I can't say too much for Solaris, but on a Linux box it's logged. I would assume it be the same for Solaris.
Mike Fetherston. ----- Original Message ----- From: "NP, Ram (CORP, GEITC)" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Wednesday, March 13, 2002 5:23 AM Subject: How to know when was root passwd changed > Hello there, > We have an environment where the root password on a solaris box would be > there with more than one person and there sure are situations where the root > password is changed without prior notice. Now could some one tell me if > there is a way to find out when(time) was the Root passwd changed. I > understand one way would be using Tripwire. since we didnt have tripwire > earlier on the machine is there a way to recover the time. > thank you > ram > > > "THIS E-MAIL MESSAGE ALONG WITH ANY ATTACHMENTS IS INTENDED ONLY FOR THE > ADDRESSEE and may contain confidential and privileged information. > If the reader of this message is not the intended recipient, > you are notified that any dissemination, distribution or copy of this > communication is strictly Prohibited. > If you have received this message by error, please notify us > immediately, return the original mail to the sender and delete the > message from your system." > >
