Your authlog shoud have this (or sulog).
You can use wrapper for su that takes action, also.
On Mar 13, 2009, at 9:43 AM, "Anne Moore" <diabeticithink@xxxxxxxxx>
wrote:
HI All,
Does anyone know how I'd make an automatic email fly off every time
a user
SU's to root? We're have security issues, and we're needed to track
it.
Thank you for your assistance with this.
Anne
--
redhat-list mailing list
unsubscribe mailto:redhat-list-request@xxxxxxxxxx?subject=unsubscribe
https://www.redhat.com/mailman/listinfo/redhat-list
--
redhat-list mailing list
unsubscribe mailto:redhat-list-request@xxxxxxxxxx?subject=unsubscribe
https://www.redhat.com/mailman/listinfo/redhat-list