by I seem to have found a bug in 5.0.2....
My "su" logfile doesn't record the original user doing the "su". My
/usr/adm/sulog file always lists "root" as the original user. ie:
SU 02/07 10:27 + ttyp1 root-root
etc.
The second sulog specified with CONSOLE= in /etc/default/su does the same
thing too. I've turned on auditting to see if it would help, but it didn't.
Can anyone suggest a fix?
Thanks,
js.
--
Jean-Sebastien Morisset, Sc. Unix Administrator
Bell Canada, Routing and Trunking Assignments <http://www.bell.ca/>