From owner-freebsd-questions Wed Aug 8 8:44:42 2001 Delivered-To: freebsd-questions@freebsd.org Received: from mithras.erudition.net (mithras.erudition.net [209.9.98.138]) by hub.freebsd.org (Postfix) with ESMTP id 43DEA37B401 for ; Wed, 8 Aug 2001 08:44:39 -0700 (PDT) (envelope-from dougp@mithras.erudition.net) Received: (from dougp@localhost) by mithras.erudition.net (8.11.4/8.11.1) id f78Fic974251; Wed, 8 Aug 2001 11:44:38 -0400 (EDT) (envelope-from dougp) Date: Wed, 8 Aug 2001 11:44:38 -0400 From: Doug Poland To: Eric Anderson Cc: freebsd-questions@FreeBSD.ORG Subject: Re: finding user of su Message-ID: <20010808114438.A73888@polands.org> References: <3B715A4A.65BD8221@centtech.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: <3B715A4A.65BD8221@centtech.com>; from anderson@centtech.com on Wed, Aug 08, 2001 at 10:27:06AM -0500 Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG On Wed, Aug 08, 2001 at 10:27:06AM -0500, Eric Anderson wrote: > Is there a tool (or how would I write one) that can tell me the original > user after an su? Basically, if I su to root, how can I tell who I su'd > from? > #grep su /var/log/messages -- Regards, Doug To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message