On 14:25 20 Mar 2003, Klotz, Brian <[EMAIL PROTECTED]> wrote: | I teach a Linux basics course and each term I have the problem of students | who do an su to become root, then rather than exiting, they su again to go | back to their regular account. The trouble is identifying when someone has | done this (they usually don't remember). The "who" command only shows login | shells (AFAIK) so it does not reveal when someone has su-ed. | | Does anyone know of a way to list all of the users currently logged in, | including when someone has su-ed to become another user?
Try this: ps axfu That neatly shows the process tree and the users of each process. You will see a parent-child-grandchild of user-root-user in the case you describe. Cheers, -- Cameron Simpson, DoD#743 [EMAIL PROTECTED] http://www.zip.com.au/~cs/ Talk is the bastard redheaded stepchild of email and the telephone. - Geoff Miller, [EMAIL PROTECTED]