This is a discussion on Track root password changes within the Linux Security forums, part of the System Security and Security Related category; Hello !! Can anyone tell if there is a way to track the root password changes? For that matter, any user ...
|
|||||||
| FAQ | Members List | Calendar | Search | Today's Posts | Mark Forums Read |
|
|||
|
On Tue, 11 Nov 2003 09:59:37 -0800, Mulbagal wrote:
> Hello !! > > Can anyone tell if there is a way to track the root password changes? > For that matter, any user changing his/her password? > > If yes, please write as how. > > TIA > DK Just make a copy of the password file on to read-only media (CDR) and run diff on it and check for changes its primitive but will do what you want and you could write a perl script or bash script whatever to check it every once and a while and mail you the differences.. john doe what do ya know ho ho |
|
|||
|
Mulbagal <dubbakor@hotmail.com> wrote:
> Hello !! > Can anyone tell if there is a way to track the root password changes? > For that matter, any user changing his/her password? > If yes, please write as how. Try: man chage Take a look at the "-l" switch. -- Michael Heiming Remove +SIGNS and www. if you expect an answer, sorry for inconvenience, but I get tons of SPAM |
|
|||
|
Mulbagal <dubbakor@hotmail.com> wrote:
> Thanks to both of you !! > I think the "chage -l root" gives what I want for now, though I wanted > something logged in the systems log or so. You can run something like this from cron if you like: initlog -c "echo password `chage -l root`" Hint: man initlog -- Michael Heiming Remove +SIGNS and www. if you expect an answer, sorry for inconvenience, but I get tons of SPAM |