Hi,
I'm in a Red Hat Academy class at my highschool and we've been having some fun lately.
Th whole room (except for the teacher's comp of course) is open. By which I mean that within the room, we are free to roam around inside eacothers computers. There is no threat because we use a very simple system.
If you format someone elses hard drive, you fail the class.

Anyway, we've been ejecting eachother's CD drives the last couple of days and it's beginning to get old now. People log in and out too fast to use 'who' to see who's SSH 'd into my computer. Where is the log file that records who used ssh to get into my computer and when?

I'm just curious

Thanks

/var/log/secure
do they have speakers?
If so
cat /dev/random > /dev/dsp0 or whatever their sound card is
hehehe

hehehe, thats a good idea. But no, they don't
I'll need to remember that one

Actually, that file is likely to be quite large. Might be better to look at the bottom....
tail /var/log/secure

Also, if you don't have a reason to run sshd, I would shut it down.
chkconfig --level 2345 sshd off
/etc/rc.d/init.d/sshd stop or service sshd stop

I would also look into blocking everybody on your network with iptables.