Unix - Logs

nag_sundaram · #1 (**permalink**) 07-11-2005

Hi All,

Can anybody tell me, how to trace out user access to the Unix Server Machine, (i,e) I want to find out the user who had executed some commands to alter the cron file.

Regards
Nag

jim mcnamara · #2 (**permalink**) 07-11-2005

I have not heard of anything like that for HPUX.

You need to restrict access to cron and at on your machine. They're dangerous in the security sense.

plimpix · #3 (**permalink**) 07-11-2005

Has system auditing been switched on ?

If you go into sam -> Auditing and Security. -> "Events."

It won't ask you if you need to convert to a trusted system. If it doesn't ask this then you should be able to find the information in audited users.. That's if the user your wanting to check has been audited against mind you !

This is on HP-UX, on Solaris you need to enable BSM..

Only other command i can think of is who to see who was on the system the time the cron was modified..

Hope this helps..

Kenny

nag_sundaram · #4 (**permalink**) 07-12-2005

Thanks a lot Kenny & Jim. But,i have one more question,

How can i view the log files?

More UNIX and Linux Forum Topics You Might Find Helpful
Thread	Thread Starter	Forum	Replies	Last Post
is it possible to check logs in UNIX who deleted the files?	james_falco	UNIX for Dummies Questions & Answers	1	07-06-2007 02:04 PM
Logs	charbel	Shell Programming and Scripting	5	05-04-2006 08:59 AM
rcp logs	ilkergu	HP-UX	0	08-08-2005 04:51 AM
Logs	jtapia	UNIX Desktop for Dummies Questions & Answers	4	03-28-2002 12:12 PM
Clear logs in unix sco 5.0.4	jtapia	UNIX Desktop for Dummies Questions & Answers	1	03-27-2002 08:24 PM

Thread Tools	Search this Thread
Show Printable Version Email this Page	Search this Thread: Advanced Search
Display Modes	Rate This Thread
Switch to Linear Mode Hybrid Mode Switch to Threaded Mode	Rate This Thread:


	Powered by