Linux.com

Home Linux Community Forums Software Command Line not whoami, but whowasi?

not whoami, but whowasi?

Link to this post 30 Jul 11

Once I've 'sudo su' to a different user, is it possible to find out who I was?

Scenario:
We have 3 users who switch to a build-user to do the builds. I want the build process to be able to figure out who really started the build.

Thanks in advance.

Link to this post 30 Jul 11

In Fedora I have a log called secure that would show changes. Check out /var/log/secure and see if your distro has this log. If not, look in /var/log/ and see if there's any other similarly named security log.

Link to this post 30 Jul 11

Did not see that on my system. Nothing equivalent.

Link to this post 30 Jul 11

Well, maybe the OP can tell us what distro he's using. Sudo su is more something you would use on an Ubuntu platform. I wonder if /var/log messages would contain similar info?

Link to this post 30 Jul 11

Goineasy9 wrote:

In Fedora I have a log called secure that would show changes. Check out /var/log/secure and see if your distro has this log. If not, look in /var/log/ and see if there's any other similarly named security log.

This is correct, /var/log/secure will give you information about all privileged escalations.

Link to this post 31 Jul 11

saqman2060 wrote:

Did not see that on my system. Nothing equivalent.

AFAIK it might be something like /var/log/access or something like that....

Who we are ?

The Linux Foundation is a non-profit consortium dedicated to the growth of Linux.

More About the foundation...

Frequent Questions

Join / Linux Training / Board