On Thu, 20 Mar 2003, Klotz, Brian wrote: > > I teach a Linux basics course and each term I have the problem of students > who do an su to become root, then rather than exiting, they su again to go > back to their regular account. The trouble is identifying when someone has > done this (they usually don't remember). The "who" command only shows login > shells (AFAIK) so it does not reveal when someone has su-ed. > > Does anyone know of a way to list all of the users currently logged in, > including when someone has su-ed to become another user?
Off the top of my head: pstree -aup|grep sh|grep -B 1 root andy -- PGP Key Available at http://www.tigerteam.net/andy/pgp
