Detecting failed su to root attempts

This one-liner will list all failed "su" attempts to the superuser account.

This one-liner will list all failed "su" attempts to the superuser account. You'll be amazed at how many users

attempt to hack root account.

cat /var/adm/sulog | nawk '$4 == "-" {print $0}' | grep 'root$'


This was first published in October 2002

Dig deeper on Alternative OS security: Mac, Linux, Unix, etc.

Pro+

Features

Enjoy the benefits of Pro+ membership, learn more and join.

0 comments

Oldest 

Forgot Password?

No problem! Submit your e-mail address below. We'll send you an email containing your password.

Your password has been sent to:

SearchCloudSecurity

SearchNetworking

SearchCIO

SearchConsumerization

SearchEnterpriseDesktop

SearchCloudComputing

ComputerWeekly

Close