Re: logging uf su usage

[Carl Mummert]

>From message <[EMAIL PROTECTED]>  :
> ive downloaded the source and unpacked them already, almost ready to
>recompile.  may i know how/where do I add this removed compile time flag
>thats needed to enable this logging ?
>chad


from su.c:
/* su for GNU.  Run a shell with substitute user and group IDs.
   Copyright (C) 92, 93, 94, 95, 1996 Free Software Foundation, Inc.


etc



   Compile-time options:
   -DSYSLOG_SUCCESS Log successful su's (by default, to root) with syslog.
   -DSYSLOG_FAILURE Log failed su's (by default, to root) with syslog.

   -DSYSLOG_NON_ROOTLog all su's, not just those to root (UID 0).
   Never logs attempted su's to nonexistent accounts.
*/



After you run ./configre from the shellutils-1...  directory, cd to src and edit
the makefile there.  Go to the sule to make su (it starts with su: ) and
edit the command below to add whatever flags you want.  ie

   gcc blah blah

becomes
  
  gcc -DSTUFF blah blah


then run 'make su' in the src directory.
then tune 'strip su'
then cp the su program somewhere, and chmod it to 4555


Carl

Re: logging uf su usage

[Chad A. Adlawan]

 ive downloaded the source and unpacked them already, almost ready to
recompile.  may i know how/where do I add this removed compile time flag
thats needed to enable this logging ?
chad


> 
> There is (was at the time) a bug against su because, somehow, the
> compile-time flag needed to enable this logging had been removed.
> I noticed this change when I upgraded from hamm to slink.
> 

Re: logging uf su usage

[Andrei Ivanov]

>   does the default syslog.conf log all usage of the "su" command ?  if so
> may i knoe where ?

There is logging of su in /var/log/auth.log
Andrew


---
 Andrei S. Ivanov  
 [EMAIL PROTECTED]   
 UIN 12402354  
 http://members.tripod.com/AnSIv   <--Little things for Linux.

Re: logging uf su usage

[Carl Mummert]

I noticed this problem a while back.

There is (was at the time) a bug against su because, somehow, the
compile-time flag needed to enable this logging had been removed.
I noticed this change when I upgraded from hamm to slink.

My solution was to recompile su.  It is in the shellutils package;
you can just recompile su and copy it over, instead of recompiling
everything, or otherwise you can make a new deb package and install
it.

Unfortunately, su is too sensitive a file for me to distribute
my recompiled version.

Carl

logging uf su usage

[Chad A. Adlawan]

hello list,
  does the default syslog.conf log all usage of the "su" command ?  if so
may i knoe where ?
  ive been reading the syslod.conf man page but im not sure whether i
understood everything.  and if it doesnt, may i knoe how do i tell syslog to
log all usage of the "su" commang ?
TIA,
chad