Sudo root logs history in RHEL 5
I would like to find out which users executed "sudo su -" commands and what are the commands they have executed after logging in as sudo root 15 days back.
Where the command history files / sudo log history files are stored so that I can trackdown which user who brought the adobe app server down.
I am aware of psacct feature in linux but unfortunately the service was disabled.
Appreciate your help !!!
you can find the information in /var/log/secure file
but you should configure auditing to further dig about the commands
|All times are GMT -5. The time now is 01:47 AM.|