2 .\" Copyright (c) 1994, Sun Microsystems, Inc. All Rights Reserved.
3 .\" Copyright 1989 AT&T
4 .\" The contents of this file are subject to the terms of the Common Development and Distribution License (the "License"). You may not use this file except in compliance with the License.
5 .\" You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE or http://www.opensolaris.org/os/licensing. See the License for the specific language governing permissions and limitations under the License.
6 .\" When distributing Covered Code, include this CDDL HEADER in each file and include the License file at usr/src/OPENSOLARIS.LICENSE. If applicable, add the following below this CDDL HEADER, with the fields enclosed by brackets "[]" replaced with your own identifying information: Portions Copyright [yyyy] [name of copyright owner]
7 .TH SULOG 4 "Jun 6, 1994"
9 sulog \- su command log file
19 The \fBsulog\fR file is a record of all attempts by users on the system to
20 execute the \fBsu\fR(1M) command. Each time \fBsu\fR(1M) is executed, an
21 entry is added to the \fBsulog\fR file.
24 Each entry in the \fBsulog\fR file is a single line of the form:
28 \fBSU\fR \fBdate\fR \fBtime\fR
29 \fIresult port user\fR\fB-\fR\fInewuser\fR
43 The month and date \fBsu\fR(1M) was executed. \fBdate\fR is displayed in the
44 form \fImm\fR\fB/\fR\fBdd\fR where \fImm\fR is the month number and \fBdd\fR
45 is the day number in the month.
54 The time \fBsu\fR(1M) was executed. \fBtime\fR is displayed in the form
55 \fIHH\fR\fB/\fR\fIMM\fR where \fIHH\fR is the hour number (24 hour system) and
56 \fIMM\fR is the minute number.
65 The result of the \fBsu\fR(1M) command. A ` + ' sign is displayed in this
66 field if the su attempt was successful; otherwise a ` - ' sign is displayed.
75 The name of the terminal device from which \fBsu\fR(1M) was executed.
84 The user id of the user executing the \fBsu\fR(1M) command.
93 The user id being switched to with \fBsu\fR(1M).
98 \fBExample 1 \fRA sample \fBsulog\fR file.
101 Here is a sample \fBsulog\fR file:
106 SU 02/25 09:29 + console root-sys
107 SU 02/25 09:32 + pts/3 user1-root
108 SU 03/02 08:03 + pts/5 user1-root
109 SU 03/03 08:19 + pts/5 user1-root
110 SU 03/09 14:24 - pts/5 guest3-root
111 SU 03/09 14:24 - pts/5 guest3-root
112 SU 03/14 08:31 + pts/4 user1-root
121 \fB\fB/var/adm/sulog\fR\fR
130 \fB\fB/etc/default/su\fR\fR
133 contains the default location of \fBsulog\fR