On 14:25 20 Mar 2003, Klotz, Brian <[EMAIL PROTECTED]> wrote:
| I teach a Linux basics course and each term I have the problem of students
| who do an su to become root, then rather than exiting, they su again to go
| back to their regular account.  The trouble is identifying when someone has
| done this (they usually don't remember).  The "who" command only shows login
| shells (AFAIK) so it does not reveal when someone has su-ed.
| 
| Does anyone know of a way to list all of the users currently logged in,
| including when someone has su-ed to become another user?

Try this:

        ps axfu

That neatly shows the process tree and the users of each process.
You will see a parent-child-grandchild of user-root-user in the case
you describe.

Cheers,
-- 
Cameron Simpson, DoD#743        [EMAIL PROTECTED]    http://www.zip.com.au/~cs/

Talk is the bastard redheaded stepchild of email and the telephone.
        - Geoff Miller, [EMAIL PROTECTED]

Reply via email to