LinuxQuestions.org
View the Most Wanted LQ Wiki articles.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Red Hat
User Name
Password
Red Hat This forum is for the discussion of Red Hat Linux.

Notices

Reply
 
LinkBack Search this Thread
Old 06-07-2012, 04:53 PM   #1
getraj.12@gmail.com
LQ Newbie
 
Registered: Jul 2010
Location: Bangalore, India
Distribution: RedHat, Suse, Solaris
Posts: 9

Rep: Reputation: 0
Question Sudo root logs history in RHEL 5


Dear all,

I would like to find out which users executed "sudo su -" commands and what are the commands they have executed after logging in as sudo root 15 days back.
Where the command history files / sudo log history files are stored so that I can trackdown which user who brought the adobe app server down.

I am aware of psacct feature in linux but unfortunately the service was disabled.
Appreciate your help !!!
 
Old 06-07-2012, 04:58 PM   #2
em31amit
Member
 
Registered: Apr 2012
Location: /root
Distribution: Ubuntu, Redhat, Fedora, CentOS
Posts: 190

Rep: Reputation: 55
you can find the information in /var/log/secure file


but you should configure auditing to further dig about the commands
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off
Trackbacks are Off
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
sudo cd /root gives 'sudo: cd: command not found'. stf92 Linux - Newbie 4 03-03-2012 09:05 AM
[SOLVED] How can I view history logs of terminal usage? chinho Linux - Server 3 12-23-2010 10:49 AM
Command history logs for linux/Solaris talat Linux - Security 2 01-16-2010 06:01 AM
Can't use sudo, only account that's not root is not a sudo'ers [Ubuntu 9.10] randyriver10 Linux - Desktop 1 01-09-2010 07:56 PM
History logs Jeetn Linux - Newbie 3 05-20-2009 11:19 AM


All times are GMT -5. The time now is 04:42 PM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration