Find Original user who executed the command Post: 303009684

Sponsored Content

Top Forums UNIX for Beginners Questions & Answers Find Original user who executed the command Post 303009684 by jim mcnamara on Monday 18th of December 2017 12:32:04 PM

12-18-2017

Registered User

FWIW - if some process runs a long-running process, chances are good the code calls setsid() otherwise the user's process would be required to stay there waiting for the process to end, and the person who started the process would have to wait for termination.

setsid() creates a new session, allowing the process to be left running without tying up the process that started it.

This means that ptree is required, or messing with a lot of ps output as mentioned
above. ptree may mean root is required.

On googling, the long running process will have these envrionment variables set:

Code:

SUDO_UID        Set to the user ID of the user who invoked sudo
SUDO_USER       Set to the login of the user who invoked sudo

So if tell us your OS we can tell you, probably, how to look at the environment variables in the long running process, example for Solaris:

Code:

psargs -e [pid of long running process] | grep SUDO

jim mcnamara

View Public Profile for jim mcnamara

Find all posts by jim mcnamara

10 More Discussions You Might Find Interesting

1. UNIX for Dummies Questions & Answers

how to find the exit status for the last executed command

I am executing a find command in my script i.e find $2 -type f -name '*.gif' -mtime +$1 -exec rm {} \; how do i check that this command is executed properly.. i would lke t trap the errror and display my error message kinly help.. this is an urgent issue.

2. UNIX for Advanced & Expert Users

Capturing commands executed by user

Hello Unix Champs, For keeping audit trail, I want to log the commands entered by the normal users, on their terminal into a text file. I tried putting a "script -a username.timestamp.txt" in the user profile file, but script command stops execution when user types exit or presses CTRL+D...

3. Solaris

I want to know whole day commands executed by particular user

Hi all I want to know the commands executed a by particular user .. for the whole day on my machine. I have checked out with the commad $lastcomm <user> It is throwing an error called: .. /var/adm/pacct: No such file or directory Can u help me in this regard.. Thank U...

4. Solaris

whole day commands executed by particular user

5. Cybersecurity

Help Required: Command to find IP address and command executed of a user

Hi, I am trying to write a script which would figure out who has run which command and their IP. As i dont have any clue as to which commands would do this job, i request some gurus to help me on this. Thanks Vishwas

6. Shell Programming and Scripting

Capture the original user

in our environment role ids are created in unix to which user does su. say my individual id is drout and a role is devid. i will login to drout the su - devid password : <nothing > password less role id then i will login to devid. can i write a function and pass it in a script while i...

7. UNIX for Dummies Questions & Answers

Find last executed timestamp

Hi, on our hp-ux box we have 100s of shell scripts in a bin folder. Now i have to figure out which scripts are not being used at all. The timestamp for these are the ones when they were promoted to this 'bin' folder. Now, how can I find when was the last time each of these scripts were run? I...

8. AIX

How to find the log for executed command in IBM AIX?

In Unix If we executed any command where will generate the particluar log related to command in Unix.

9. Shell Programming and Scripting

Find logon user based on executed script proc id

Hi, i have requirement to find logged in user based on process id. i have below scenario. 1. all my users will logon to unix box using ssh from windows system. 2. after successful logon they will sudo to common user. ex. sudo -su edadm lot of users are executing jobs from edadm user and...

10. HP-UX

Tracking what commands were executed after sudo to another user

All team members has sudo access to user "batch55". Need to track all the commands used by team members after sudo to "batch55". Using HP-UX and ksh shell in our environment. How can i acheive this? Thanks In Advance.

LEARN ABOUT OPENDARWIN

setsid

SETSID(2)						      BSD System Calls Manual							 SETSID(2)

NAME

     setsid -- create session and set process group ID

SYNOPSIS

     #include <sys/types.h>
     #include <unistd.h>

     pid_t
     setsid(void);

DESCRIPTION

     The setsid function creates a new session.  The calling process is the session leader of the new session, is the process group leader of a
     new process group and has no controlling terminal.  The calling process is the only process in either the session or the process group.

     Upon successful completion, the setsid function returns the value of the process group ID of the new process group, which is the same as the
     process ID of the calling process.

ERRORS

     If an error occurs, setsid returns -1 and the global variable errno is set to indicate the error, as follows:

     [EPERM]		The calling process is already a process group leader, or the process group ID of a process other than the calling process
			matches the process ID of the calling process.

SEE ALSO

     setpgid(3), tcgetpgrp(3), tcsetpgrp(3)

STANDARDS

     The setsid function is expected to be compliant with the IEEE Std 1003.1-1988 (``POSIX.1'') specification.

BSD
								   June 4, 1993 							       BSD