Detecting failed su to root attempts

This one-liner will list all failed "su" attempts to the superuser account.

This one-liner will list all failed "su" attempts to the superuser account. You'll be amazed at how many users...

attempt to hack root account.

cat /var/adm/sulog | nawk '$4 == "-" {print $0}' | grep 'root$'


This was first published in October 2002

Dig Deeper

PRO+

Content

Find more PRO+ content and other member only offers, here.

0 comments

Oldest 

Forgot Password?

No problem! Submit your e-mail address below. We'll send you an email containing your password.

Your password has been sent to:

-ADS BY GOOGLE

SearchCloudSecurity

SearchNetworking

SearchCIO

SearchConsumerization

SearchEnterpriseDesktop

SearchCloudComputing

ComputerWeekly

Close