LinuxQuestions.org

LinuxQuestions.org (http://www.linuxquestions.org/questions/index.php)
-   Red Hat (http://www.linuxquestions.org/questions/forumdisplay.php?f=31)
-   -   Sudo root logs history in RHEL 5 (http://www.linuxquestions.org/questions/showthread.php?t=949093)

getraj.12@gmail.com 06-07-2012 04:53 PM

Sudo root logs history in RHEL 5
 
Dear all,

I would like to find out which users executed "sudo su -" commands and what are the commands they have executed after logging in as sudo root 15 days back.
Where the command history files / sudo log history files are stored so that I can trackdown which user who brought the adobe app server down.

I am aware of psacct feature in linux but unfortunately the service was disabled.
Appreciate your help !!!

em31amit 06-07-2012 04:58 PM

you can find the information in /var/log/secure file


but you should configure auditing to further dig about the commands


All times are GMT -5. The time now is 02:04 AM.