login roota

[Jan Vitek]

> On Tue, 20 Feb 2001, Jan Povolny wrote:
> 
> > Nemyslim si, ze by to bylo zas tak pracne, kdyz to nektery 
> loger (asi pam)
> > pise do messages, tak proc by to nemohl psat jinam. Jen na 
> to nemuzu v
> > manualu k pamu prijit, tak jsem se zeptat v konferenci.
> 
> Do syslogu neco pise pam_warn, ale asi ho tezko presvedcite, 
> aby to delal
> prave jen pro roota. Ledaze byste pouzil muj experimentalni pam_if,
> pripadne kombinaci neceho jako pam_rootok a tajnych magickych flagu
> v konfiguraku (poradim jen, ze tam figuruji znaky [], zbytek 
> si najdete
> ve zdrojaku ;>).
> 
> Nebo si napiste vlastni modul.
> 
> --Pavel Kankovsky aka Peak  [ Boycott 
> Microsoft--http://www.vcnet.com/bms ]
> "Resistance is futile. Open your source code and prepare for 
> assimilation."
> 



/etc/login.defs:

#                                                                                          
# Enable "syslog" logging of su activity - in addition to sulog file logging.              
# SYSLOG_SG_ENAB does the same for newgrp and sg.                                          
#                                                                                          
SYSLOG_SU_ENAB          yes                                                                
SYSLOG_SG_ENAB          yes                                                                

#                                                                                          
# If defined, all su activity is logged to this file.                                      
#                                                                                          
SULOG_FILE      /var/log/sulog                                                             

pak uz staci jen zakazat login roota a pouzivat jen su



-- Jan Vitek