root restrictions

[Julie A. Levell]

>>In article <8439 at awdprime.UUCP> shaggy at kleikamp.austin.ibm.com (David J. Kleikamp) writes:
>
>As I recall (and I can ask Tom when I see him tomorrow), "su" does not
>support the /usr/adm/sulog like other "su"'s do.  It performs auditing,
>which is implmented in such a way that it can be made untamperable.
>
Well, thanks to apar ix16167, su will now report to syslog.  Just add

auth.debug      /tmp/yourfile /* OR /dev/console, or whatever */

to /etc/syslog.conf file, and wa-la su's will be recorded.

The fix should be in 2007, otherwise you can request it from defect
support.

>John F. Haugh II        | Distribution to  | UUCP: ...!cs.utexas.edu!rpp386!jfh

-- 
*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=
Julie A. Levell  IBM  Austin, Texas      Internet: julie at aixwiz.austin.ibm.com
IBMNET: JULIEL at AUSVMQ 4C-29/994       SpeakNet:  823-5178 (Tie 793-5178)
"Let's use the ODM Interface"  Commander William Riker  STTNG  "The Nth Degree"