> Hi folks, > > Wheneven I do a "su abc" it was logged under /var/log/messages. > How can I configure /etc/syslog.conf so that when I do a "su abc" below > messages would not appear in /var/log/messages. > I still want other user to log to /var/log/messages when they issue "su user" > > Oct 24 14:53:41 linux01 su(pam_unix)[586]: session opened for user abc by > (uid=0) > Oct 24 14:53:42 linux01 su(pam_unix)[586]: session closed for user abc You are not going to get a response to a question that can only be interpreted as an attempt to cover up certain activities unless you can present a very plausible use case/requirement for this. I and I strongly believe the vast majority of members on this list will *not*help you with anything that is (or could be) illegal in any way. Regards Bram Mazda Motor Logistics Europe NV, Blaasveldstraat 162, B-2830 Willebroek VAT BE 0406.024.281, RPR Mechelen, ING 310-0092504-52, IBAN : BE64 3100 0925 0452, SWIFT : BBRUBEBB -- redhat-list mailing list unsubscribe mailto:redhat-list-request@xxxxxxxxxx?subject=unsubscribe https://www.redhat.com/mailman/listinfo/redhat-list