with my mouse (the company name was lined up with it) but when I returned, it was moved.

When I suspect other people will come, I do lock it but if it's a quick break like going to grab some food I don't.

I want to be sure, which is why I'm wondering how I would identify it or not. I have started locking it even for short breaks since the mouse aligning thing though.
 
Old 09-24-2011, 04:28 AM   #5
firefiber
LQ Newbie
 
Registered: Sep 2011
Posts: 16

Rep: Reputation: Disabled
Quote:
Originally Posted by Konphine View Post
I want to be sure, which is why I'm wondering how I would identify it or not. I have started locking it even for short breaks since the mouse aligning thing though.
Well the only way is to set up a keylogger (or for the more extreme/paranoid a spy-cam and a hardware keylogger: for LiveUSB's).

Other than that, there's not much else you can do, just lock your PC, make sure you have a good password, and maybe encrypt your home folder (but that's going a little too much, I guess, if you have a good password set up).
 
Old 09-24-2011, 04:29 AM   #6
Konphine
Member
 
Registered: Jul 2011
Location: Phoenix, New York
Distribution: Slackware 13.37
Posts: 376

Original Poster
Rep: Reputation: 11
There's nothing under /var/log I can check?
 
Old 09-24-2011, 04:35 AM   #7
jdkaye
LQ Guru
 
Registered: Dec 2008
Location: Westgate-on-Sea, Kent, UK
Distribution: Debian Testing Amd64
Posts: 5,464

Rep: Reputation: Disabled
I think leaving your laptop unattended and logged in with no security precautions is an invitation for others to use it. Is there any reason to remain logged in when you leave your room? KDE has an option "Lock Screen" option that takes 2 seconds to implement (one mouse click) and then requires your password in order to unlock the screen. I really don't understand what you're thinking of. If you object to people using your computer then log out when it's unattended or simply lock the screen if that option is available on your system. If you want to find out if someone is using your computer when you're not around (some weird kind of "sting" operation) then install hidden video cameras pointed at your computer.
ciao,
jdk
 
Old 09-24-2011, 04:37 AM   #8
Konphine
Member
 
Registered: Jul 2011
Location: Phoenix, New York
Distribution: Slackware 13.37
Posts: 376

Original Poster
Rep: Reputation: 11
Well, I guess that's it then.

Also, the reason I didn't lock it is because I felt locking my door is just as good as locking my computer (I know I know).

Thank you for your help.
 
Old 09-24-2011, 04:37 AM   #9
firefiber
LQ Newbie
 
Registered: Sep 2011
Posts: 16

Rep: Reputation: Disabled
Quote:
Originally Posted by Konphine View Post
There's nothing under /var/log I can check?
Check the auth.log I s'pose. And as far as I know wtmp and utmp are the login logs. But I'm not sure about this, 'cause it seems to differ on different distros. On my Ubuntu it's all there, but Gentoo lists only wtmp.

EDIT: also check lastlog. I dunno why I forgot to mention that. :\

Last edited by firefiber; 09-24-2011 at 04:42 AM.
 
Old 09-24-2011, 04:44 AM   #10
Konphine
Member
 
Registered: Jul 2011
Location: Phoenix, New York
Distribution: Slackware 13.37
Posts: 376

Original Poster
Rep: Reputation: 11
How exactly do I check these files? They're primarily consisted of ^@'s.
 
Old 09-24-2011, 04:50 AM   #11
Nylex
LQ Addict
 
Registered: Jul 2003
Location: London, UK
Distribution: Slackware
Posts: 7,464

Rep: Reputation: Disabled
Not everything in /var/log is plain text. You can use the "lastlog" command to read the contents of /var/log/lastlog.
 
Old 09-24-2011, 04:52 AM   #12
Konphine
Member
 
Registered: Jul 2011
Location: Phoenix, New York
Distribution: Slackware 13.37
Posts: 376

Original Poster
Rep: Reputation: 11
Oh, thank you. I didn't realize they were commands. :/ I'm used to /usr/bin stuff.
 
Old 09-24-2011, 04:53 AM   #13
Nylex
LQ Addict
 
Registered: Jul 2003
Location: London, UK
Distribution: Slackware
Posts: 7,464

Rep: Reputation: Disabled
No. The command "lastlog" reads the file /var/log/lastlog.
 
Old 09-24-2011, 04:54 AM   #14
firefiber
LQ Newbie
 
Registered: Sep 2011
Posts: 16

Rep: Reputation: Disabled
Quote:
Originally Posted by Konphine View Post
How exactly do I check these files? They're primarily consisted of ^@'s.
You can't actually read them, they're binary files. You can issue lastlog in a terminal to view the contents in /var/log/lastlog.
Also, read this: http://www.cyberciti.biz/tips/linux-...ords-file.html

EDIT: woops, was too slow. What the poster above me said, basically.

Last edited by firefiber; 09-24-2011 at 04:56 AM.
 
Old 09-24-2011, 04:54 AM   #15
Konphine
Member
 
Registered: Jul 2011
Location: Phoenix, New York
Distribution: Slackware 13.37
Posts: 376

Original Poster
Rep: Reputation: 11
Ohhhhhhh okay. I presume it would be for security reasons, thank you.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Monitoring Flash usage Shamis Linux - Embedded & Single-board computer 2 04-25-2011 02:16 PM
Monitoring SSH usage on my box bucovaina78 Linux - Security 12 11-18-2008 02:01 AM
Monitoring memory usage kenneho Linux - Server 4 10-02-2008 09:35 AM
Monitoring System Usage dunmarie Linux - Newbie 2 11-11-2003 01:37 AM
Monitoring processor usage bananaman Linux - General 3 04-22-2003 07:21 AM


All times are GMT -5. The time now is 04:55 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration