Track root password changes

This is a discussion on Track root password changes within the Linux Security forums, part of the System Security and Security Related category; Hello !! Can anyone tell if there is a way to track the root password changes? For that matter, any user ...


Go Back   Usenet Forums > System Security and Security Related > Linux Security

FAQ Members List Calendar Search Today's Posts Mark Forums Read
  #1 (permalink)  
Old 11-11-2003
Mulbagal
 
Posts: n/a
Default Track root password changes

Hello !!

Can anyone tell if there is a way to track the root password changes?
For that matter, any user changing his/her password?

If yes, please write as how.

TIA
DK
Reply With Quote
  #2 (permalink)  
Old 11-11-2003
John Doe
 
Posts: n/a
Default Re: Track root password changes

On Tue, 11 Nov 2003 09:59:37 -0800, Mulbagal wrote:

> Hello !!
>
> Can anyone tell if there is a way to track the root password changes?
> For that matter, any user changing his/her password?
>
> If yes, please write as how.
>
> TIA
> DK


Just make a copy of the password file on to read-only media (CDR) and run
diff on it and check for changes its primitive but will do what you want
and you could write a perl script or bash script whatever to check it
every once and a while and mail you the differences..


john doe what do ya know ho ho
Reply With Quote
  #3 (permalink)  
Old 11-11-2003
Michael Heiming
 
Posts: n/a
Default Re: Track root password changes

Mulbagal <dubbakor@hotmail.com> wrote:
> Hello !!


> Can anyone tell if there is a way to track the root password changes?
> For that matter, any user changing his/her password?


> If yes, please write as how.


Try:
man chage

Take a look at the "-l" switch.

--
Michael Heiming

Remove +SIGNS and www. if you expect an answer, sorry for
inconvenience, but I get tons of SPAM
Reply With Quote
  #4 (permalink)  
Old 11-12-2003
Mulbagal
 
Posts: n/a
Default Re: Track root password changes

Thanks to both of you !!

I think the "chage -l root" gives what I want for now, though I wanted
something logged in the systems log or so.

Thanks Agasin,
DK
Reply With Quote
  #5 (permalink)  
Old 11-12-2003
Michael Heiming
 
Posts: n/a
Default Re: Track root password changes

Mulbagal <dubbakor@hotmail.com> wrote:
> Thanks to both of you !!


> I think the "chage -l root" gives what I want for now, though I wanted
> something logged in the systems log or so.


You can run something like this from cron if you like:

initlog -c "echo password `chage -l root`"

Hint:
man initlog

--
Michael Heiming

Remove +SIGNS and www. if you expect an answer, sorry for
inconvenience, but I get tons of SPAM
Reply With Quote
Reply
Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is Off
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT +1. The time now is 06:01 AM.


Powered by vBulletin® Version 3.7.3
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.0.0