Trace su to root Post: 302843846

Sponsored Content

Operating Systems AIX Trace su to root Post 302843846 by rbatte1 on Thursday 15th of August 2013 10:33:08 AM

08-15-2013

Moderator

We have a separate server that is just a syslog collector. In /etc/syslog.conf, we have the following entry added along with anything to local disk files you want to keep:-

Code:

*.debug  @111.222.333.444

So anything written via syslog is immediate duplicated to that address.

This traps anything that you have set up to write to the syslog, including login, failed-login, FTP trace(if you have it) SSH connections etc. along with any catastrophic system failure, and the log may give you a clue to get restarted again.

We kept the definition as IP to stop anyone fiddling with the DNS entry first. Of course, then you have to defend the server collecting the syslog output, but that might be easier as you can write firewall rules pretty tightly around it and only let in the syslog traffic. Access for us is via the (virtual) console only and reports can be requested and out-bound FTP is allowed to get the reports to the LAN.

I think that the syslog collector uses software from the security company RSA, but I might be wrong. You could always use your own though.

Robin

rbatte1

View Public Profile for rbatte1

Visit rbatte1's homepage!

Find all posts by rbatte1

10 More Discussions You Might Find Interesting

1. UNIX for Advanced & Expert Users

Trace connections

In my organization in order for anyone to go to any Unix server they have to go through "SERVER A" and login as themselves. Then people are free to go enywhere they please. For example: SERVER A, loggs in as himself telnets to SERVER B, loggs in as guest telnets to SERVER C, loggs in as...

2. UNIX for Dummies Questions & Answers

Run non-root script as root with non-root environment

All, I want to run a non-root script as the root user with non-root environment variables with crontab. The non-root user would have environment variables for database access such as Oracle or Sybase. The root user does not have the Oracle or Sybase enviroment variables. I thought you could do...

3. IP Networking

trace route ip

hi everybody , i have a solaris 5.6 box and i want to trace the route on an ip i treid traceroute but soalris 5.6 does not support it ... is there a command that can be used equivelent to traceroute ? thanks for your help

4. UNIX for Dummies Questions & Answers

Trace DHCP - Help!

Can someone help me with commands to trace DHCP on an HP_UX box? Thanks!

5. HP-UX

how to trace the logs

Hi, Last day, In one of our unix boxes there was an issue wherein few of the directory structures were missing / got deleted. Is there any way by which we can find how it happened, I mean by going through syslog / which user had run what command? Thanks for your help

6. Shell Programming and Scripting

how to supress the trace

Hi I am working in ksh and getting the trace after trying to remove the file which in some cases does not exist: $ my_script loadfirm.dta.master: No such file or directory The code inside the script which produces this trace is the following: ] || rm ${FILE}.master >> /dev/null for...

7. UNIX for Dummies Questions & Answers

How to trace root's activity log

What is the command to check the activity of all users with root access on a Unix platform? Right now, there is like about 20 users with root and someone accidentally made some changes to the crontab and I need to trace which user did it.

8. Solaris

Migration of system having UFS root FS with zones root to ZFS root FS

Hi All After downloading ZFS documentation from oracle site, I am able to successfully migrate UFS root FS without zones to ZFS root FS. But in case of UFS root file system with zones , I am successfully able to migrate global zone to zfs root file system but zone are still in UFS root file...

9. UNIX for Dummies Questions & Answers

Help with trace file

Hi, I am an oracle DBA pretty new to unix. We had one of the filesystems full and a colleague cleared some stuffs to create more space. I just checked now and found there is now more space available. How do i find exactly what he cleared? We have oracle database installed and its a RAC...

10. Shell Programming and Scripting

Stack Trace

Hi All Thought it would be kind of fun to implement a stack trace for a shell script that calls functions within a sub shell. This is for bash under Linux and probably not portable - #! /bin/bash error_exit() { echo "=======================" echo $1 echo...

LEARN ABOUT SUSE

xdg-su

XDG-SU(1)																 XDG-SU(1)

NAME

       xdg-su - run a GUI program as root after prompting for the root password

SYNOPSIS

       xdg-su [-u user] -c command

       xdg-su {--help --manual --version}

DESCRIPTION

       xdg-su provides a graphical dialog that prompts the user for a password to run command as user or as root if no user was specified.

       xdg-su is for use inside a desktop session only.

       xdg-su discards any stdout and stderr output from command.

OPTIONS

       -u user
	      run command as user. The default is to run as root.

       --help Show command synopsis.

       --manual
	      Show this manualpage.

       --version
	      Show the xdg-utils version information.

EXIT CODES

       An exit code of 0 indicates success while a non-zero exit code indicates failure. The following failure codes can be returned:

       1      Error in command line syntax.

       2      One of the files passed on the command line did not exist.

       3      A required tool could not be found.

       4      The action failed.

SEE ALSO

       su(1)

EXAMPLES

       xdg-su -u root -c "/opt/shinythings/bin/install-GUI --install fast"

       Runs the /opt/shinythings/bin/install-GUI command with root permissions.

AUTHOR

       Kevin Krammer, Jeremy White.
       <kevin.krammer@gmx.at>
       <jwhite@codeweavers.com>

This is release 0.5 of the xdg-su Manual			    07/31/2006								 XDG-SU(1)

10 More Discussions You Might Find Interesting

1. UNIX for Advanced & Expert Users

Trace connections

Discussion started by: jraitsev

2. UNIX for Dummies Questions & Answers

Run non-root script as root with non-root environment

Discussion started by: bubba112557

3. IP Networking

trace route ip

Discussion started by: ppass

4. UNIX for Dummies Questions & Answers

Trace DHCP - Help!

Discussion started by: nuGuy