-   Red Hat (
-   -   Sudo root logs history in RHEL 5 (

getraj.12 06-07-2012 04:53 PM

Sudo root logs history in RHEL 5
Dear all,

I would like to find out which users executed "sudo su -" commands and what are the commands they have executed after logging in as sudo root 15 days back.
Where the command history files / sudo log history files are stored so that I can trackdown which user who brought the adobe app server down.

I am aware of psacct feature in linux but unfortunately the service was disabled.
Appreciate your help !!!

em31amit 06-07-2012 04:58 PM

you can find the information in /var/log/secure file

but you should configure auditing to further dig about the commands

All times are GMT -5. The time now is 06:58 AM.