Detecting failed su to root attempts

This one-liner will list all failed "su" attempts to the superuser account.

This one-liner will list all failed "su" attempts to the superuser account. You'll be amazed at how many users...

attempt to hack root account.

cat /var/adm/sulog | nawk '$4 == "-" {print $0}' | grep 'root$'


This was last published in October 2002

Dig Deeper on Alternative OS security: Mac, Linux, Unix, etc.

PRO+

Content

Find more PRO+ content and other member only offers, here.

Start the conversation

Send me notifications when other members comment.

By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

Please create a username to comment.

-ADS BY GOOGLE

SearchCloudSecurity

SearchNetworking

SearchCIO

SearchConsumerization

SearchEnterpriseDesktop

SearchCloudComputing

ComputerWeekly

Close