On Thu, Dec 21, 2000 at 08:25:24AM -0600, Jim Baxter wrote:
> First let me say I am sorry about the no subject message. Not a good day so
> far.
Da nada.
> Could someone please tell me how I can determine when a programs was run and
> who ran it?
> I hope this is possible. The parameters associated with it would be most
> helpful also. I need to find out who did a major dumb dumb.
There's good news, and there's bad news.
The good news is that there is process accounting, along the BSD model, for
Linux.
The bad news is that it's not installed and enabled by default.
If you hadn't already installed and enabled accounting for your system--
I would do that if it's in a multi-user environment, and you need to find
out who to shoo--er, re-train if something was done--then you could only
figure out what was done indirectly, e.g., syslog, side effects, etc. by
timestamp, and using something like last to see who was on at that time.
Cheers,
--
Dave Ihnat
[EMAIL PROTECTED]
_______________________________________________
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list
