Is there any way to find out if some user, a non-root user logged into my system remotely (using rsh, rxterm or SSH) within say, the last 24 hours? I do not have root permissions on my system.
I'm not sure if you can determine within the last 24 hours, without being root and able to look at log files, but you can use the "who" console command to see who is currently logged on via which method.
So I can only see current ones, I can't see some log file unless I'm root? What is so important about logs that only roots can see?
Logs contain EVERYTHING, with no form of filters. The ability to view the logs could circumvent other restrictions that you have in place.
As in.. viewing logs will give you the ability to overcome restrictions? *.*
Depending on what's in the logs, yes.
if the user has permission logs can be changed, but that doesn't mean they are worthless.
a "who" and a "last" command will give you an idea of who has logged in.
look at your securtiy log file for remote access, on a Redhat based system RHEL/Fedora/Centos etc look at /var/log/secure
give us some info on the distro you're using and we can go a bit deeper.
But Winged said I don't have permission to view logs.. since I'm not root
totally missed the part that you said you didn't have root permissions to view the logs.
then last and w are the only really shots.
No problem. And thanks for you trying to help![]()
There are currently 2 users browsing this thread. (0 members and 2 guests)
Bookmarks